Privacy policy

Last updated: October 2026

1. General information

  1. This policy applies to the website available at https://e-bigfish.com.pl (the “Website”).
  2. The operator of the Website and the controller of personal data is BIG FISH S.C., ul. Karola Darwina 18/38, 03-488 Warsaw, Poland, NIP (Tax ID): 1133206379, REGON: 545088091 (the “Operator” or the “Controller”).
  3. The Operator’s contact e-mail address: biuro@e-bigfish.com.pl.
  4. The Operator is the controller of your personal data with respect to the data you provide voluntarily on the Website.
  5. The Website uses personal data for the following purposes:
    • handling enquiries submitted through the contact form, including enquiries about recruitment and the Operator’s services,
    • handling applications and registrations for training courses and events,
    • providing downloadable materials (reports, publications),
    • sending the newsletter and marketing communications, provided that consent has been given.
  6. The Website obtains information about users and their behaviour in the following ways:
    1. through data voluntarily entered in forms, which is entered into the Operator’s systems,
    2. by storing cookie files (“cookies”) on end devices.

2. Selected data protection methods used by the Operator

  1. Places where personal data is entered are protected at the transmission layer (SSL certificate). As a result, personal data entered on the website is encrypted on the user’s computer and can only be read on the target server.
  2. An important element of data protection is the regular updating of the software used by the Operator to process personal data, which in particular means regular updates of software components.

3. Hosting

  1. The Website is hosted (technically maintained) on servers provided by cyberFolks.pl.
  2. To ensure technical reliability, the hosting company keeps server-level logs. The following may be recorded:
    • resources identified by a URL (addresses of requested resources – pages, files),
    • the time the request was received,
    • the time the response was sent,
    • the name of the client station – identification performed by the HTTP protocol,
    • information about errors that occurred during the HTTP transaction,
    • the URL of the page previously visited by the user (referer link) – if the Website was accessed via a link,
    • information about the user’s browser,
    • information about the IP address,
    • information related to handling e-mail sent to and by the Operator.

4. Your rights and additional information on how data is used

  1. In certain situations the Controller has the right to transfer your personal data to other recipients if this is necessary to perform a contract concluded with you or to fulfil the Controller’s obligations. This applies to the following groups of recipients:
    • the hosting company, under a data processing agreement,
    • the provider of the newsletter and e-mail communication system (Ecomail),
    • authorised employees and associates who use the data to fulfil the purpose of the website,
    • companies providing marketing services to the Controller.
  2. Your personal data is processed by the Controller for no longer than necessary to perform the related activities set out in separate regulations (e.g. on accounting). Marketing data will not be processed for longer than 3 years.
  3. You have the right to request from the Controller:
    • access to your personal data,
    • rectification of the data,
    • erasure of the data,
    • restriction of processing,
    • and data portability.
  4. You have the right to object to the processing of your personal data for the purposes of the legitimate interests pursued by the Controller, including profiling; however, the right to object may not be exercised where there are compelling legitimate grounds for the processing that override your interests, rights and freedoms, in particular the establishment, exercise or defence of legal claims.
  5. You may withdraw your consent to the processing of data for marketing purposes at any time by contacting the Controller or by using the unsubscribe link in an e-mail. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
  6. You have the right to lodge a complaint about the Controller’s actions with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.
  7. Providing personal data is voluntary, but necessary to handle an enquiry, an application or to provide a material.
  8. Automated decision-making, including profiling, may be applied to you in order to provide services under a concluded contract and for the Controller’s direct marketing.
  9. Personal data may be transferred to third countries within the meaning of data protection law, i.e. outside the European Economic Area – to the extent that we use providers based or with servers outside the EEA (e.g. Google, Meta). Such transfers take place on the basis of the mechanisms provided for in the GDPR, in particular European Commission adequacy decisions or standard contractual clauses.

5. Information in forms

  1. The Website collects information provided voluntarily by the user, including personal data, if provided.
  2. The Website may record information about connection parameters (time stamp, IP address).
  3. Data provided in a form is processed for the purpose resulting from the function of that form, e.g. to handle an enquiry, for business contact, to register for a training course or to provide a downloadable material. In each case, the context and description of the form clearly state its purpose.

6. Controller’s logs

  1. Information about user behaviour on the Website may be logged. This data is used to administer the Website.

7. Key marketing techniques

  1. The Operator uses statistical analysis of website traffic through Google Analytics (Google Ireland Limited / Google LLC). The Operator does not transfer personal data to the provider of this service, only anonymised information. The service is based on cookies stored on the user’s end device. Regarding information on user preferences collected by the Google advertising network, the user can view and edit information derived from cookies using the tool: https://adssettings.google.com/.
  2. The Operator uses the Facebook pixel (Meta Platforms Ireland Limited). This technology lets Facebook know that a person registered with it uses the Website. In this case Facebook relies on data for which it is itself the controller; the Operator does not transfer any additional personal data to Facebook. The service is based on cookies stored on the user’s end device.
  3. The Operator uses remarketing techniques that allow advertising messages to be matched to the user’s behaviour on the website. This may give the impression that the user’s personal data is used to track them, but in practice no personal data is transferred from the Operator to advertising providers. The technical prerequisite for such activities is that cookies are enabled.
  4. The Operator uses a solution that studies user behaviour by creating heat maps and recording behaviour on the website. This information is anonymised before being sent to the service provider, so that the provider does not know which natural person it concerns. In particular, passwords and other personal data entered are not recorded.
  5. The Operator uses a solution that automates the Website’s operation with respect to users, e.g. one that can send an e-mail to a user after they visit a specific page, provided that they have consented to receiving commercial communications from the Operator.
  6. The Operator may use profiling within the meaning of data protection law.

8. Information about cookies

  1. The Website uses cookies.
  2. Cookies are IT data, in particular text files, which are stored on the Website user’s end device and are intended for using the Website’s pages. Cookies usually contain the name of the website they come from, the time they are stored on the end device and a unique number.
  3. The entity placing cookies on the Website user’s end device and accessing them is the Website Operator.
  4. Cookies are used for the following purposes:
    1. ensuring the proper functioning of the Website, including form handling, security and remembering the user’s cookie choices,
    2. achieving the purposes described above in the “Key marketing techniques” section.
  5. The Website uses two basic types of cookies: “session” cookies and “persistent” cookies. Session cookies are temporary files stored on the user’s end device until they leave the website or close the software (web browser). Persistent cookies are stored on the user’s end device for the time specified in the cookie parameters or until they are deleted by the user.
  6. Web browsing software (web browser) usually allows cookies to be stored on the user’s end device by default. Website users can change these settings. The web browser allows cookies to be deleted. Cookies can also be blocked automatically. Detailed information on this can be found in the help or documentation of the web browser.
  7. Restricting the use of cookies may affect some functionalities available on the Website’s pages.
  8. Cookies placed on the Website user’s end device may also be used by entities cooperating with the Website Operator, in particular: Google (Google Ireland Limited / Google LLC) and Meta (Meta Platforms Ireland Limited).
  9. A detailed list of cookies used on the Website is available on the Cookie policy page.

9. Managing cookies – how to give and withdraw consent in practice

  1. On your first visit to the Website, a banner is displayed in which you can accept or reject cookies other than strictly necessary ones. You can change your decision at any time on the Cookie policy page.
  2. If you do not want to receive cookies, you can also change your browser settings. Please note that disabling cookies necessary for security processes and for maintaining user preferences may make it difficult, and in extreme cases impossible, to use the Website.
  3. To manage cookie settings, select the web browser you use from the list below and follow the instructions:

    Mobile devices: