Big Names Consulting Group
Privacy policy
Effective from 2 October 2026
We respect your privacy. This policy explains who processes your personal data, for what purposes, and what rights you have. It follows Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).
1. Data controller
The controller of your personal data is BIG NAMES sp. z o.o., Krakowskie Przedmieście 13, 00-071 Warsaw, Poland, entered in the National Court Register (KRS) under number 0000751251, NIP (tax ID) 5252765176, REGON 381452770 (“Big Names”, “we”).
Contact: office@bignames.pl, tel. +48 605 344 191.
2. Data protection contact
For any matter concerning personal data, including exercising your rights, write to iod@bignames.pl or by post to our registered office marked “Data protection”.
3. What data we process, why, and on what legal basis
Correspondence and contact
When you email or call us, we process the data you provide (usually your name, email address, phone number, company name and the content of your message) to answer your enquiry and keep up the correspondence. The legal basis is our legitimate interest in communicating with people who contact us (Art. 6(1)(f) GDPR).
Work with clients and partners
If you enter into a contract with us or represent a client or partner, we process your contact and business details to prepare an offer and to conclude and perform the contract (Art. 6(1)(b) GDPR), or on the basis of our legitimate interest in contacting people designated by a client or partner (Art. 6(1)(f) GDPR).
Legal obligations
We process data contained in accounting and tax documents to comply with legal obligations, in particular tax and accounting law (Art. 6(1)(c) GDPR).
Recruitment
We run recruitment processes for our clients. If you send us your CV or take part in a recruitment process, we process your data to carry out that process: as steps taken prior to entering into a contract (Art. 6(1)(b) GDPR) and, for any data you provide beyond the required minimum, on the basis of your consent (Art. 6(1)(a) GDPR). We share your data with the employer we are recruiting for only with your consent. With your consent, we may also consider your application in future recruitment processes.
Legal claims
Where necessary, we may process data to establish, pursue or defend legal claims, which is our legitimate interest (Art. 6(1)(f) GDPR).
4. Website and cookies
The bignames.pl website is purely informational. It has no forms, uses no analytics or advertising tools, and does not use cookies. Fonts and all other page elements are served from our own server, without third-party providers.
Each time you visit, the server hosting the website may automatically record basic technical information (server logs), such as your IP address, the date and time of the visit, your browser type and the page visited. This information is used solely to keep the website secure and working properly (Art. 6(1)(f) GDPR), is not used to identify visitors, and is deleted after the period set by the hosting provider.
The website contains links to other services. Once you follow them, the privacy rules of those services apply.
5. Recipients of data
Your data may be shared with entities that support our business, only to the extent necessary and under agreements that protect the data: hosting, email and IT service providers, our accounting firm, legal advisers, and associates working with us on projects. In recruitment, the recipient of your data, with your consent, is the employer we are recruiting for. Public authorities may also receive data where the law requires it.
6. Transfers outside the European Economic Area
As a rule, we do not transfer data outside the EEA. If one of our IT service providers processes data outside the EEA, this happens only with the safeguards required by the GDPR, in particular an adequacy decision of the European Commission or standard contractual clauses.
7. How long we keep data
- correspondence: as long as needed to deal with the matter, then until any related claims become time-barred;
- contract data: for the term of the contract and until claims arising from it become time-barred;
- accounting documents: for the period required by law, usually 5 years from the end of the tax year;
- candidate data: until the recruitment ends or, if you consent to future recruitment, until you withdraw consent, but no longer than 2 years.
8. Your rights
You have the right to:
- access your data and receive a copy,
- have your data corrected,
- have your data erased,
- restrict processing,
- data portability,
- object to processing based on our legitimate interest,
- withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
To exercise these rights, write to iod@bignames.pl. You may also lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes UODO, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl).
9. Providing data and profiling
Providing data is voluntary, but without it we cannot reply to your message, enter into a contract or run a recruitment process. We do not make decisions based solely on automated processing, including profiling.
10. Changes to this policy
We may update this policy, for example if the law or the way the website works changes. The current version is always available on this page.