Privacy Policy of Huge Thing sp. z o.o.
Introduction
Huge Thing sp. z o.o., with its registered office in Poznań, ul. 23 Lutego 26, 61-740 Poznań, Poland, email: hello@hugething.vc.
Maintaining the confidentiality of your data is extremely important to us, and we want you to know how we process it. For this reason, and to comply with our legal obligations under the GDPR, we have developed a Privacy Policy that describes how we protect and process personal data at Huge Thing sp. z o.o.
Please remember that under the GDPR, personal data is any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Importantly, data relating to legal persons is not covered by the GDPR regulations.
By establishing a relationship with us, including using our consulting services or participating in our acceleration programs, you entrust us with your personal data. Our collaboration aims, among other things, to ensure the highest possible quality of our services.
This privacy policy was published on July 1, 2025 and applies to all Users of the website https://hugething.vc/ (hereinafter referred to as the Website), as well as users of the forms available there, all users of our social media accounts (Facebook, Instagram, LinkedIn), and all persons cooperating with us or contacting us on other matters, including submitting recruitment applications for future recruitment.
We prohibit individuals under the age of 18 from using the Site without the consent of a parent or guardian. We do not knowingly collect personal information from children under the age of 13.
We reserve the right to make changes to this Policy.
Previous versions: none
Effective from: July 1, 2025
1. Who is responsible for your personal data?
When you browse our website https://hugething.vc/, use the forms available there, use our social media accounts (Facebook, Instagram, LinkedIn), establish cooperation with us or contact us on other matters, including submitting recruitment applications for future recruitment, the controller of your data is:
Huge Thing sp. z o.o.
ul. 23 Lutego 26, 61-740 Poznań, Poland
KRS: 0000411691, NIP: 9721238305, REGON: 302055042
email: hello@hugething.vc
2. Your rights related to the processing of personal data
You can submit any requests regarding the exercise of your rights to the Controller, i.e. Huge Thing sp. z o.o., ul. 23 Lutego 26, 61-740 Poznań, Poland.
Every data subject has the right to submit a request to us in order to exercise his or her rights, which may include:
- the right to access data,
- the right to rectification,
- the right to erasure (“the right to be forgotten”),
- the right to restriction of processing,
- the right to data portability,
- the right to object to the processing of personal data:
- Right to object to the processing of your data for direct marketing purposes – you may object at any time to the processing of your personal data for such marketing purposes, including profiling, to the extent that the processing is related to such direct marketing, without the need to justify such objection;
- Right to object to other processing purposes – you may object at any time – for reasons related to your particular situation – to the processing of your personal data based on our legitimate interest, including profiling – any objection in this respect must include justification;
- the right not to be subject to a decision (including profiling) based solely on automated processing that produces legal effects for you or significantly affects you in a similar way;
- the right to withdraw consent (when processing is based on consent) – this applies at any time;
- the right to lodge a complaint with a supervisory authority responsible for personal data protection, both in Poland (to the President of the Office for Data Protection) and in the EU Member State of your habitual residence, place of work, or alleged infringement.
Applications may be submitted:
- by mail to: Management Huge Thing sp. z o.o., ul. 23 Lutego 26, 61-740 Poznań, Poland;
- by email: hello@hugething.vc;
- in person at our registered office, ul. 23 Lutego 26, 61-740 Poznań, Poland.
We consider requests from data subjects with due diligence, taking into account legal provisions and the rights and freedoms of other data subjects. When submitting your request, you should provide information that allows for your unambiguous identification. We will provide information on the actions taken in response to your request without undue delay, and in any case within one month of receiving your request. If necessary, we may extend this period by another two months due to the complex nature of the request.
If we receive your request electronically, we will also respond electronically, if possible. Communications and actions taken in connection with the exercise of your rights are generally free of charge. However, if requests prove to be manifestly unfounded or excessive, we may charge a reasonable fee or refuse to act on the request.
We inform each recipient to whom we have shared your personal data about their rectification, supplementation, deletion or restriction of their processing, unless this proves impossible or would require a disproportionate effort.
3.A. Using our website https://hugething.vc/
We process data collected by cookies used on our website. Cookies generally do not constitute personal data. However, certain information stored in cookies (e.g., preferences), especially when combined with other information about website users, may be considered personal data. More information can be found in our Cookie Policy.
For each call to the Website, the server automatically saves only so-called server logs (file name, your IP address, date and time of the call, the amount of data transferred, the requesting Internet service provider).
We provide you with a cookie management panel and ask you to express your cookie preferences. Further data collection while you browse our Website is based on your cookie preferences.
When you load our Website, only necessary cookies are installed on your device. Necessary cookies may be installed by us – in accordance with the provisions of the Electronic Communications Law – without your consent. Other cookies are installed only after your consent via the cookie banner.
On what basis do we process your personal data and for what purposes?
- to provide electronic services within the scope of making the Website content available – legal basis: necessity of processing for the performance of the contract;
- to ensure the security and operation of the Website – based on our legitimate interest;
- for other purposes only after you have expressed your consent via the cookie panel.
Who do we share your data with? Third-party cookie providers and subcontractors (hosting service providers, IT solutions suppliers, IT support, entities supporting Website operation).
Do we transfer your data to a third country? No, we do not transfer your data to a third country.
For how long do we process your personal data? Always for the period necessary to achieve the processing purposes; if the legal basis is our legitimate interest – no longer than until an effective objection is raised; if the legal basis is consent – until withdrawn. Cookies retention varies per cookie type.
We do not currently use automated decision-making, including profiling, with respect to your data.
You have the right to: access, rectification, erasure, restriction of processing, data portability, withdraw consent, and lodge a complaint with the President of the Personal Data Protection Office.
Is providing data mandatory? When loading our Website we collect only data necessary to display it (essential cookies) – without this data, displaying the Website is impossible.
3.B. Applying to our programs
This Policy does not apply to the processing of data you provide to us as part of applying for participation in programs we organize, such as acceleration programs. The principles of processing your data in connection with applying are described in the regulations of such programs or in other documents that you read before deciding to apply. These principles may differ from those described below, in particular regarding the group of entities that have access to your data, the purposes of processing, and the methods of processing it.
3.C. Subscribing to information about our new projects
We process the email address you provided to send you information about new Huge Thing projects – based on your consent expressed by checking the checkbox. You have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
We share personal data with the following categories of entities: subcontractors – i.e. entities we use to process data, with whom we have concluded an agreement entrusting the processing of personal data, e.g.: hosting service provider, office software provider, including e-mail; entities providing IT support services and administrative services to us.
We do not transfer your data to third countries. We process your data for a period of one year from your request. After this period, we will ask you again whether you wish to continue receiving such information.
Your personal data will not be subject to a decision based solely on automated processing, including profiling. You have the right to: access your data, rectify it, erase it, restrict processing, port your data, withdraw consent, and lodge a complaint with the President of the Personal Data Protection Office.
Providing your data is voluntary. Failure to provide your data will result in you not receiving information about our new projects.
3.D. Sending recruitment applications when no recruitment is ongoing
Submitting a recruitment application during a period when no recruitment is taking place will be treated as consent to the processing of the personal data provided in the application. We process your data in order to consider your candidacy in future recruitment processes – based on your consent.
We share personal data with subcontractors – entities we use to process data, with whom we have entered into a personal data processing agreement, e.g., a hosting provider, an office software provider, including email; and entities providing us with IT support, administrative, or HR services.
We do not transfer your data to third countries. We process data provided to us for future recruitment for a period of one year from the date of submission, but no longer than until the consent is withdrawn.
You have the right to: access your data, rectify, erase, restrict processing, port your data, withdraw consent, and lodge a complaint with the President of the Personal Data Protection Office.
Providing data is voluntary. Failure to provide data, given that no recruitment is taking place, has no negative consequences.
3.E. Contacting us / asking about our offer (DROP US A MESSAGE form)
We process the data you provide in your inquiry. We process this data for the following purposes:
- responding to your inquiry – based on our legitimate interest;
- presenting our offer or concluding a contract – based on your interest in our services and the steps you have taken to conclude a contract.
We share personal data with subcontractors (hosting provider, office software provider including email; entities providing IT support and administrative services).
We do not transfer your data to third countries. We process inquiry data for a period of one year, calculated from the time we cease contact regarding the matter.
You have the right to: access, rectification, erasure, restriction of processing, data portability, object to processing, and lodge a complaint with the President of the Personal Data Protection Office.
Providing data is voluntary. Failure to provide it will prevent us from presenting you with our offer and establishing cooperation.
3.F. Establishing business cooperation with us
We process the data necessary to implement this cooperation, including the conclusion and performance of a contract – based on the concluded contract. We also process data to fulfil our legal obligations (e.g. to record revenues – tax law).
We share personal data with subcontractors (hosting provider, office software provider including email; IT support and administrative services). We may share data with separate controllers such as attorneys, legal advisors, and auditors.
We do not transfer your data to third countries. We process data obtained in connection with cooperation until the cooperation or contract is completed and settled. Data processed for legal obligations is processed for the period required by law.
You have the right to: access, rectification, erasure, restriction of processing, data portability, and lodge a complaint with the President of the Personal Data Protection Office.
Providing data is voluntary. Failure to provide it will prevent the conclusion and execution of the contract.
3.G. Using forms on the Website: DOWNLOAD DECK PRESENTATION / JOIN OUR MAP / DOWNLOAD HUGE INNOVATORS’ MAP
We process the data you enter into the form to process the content of your application, including providing you with the materials you requested or reviewing your application. We process your data based on your consent expressed by submitting the form.
We share data with subcontractors (hosting provider, office software provider including email; IT support and administrative services).
We do not transfer your data to third countries. We process your data for a period of one year from receipt or until your consent is withdrawn.
You have the right to: access, rectification, erasure, restriction of processing, data portability, withdraw consent, and lodge a complaint with the President of the Personal Data Protection Office.
Providing data is voluntary. Failure to provide it will result in you not receiving the requested materials or your application not being submitted.
3.H. You are a representative, proxy, or contact person of an entity we cooperate with
We process the following categories of your personal data: name, surname, business contact details, position/role, other business personal data indicated at the stage of concluding and implementing cooperation. We obtain your data from you or from the entity you represent.
We process your data for the following purposes and on the following legal bases:
- to cooperate with the entity you represent, including concluding and performing a contract – based on our legitimate interest in ensuring the legal security of our business;
- to fulfill our legal obligations related to our business activities and the performance of the cooperation – based on legal provisions (e.g., tax law).
Your data is shared with the following categories of entities:
- entities and individuals to whom the disclosure of data is required by the cooperation/agreement;
- subcontractors (hosting service providers, IT support, accounting firm, other subcontractors);
- other entities supporting our business that remain separate data controllers (attorneys, legal advisors, auditors).
We do not transfer your data to third countries. Your data will be processed for the period necessary to achieve the indicated processing purposes.
You have the right to: access, rectification, erasure, restriction of processing, data portability, object to processing, and lodge a complaint with the President of the Personal Data Protection Office.
Providing data is voluntary; however, failure to provide data will prevent the establishment of cooperation or the conclusion/execution of a contract.
3.I. Clicking social media plugins on our Website
Our Website uses social media plug-ins from Facebook, Instagram, and LinkedIn. When you visit the Website, your data is not automatically transferred to these social networks. Data will only be transferred if you actively activate the corresponding social network button.
The social network provider stores the data collected about you as a user profile and uses it for advertising, market research, and/or audience-oriented website design. You have the right to object to the creation of such profiles by contacting the relevant plug-in provider.
We have placed icons for the following social media on the Website:
- Facebook & Instagram – Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5 Ireland: facebook.com/privacy/policy / help.instagram.com;
- LinkedIn – LinkedIn Ireland Unlimited Company, Wilton Pl, Dublin, Ireland: linkedin.com/legal/privacy-policy.
These providers process your data for their own purposes – as data controllers separate from us. This processing may result in the transfer of your personal data to a third country under the terms set out in the privacy policies of these providers.
3.J. Using our social media accounts
We have accounts on social media platforms such as Facebook, Instagram, and LinkedIn and we are their administrators. Your data, as a user of our social media accounts, is processed when you:
- subscribe to our content (Like, Follow, Subscribe, etc.);
- engage with our content (Like, Comment, Share, Save post, etc.);
- send us a private message.
Depending on your interactions, we may process your name, nickname, image, public profile information, and other information provided in messages or comments.
As the founders of the Facebook and Instagram accounts, we are joint controllers of personal data together with Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5 Ireland. Details on joint processing rules: pl-pl.facebook.com/legal/terms/page_controller_addendum. You may exercise your rights by writing to: Management Huge Thing sp. z o.o., ul. 23 Lutego 26, 61-740 Poznań, Poland, email: hello@hugething.vc.
Purposes of processing:
- maintaining and managing these accounts, informing about our activities and promoting events, our brand and services, building and maintaining a community;
- analyzing the activity of users of our profiles, including collecting data on the number of likes, comments, and shares.
Legal basis: our legitimate interest (Article 6(1)(f) GDPR). For competitions and prizes – also for tax obligations (Article 6(1)(c) GDPR).
We share data with subcontractors and providers of these services (Facebook, Instagram, LinkedIn) under the terms specified in their privacy policies. We do not transfer your data to third countries; however, the providers may do so.
We currently do not use automated decision-making, including profiling. However, Facebook, Instagram, and LinkedIn may perform such processing.
You have the right to: access, rectification, erasure, restriction of processing, data portability, object to processing, and lodge a complaint with the President of the Personal Data Protection Office.
Providing data is entirely voluntary, and failure to provide it results in the inability to use these accounts and the content posted therein.
3.K. Going from our Website to blog entries or podcasts
From our Website, you can access our blog posts and recorded podcasts. Blog posts are available at huge-thing.medium.com, and podcasts at open.spotify.com.
The data controllers for your use of these websites are their providers. When you visit our Website, your data is not automatically transferred to these providers; data is transferred only when you navigate to their websites. These providers process your data for their own purposes – as data controllers separate from us.
- blog – A Medium Corporation – privacy policy: policy.medium.com/medium-privacy-policy;
- podcasts – Spotify AB – privacy policy: spotify.com/pl/legal/privacy-policy.
4. Security of personal data
We conduct ongoing risk analysis to ensure that personal data is processed securely – ensuring that only authorized individuals have access to data and only to the extent necessary for the tasks they perform. We ensure that all operations involving personal data are recorded and performed only by authorized employees and associates.
We take all necessary measures to ensure that our subcontractors and other collaborators also guarantee the application of appropriate security measures whenever they process personal data on our behalf.
5. Changes to the Privacy Policy
We reserve the right to make changes to this Policy, which may result from the need to adapt to changes in legal regulations or applicable privacy standards, or to expand our offer. Therefore, we will notify you of any significant changes to this Policy via an appropriate notice on our websites. This notice will be presented prominently, informing you of the content of the changes and their consequences for your data. Each time the date of introducing changes will be determined so that the information about them appears in time to allow you to become familiar with the content of the information and to consider the nature and impact of the changes on the processing of your data. This date will take into account the need to create an appropriate timeframe within which you can exercise your rights under the GDPR (e.g., withdrawing consent or objecting to processing).
