Privacy Policy

Authoritative version Language of record: Polish (PL). The English version is a non-authoritative translation provided for convenience. In case of conflict, ambiguity, or inconsistency, the Polish version controls. Polish source document: Polityka prywatności

---

1.1. The controller of personal data is:

Full name	Luczak Consulting P.S.A.
Brand	Naster Labs
Address	ul. Suwalska 16 lok. 103, 93-176 Łódź, Poland
KRS	0001056148
NIP	7282876645
REGON	526277912
E-mail	beintouch@luczak.consulting
Phone	+48 42 715 99 50
Website	https://luczak.consulting/

---

2.1. We process personal data only to the extent necessary to operate and secure the Service.

Data category	Examples	Purpose	Legal basis
Server logs	IP address, timestamp, HTTP request, user-agent	security, diagnostics, abuse prevention	GDPR Art. 6(1)(f) (legitimate interests)

2.3. Data subject requests (DSAR) If you send a request (e.g., access/erasure), we process the data you provide in your message (e.g., e-mail address, request content) solely to handle your request — GDPR Art. 6(1)(c) (legal obligation) and GDPR Arts. 12–22.

2.4. At the time of publication, forms/requests are handled by sending an e-mail to the company address and do not create a user account or profile.

---

If we introduce analytics in the future (self-hosted), we will update this policy and related documents.

---

The Service may store functional preferences in your browser:

Key	Purpose	Sent to server?
starlight-theme	theme preference	no
codex13-lang	language preference	no

See: Cookies & Endpoint Storage Policy.

---

5.1. Data may be processed by hosting and infrastructure providers acting as processors under data processing agreements.

5.2. Hosting locations:

Location	Provider
Poland	own servers
Germany	Hetzner Online GmbH
Finland	Hetzner Online GmbH

---

6.1. We do not transfer data outside the EEA.

---

Data	Retention
Server logs	30 days, then deleted or anonymised
Correspondence (contact / DSAR)	handling time + up to 24 months (accountability)

Retention may be extended if required by law or justified (e.g., dispute/claims). After the retention period, correspondence is deleted or anonymised where feasible.

---

Right	Basis
Access	GDPR Art. 15
Rectification	GDPR Art. 16
Erasure (“right to be forgotten”)	GDPR Art. 17
Restriction of processing	GDPR Art. 18
Data portability	GDPR Art. 20
Object	GDPR Art. 21

We respond without undue delay and generally within one month, subject to lawful extensions.

Contact: beintouch@luczak.consulting

---

Poland: President of the Personal Data Protection Office (UODO) ul. Stawki 2, 00-193 Warsaw, Poland https://uodo.gov.pl

---

10.1. The current version is published in the Service.

---

---

GDPR request