Privacy Policy

This is a courtesy translation provided for convenience only; the binding version is the Polish version.

Effective from 11 October 2026

Who is responsible for the data

The tasker.pl service is operated by INTERSON Mateusz Idziński, ul. Pogodna 6, 55-080 Smolec, NIP (tax ID) 6462860237, REGON 241635789 (hereinafter “Tasker”). Contact in matters of personal data: kontakt@tasker.pl, tel. 732 099 208.

Tasker’s role depends on whose data we process:

Managers, their employees and contractors (accounts in the service, access requests, correspondence) — the data controller is Tasker.
Tenants and other persons reporting faults — the data controller is the property manager who made the link or QR code available. Tasker processes this data on the manager’s behalf, as the provider of the tool, on the basis of the data processing agreement.

On the job board the roles are the same. The listing is composed by the manager, and it is the manager who decides what it contains; Tasker stores it and shows it to contractors as the provider of the tool. Account data, offers, reviews and replies to them, messages between a contractor and a manager, content reports, the invitation block list and the record of consents are processed by Tasker as a controller. An invitation to a contractor from outside Tasker is sent by the manager in the manager’s own name, and it is the manager who is the controller of the address entered; Tasker sends it technically, on the manager’s instruction. A contractor whose offer the manager has selected receives the address and contact details from the ticket from the manager and from that moment is itself responsible for how it uses them.

What data we process and why

Access request: company name, NIP, number of addresses, first name and surname, e-mail, optionally telephone and the content of the message — in order to reply and create an account (steps prior to entering into a contract, Article 6(1)(b) GDPR).
Trial version: first name and surname, e-mail, telephone, optionally company name, IP address, the time the trial account was first opened and what was done in it — in order to create the trial account, send the link to it and messages about its expiry date (Article 6(1)(b)) and to assess interest in the service (Article 6(1)(f)). We send tips and information about our offer by e-mail, and we call about the offer, only if you tick the relevant consent in the form (Article 6(1)(a)); we record its date. Consents are optional and can be withdrawn at any time by writing to kontakt@tasker.pl.
Manager and employee account: company name, NIP, first name and surname, e-mail, password in the form of a hash, encrypted two-step verification key — if you enable it, history of actions on the account — in order to provide the service (Article 6(1)(b)) and ensure its security (Article 6(1)(f)).
Payments and invoices: invoice details (name, address, NIP), plan ordered, amount, date and status of the payment and its identifier — in order to settle the Pro plan (Article 6(1)(b)), keep accounts (Article 6(1)(c)) and examine complaints (Article 6(1)(f)). We do not receive or store card numbers or bank login details — you provide them directly to the payment operator.
Contractor: name, NIP, address, e-mail, telephone and the content of correspondence in jobs. The manager may retrieve the company’s name and address by NIP number from public registers: CEIDG, the VAT Taxpayers List (Wykaz podatników VAT) and VIES — in order to pass on and handle a job (Article 6(1)(b) and (f)).
Contractor account (created voluntarily): e-mail, password in the form of a hash — if the contractor sets one, data entered in the profile (name, telephone, NIP, address), date of last login, list of documents and qualifications entered by the contractor (name, number, expiry date — without files or scans) and the calendar feed setting. To the account address we send login links and reminders about documents nearing expiry. The manager sees the list of documents only with an offer on the job board and only if the contractor has consented to this in the profile; consent can be withdrawn in the same place.
Job board, listing: category, description of the work, selected photos, postcode and town, date. The listing does not contain the address, the unit number, the manager’s name or the tenant’s data, and we block telephone numbers, e-mail addresses and website addresses on saving. Contractors see it in this form before an offer is selected. After an offer is selected, the selected contractor receives the address, unit, description, photos and contact details from the ticket, because without them it cannot do the work; this is decided by the manager as the controller of that data (usually Article 6(1)(b) or (f) GDPR; the basis is determined by the manager).
Job board, contractor: area and categories saved in the profile, offers (price, date, comment), NIP and, with consent, the list of documents. They are used to show listings from the relevant area and to present the offer to the manager (Article 6(1)(b)). The manager sees the contractor’s telephone and e-mail only after selecting its offer.
Job board, manager: with a listing and in a conversation the contractor sees the town, the year from which the manager has been using Tasker, the range of the number of units and contractors’ reviews of the manager. We do not show the manager’s name, but this information may make it possible to recognise the manager (Article 6(1)(b) and (f)).
Job board, reviews: a manager may give a review of a contractor, and a contractor of a manager: a rating of 1–5, a comment, the date, a note about a change, previous versions of the review and one reply from the reviewed party. We also record who gave the review and on what basis (a completed job or confirmation of cooperation by both parties). We show reviews of a contractor to managers with its offers, and reviews of a manager to contractors with its listings and in a conversation, without the author’s name; the reviewed party may, however, guess who gave it. We do this so that the other party can assess the offer or the listing (Article 6(1)(f)). The reviewed party sees the reviews about itself, may reply once to each and may report each. We do not show previous versions; we keep them in order to examine a report or an appeal. We send one reminder about a review by e-mail.
Job board, messages: the content of messages between a contractor and a manager concerning a listing, the time of sending, information that the conversation has been closed and each party’s answer as to whether cooperation took place — so that the parties can clarify the listing (Article 6(1)(b)) and in order to protect the job board against abuse (Article 6(1)(f)). We block telephone numbers, e-mail addresses and website addresses on saving. The e-mail notification of a new message does not contain its content. Our staff read a conversation only when one of the parties reports it or when an authorised authority demands it.
Job board, invitation to a contractor from outside Tasker: the e-mail address entered by the manager, the listing to which the invitation relates, and the time and result of the mailing. The controller of this address is the manager, who declares that it has the right to use it; Tasker processes it on the manager’s behalf and sends to it one invitation to the given listing, without reminders. In the invitation we state the manager’s name, the category of work, the town, the date and a link to the listing. If you have received such an invitation, your address was given to us by the manager named in the message, and you can contact that manager about your data; you can also write to us.
Invitation block list: when the addressee clicks the block link in an invitation, we record a hash of their address calculated with a secret key, and the date, and we do not record the address itself. On this basis we do not send further invitations to that address from any manager. The controller of the list is Tasker (Article 6(1)(f) — respecting the addressee’s objection). The manager does not find out that the address is blocked.
E-mails about new listings: we send them to the contractor’s account address only with the contractor’s consent (Article 6(1)(a)). By default this is one digest per day; the contractor may switch to having them sent immediately, and we write immediately about listings marked as an emergency. Consent is withdrawn in the profile or with one click on the link in any such message.
Consents and acceptances: upon acceptance of the job board terms, consent to e-mails about listings, consent to showing documents and the manager’s declaration before sending an invitation, we record who gave it, the version of the document and a hash of its content, the time, the IP address, the browser, the page on which this took place, and the language. We record a withdrawal as a separate entry; we do not change earlier ones. We do this in order to be able to demonstrate what someone consented to and when (Article 7(1) GDPR, Article 6(1)(c) and (f)).
Content reports and decisions: who made the report, what the report concerns, the reason and description, the decision of our staff, its basis and statement of reasons. We process them in order to examine the report, give reasons for the decision to the author of the content and examine an appeal (Article 6(1)(c) in conjunction with the Digital Services Act, and (f)). Content may also be reported by a person without an account, by e-mail; we then process their first name and surname or name, and e-mail address. We do not disclose to the author of the content who reported it, unless the matter cannot be examined without this.
Fault ticket: first name, telephone, optionally e-mail, address and unit, description of the matter, photos and videos and further correspondence in the thread — so that the manager can receive and deal with the ticket. To the telephone number or e-mail provided we send a link to the ticket page and information about the manager’s reply; we do not send advertisements to them. If the manager has enabled number confirmation, before the ticket is submitted we send a text message with a code to the telephone number provided; we record only hashes of the number and the code and delete them after 48 hours. The basis for processing is determined by the manager as the controller.
Ordering a tradesperson from usterka.pl: when a manager from Poland orders, from a ticket, a paid visit by a tradesperson, we transfer to the usterka.pl service the data entered in the order: the first name and surname, telephone and e-mail of the contact person, the address and unit, the description of the fault and the date. In Tasker the following remain with the ticket: the contact person and their telephone, the date, the order number and the first name and surname of the tradesperson. We do this on the manager’s instruction. The usterka.pl service is operated by the same entrepreneur as Tasker and processes this data as a controller, in order to carry out the visit, under the rules described in its own documents.
Technical data: the IP address and time of the request in the server logs and a hash of the IP address in the counters protecting forms against abuse (Article 6(1)(f)).

In a ticket, we ask you to provide only what is needed for the repair. Photos should not show people or documents.

The ticket page has its own random address. It is seen only by whoever has the link — the tenant who reported the fault and the manager’s team. We disable the page of a closed ticket 30 days after it is closed.

To whom we transfer data

To the property manager to whom the ticket goes, and to the contractor to whom the manager passes it.
On the job board: to contractors with an account we show the listing without the address and personal data; to the manager we show the offers. The address and contact details from the ticket are given solely to the contractor selected by the manager. A contractor invited by the manager by e-mail learns the name of that manager.
To authorities: we may transfer data from reports and decisions to the President of the Office of Electronic Communications (Prezes Urzędu Komunikacji Elektronicznej), courts, the police and the public prosecutor’s office where a provision of law requires it.
To the hosting provider — dhosting.pl Sp. z o.o. (servers in Poland).
To the e-mail delivery provider — Amazon Web Services EMEA SARL, the Amazon SES service in the Stockholm region (European Union).
To the text message delivery provider — Vercom S.A., ul. Wierzbięcice 1B, 61-569 Poznań (the SerwerSMS.pl service). It receives the telephone number and the content of the text message: with a link to the ticket or with a code confirming the number.
To the usterka.pl service — the data from an order for a visit by a tradesperson, when the manager orders one.
To the online payment operator — PayU S.A., ul. Grunwaldzka 186, 60-166 Poznań, KRS 0000274399, NIP 779-23-08-495. When you buy credits, we transfer to PayU the data needed to accept the payment: the payer’s e-mail, language, IP address, amount and description of the order. PayU processes it as a separate controller, under the rules described in its privacy policy.
To the accounting office and the provider of the invoicing software — as regards the data from invoices.
To the public registers from which the manager retrieves company data: CEIDG (dane.biznes.gov.pl), the VAT Taxpayers List (Ministry of Finance) and VIES (European Commission). We send them only the NIP number or EU VAT number we are asking about.

We process data in the European Economic Area. The exception is the Google tools described in the section on cookies, used only with consent. A manager with its registered office outside the EEA views the data from its account in its own country. Providing data is voluntary, but without it we will not create an account or pass on a ticket.

We do not sell data. We do not use the data of tenants, tickets and jobs for advertising; we send information about Tasker’s offer only to persons who have consented to it, and we use Google advertising tools only with consent, under the rules in the section on cookies. We do not make decisions about anyone based solely on automated processing. The only automated tool that assesses content on the job board is the filter that blocks telephone numbers, e-mail addresses and website addresses on saving. It does not produce legal effects; the author sees the block immediately and can correct the text.

How long we store data

Access requests — up to 12 months from the last contact, if no account was created.
Demo accounts together with the data from the form — 7 days from creation or until the end of the period, if our staff extended it once. After that date we delete them automatically. If a regular account is created from one of them earlier, the data from the form remains for as long as that account.
Account data, ticket data and files — for the time the manager uses the service. After it ends, we delete them within 30 days, and from backups after a further 90 days at the latest. Only accounting documents and data needed to pursue claims remain longer — for the period required by law.
A contractor’s account and the list of its documents — until the contractor asks for the account to be deleted; we then delete them within 30 days. Jobs remain with the managers who passed them on.
Responses from company registers (name, address, status) — in the cache for up to 24 hours from CEIDG and the VAT Taxpayers List, and up to 7 days from VIES. After that we delete them at the next daily clean-up. Data that the manager has saved in its own records remains for as long as the account.
Job board listings, offers and their photos — 90 days from the closing of the listing (withdrawal, expiry or removal by our staff). Where the manager selected an offer, after 90 days we delete the listing’s photos and the offers not selected, while the listing itself with the selected offer remains for as long as the job that arose from it, because it records the agreed terms.
Reviews, their previous versions and replies to them — until the deletion of the author’s account or the reviewed party’s account; we then delete them together with the account. If a case arising from a report or an appeal is pending, they remain until it is concluded.
Messages between a contractor and a manager — together with the listing, i.e. 90 days from its closing. If a case arising from a report or an appeal is pending, they remain until it is concluded.
The e-mail address of an invited contractor — 90 days from the closing of the listing. After that, only a hash of the address, without the address itself, remains in the mailing log for 3 years, in order to enforce the invitation limits and to demonstrate what we sent and when.
The invitation block list (hash of the address) — indefinitely, because otherwise the block would stop working. You may ask for the entry to be deleted; invitations may then reach your address again.
Content reports and the decisions on them — 3 years from the decision, in order to be able to examine an appeal and demonstrate how the matter was dealt with.
The record of consents and of acceptances of the job board terms — for as long as the account, and then for the limitation period for claims. Withdrawal of consent does not delete earlier entries, because they are evidence that consent was given.
Security counters (hashes, without IP addresses) — up to 24 hours. Hashes of numbers and text message codes — 48 hours.
Server logs — for a short time, to the extent needed to detect abuse.
The date of acceptance of the terms of service — for as long as the account, and then for the limitation period for claims.

Your rights

You have the right of access to your data, to have it rectified, erased, its processing restricted and to have it ported, and the right to object to processing based on legitimate interest. Write to kontakt@tasker.pl. If the matter concerns a fault ticket, we will pass it on to the manager, who is the controller of that data — you can also contact the manager directly.

You can withdraw consent to e-mails about new listings and consent to showing the list of documents at any time in the contractor profile; withdrawal does not affect what happened earlier. If you disagree with a review about you — as a contractor or as a manager — you can reply to it, report it or object to its processing (Article 21 GDPR); we examine each objection individually. You can appeal against a decision of our staff concerning your content, as described in the job board terms. You can block invitations from Tasker with one click on the link in an invitation. Decisions on the removal of content and suspension of participation in the job board are made by a human.

You have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa).

Cookies

We always store the cookies needed for the service to work — they do not require consent:

TASKER_ORG — a session cookie, needed for logging in and for protecting forms. It disappears when the browser is closed.
TASKER_DEV — stored on the phone or computer of the person who submitted a ticket. It holds the codes of at most the five most recent tickets from that device, so that it is possible to return to them without looking for the link. It expires after 180 days; it can be deleted in the browser settings.
TASKER_LANG — stored when someone chooses a language themselves: a person reporting a fault, in the form (Polish, English, German or Ukrainian), or a visitor, using the switcher on the site, at login and at registration (Polish or English). It holds only that choice, so that subsequent pages open in the same language. It expires after 180 days; it can be deleted in the browser settings.
TASKER_CON — stored only when a contractor, when logging in to the account, ticks “Remember me on this device”. It makes it possible to return to the account without logging in again. It expires 30 days after last use and disappears on logout.
TASKER_CONSENT — remembers your choice concerning statistical and marketing cookies, so that we do not ask on every visit. It expires after 180 days.
TASKER_PV — stored only on ticket pages, when the reporting person confirms the telephone number with a code from a text message. It holds the confirmed number and the address it concerns, so that it does not have to be confirmed again for the same ticket. It expires after 2 hours.

On the offer pages — the home page, the price list, the page for contractors, contact, registration, the trial version form, login, the confirmation pages after submitting the registration form or an access request, the terms and this policy — solely with your consent we load Google Tag Manager and, through it, Google tools:

Google Analytics — visit statistics: which pages are viewed and where visitors come from. The cookies _ga and _ga_…, up to 2 years.
Google Ads — measuring the effectiveness of advertisements and tailoring Tasker’s advertisements. The cookie _gcl_au, 90 days.

Until you give consent, we do not load any Google script and do not store these cookies. You give consent to statistics and to marketing separately, a refusal does not restrict anything in the service, and you can change your choice at any time using the “Cookie settings” link in the footer; after consent is withdrawn we delete the cookies stored by these tools. The basis for processing is consent (Article 6(1)(a) GDPR). The provider of the tools is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; data may reach Google LLC in the United States on the basis of the European Commission’s adequacy decision (Data Privacy Framework).

In the manager’s panel, in the contractor’s account and on the ticket and job pages there are no statistical or advertising tools.

Changes

When we change the way we process data, we will update this page and the date at the top. We will notify managers of material changes by e-mail.