This is an English translation. The binding version is the Polish original, Obowiązek informacyjny (RODO), which prevails in the event of any discrepancy.
Version dated 14 October 2026. Below is the key information required by Article 13 GDPR about what we do with your data. You will find the full description, including the list of cookies and browser storage entries, in the privacy policy.
Controller
Blue Creation Piotr Łącz, ul. Skoroszewska 7 lok. 88, 02-495 Warszawa, NIP 5291645499, owner of the Task Manager brand. For data protection matters: kontakt@taskmanager.pl, phone +48 606 704 195. You can write to us in Polish or English. We have not appointed a data protection officer - the law (Article 37 GDPR) does not require us to do so.
Purposes, legal bases and retention periods
“GDPR” means Regulation (EU) 2016/679 (the General Data Protection Regulation), and “ECL” means the Polish Electronic Communications Law (Prawo komunikacji elektronicznej), i.e. the Act of 12 July 2024.
| Purpose | Legal basis | How long |
|---|---|---|
| Handling your demo request and contacting you about it | Article 6(1)(b) GDPR (your request); when you act on behalf of a company - Article 6(1)(f) GDPR; request for a phone call - also Article 398 ECL | without consent to marketing communications - 12 months from your last contact with us; with consent - no longer than 3 years; unconfirmed request or request identified as abuse - 90 days; IP address - 30 days |
| Automated assessment of demo requests (protection against abuse) | Article 6(1)(f) GDPR | together with the request |
| Demo version of the software, including AI features | Article 6(1)(b) GDPR; demo for a company and data of invited colleagues - Article 6(1)(f) GDPR | 30 days of use and 30 days read-only, then deletion |
| Marketing communications by email or phone | your consent: Article 6(1)(a) GDPR and Article 398 ECL | until consent is withdrawn, no longer than 3 years from your last contact with us; proof of consent - 5 years |
| Visit statistics without consent (from server logs, without an identifier) | Article 6(1)(f) GDPR | statistics - 13 months |
| Our own visitor identifier and Google Analytics | your consent: Article 6(1)(a) GDPR and Article 399 ECL | 13 months; in Google Analytics - 2 months |
| Linking your visit history to your demo request | your separate consent: Article 6(1)(a) GDPR and Article 399 ECL | until consent is withdrawn, no longer than the request is kept |
| Chat with the AI assistant: answers, conversation review and the conversation report | Article 6(1)(f) GDPR | conversation - 90 days from the last activity; report - 12 months; anonymous conversation samples (without the conversation identifier, IP address and exact date) - as long as they are needed to improve the assistant |
| Demo, call or conversation copy from the chat at your request | Article 6(1)(b) GDPR (your request); if you act on behalf of a company - Article 6(1)(f) GDPR; call request - also Article 398 ECL | demo request - as from the website form; call request with case summary - 12 months from your last contact with us; e-mail address for the copy - unconfirmed 24 hours, confirmed 30 days |
| Marketing communications by e-mail with consent ticked in the chat | your consent: Article 6(1)(a) GDPR and Article 398 ECL | until consent is withdrawn, at most 3 years from your last contact with us; proof of consent - together with the request and for 5 years after it is deleted |
| Assessment of chat requests (profiling) | Article 6(1)(f) GDPR | together with the request |
| Protecting the chat against abuse and cost limits | Article 6(1)(f) GDPR | IP address hashes, counters and blocks - 30 days |
| Licences, updates and customer billing | Article 6(1)(b), (c) and (f) GDPR | the licence period and 3 years; accounting documents - 5 years from the end of the year in which the tax payment deadline passed; IP address in the download log - 90 days |
| Email and telephone correspondence | Article 6(1)(f) GDPR, and where a contract is concerned, Article 6(1)(b) GDPR | up to 3 years from your last contact with us |
| Logs, security and backups | Article 6(1)(f) GDPR | web server logs - up to 15 days; other logs - up to 2 months; backups - up to 15 days; archive copy from our previous server (September 2026) - no deletion date set yet, we delete your data from it on request |
| Development and administration work with the Claude Code tool | Article 6(1)(f) GDPR | session records on our computer - up to 30 days; at Anthropic - according to the rules in its privacy policy |
| Customer testimonials on the website | your consent: Article 6(1)(a) GDPR | until consent is withdrawn |
| Establishing, exercising and defending legal claims | Article 6(1)(f) GDPR | until the claims become time-barred |
Our legitimate interests
Where the legal basis is Article 6(1)(f) GDPR, our interests are: handling enquiries from companies, protecting the form, server and licences against abuse, knowing which content and campaigns work, enabling you to test the software with your team, replying to correspondence, maintaining and developing our systems, informing about the software in the chat with the AI assistant, improving the assistant, the website content and our offer on the basis of conversation reviews, setting the order of contact for chat requests, and defending against claims. On request, we will describe how we checked that your interests, rights and freedoms do not override these interests.
Recipients
Data is processed on our behalf, under data processing agreements, by:
- cyber_Folks S.A., Poznań - server, email, DNS,
- Google Ireland Limited and Google LLC - Google Analytics, only with consent,
- Anthropic Ireland, Limited and Anthropic, PBC - AI features in the demo version and the chat with the AI assistant on our website (data processing agreement) and the Claude Code tool, which we use for programming and server administration (plan for individual users: Anthropic processes the data fragments sent to it under its own rules, without a data processing agreement).
Public authorities receive data only where the law requires it. We do not sell data.
Transfers outside the EEA
Data is transferred to the USA to Google LLC (basis: Commission Implementing Decision (EU) 2023/1795 on the Data Privacy Framework and standard contractual clauses) and to Anthropic, PBC (for the AI features in the demo version and the chat with the AI assistant, the basis is standard contractual clauses, Commission Implementing Decision (EU) 2021/914; for the Claude Code tool, Anthropic transfers the data under its own rules). We will send you a copy of the standard contractual clauses on request.
Where we get your data from
You give us your data directly. The exception is colleagues invited to the demo - we receive their names and email addresses from the person testing the demo, and in the first email from the demo we inform them of this and give them a link to the privacy policy.
Your rights
You have the right of access to your data, the right to rectification, erasure, restriction of processing and portability of your data, and the right to withdraw consent at any time - without affecting the lawfulness of processing before the withdrawal. Write to kontakt@taskmanager.pl. We will reply within one month.
Right to object
You may object at any time to processing based on our legitimate interest, on grounds relating to your particular situation (Article 21(1) GDPR). An objection to direct marketing is always effective and needs no justification (Article 21(2) GDPR). You can submit it to kontakt@taskmanager.pl, by phone or with the “Unsubscribe” link in a marketing message.
Withdrawing consent
You can withdraw analytics consent and consent to linking your visits to your request using the “Cookies” link in the page footer: turn the toggle off and select “Save choices”. You can withdraw consent to marketing communications with the “Unsubscribe” link in a message, by email or during a phone call. You can withdraw consent to the call and consent to marketing communications given in the chat with the AI assistant by e-mail to kontakt@taskmanager.pl. You can withdraw consent to the publication of a testimonial by email.
Complaint to the supervisory authority
You can lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl) or with the supervisory authority of the EU country in which you live or work.
Do you have to provide data?
Providing data is voluntary. However, your first and last name, email address and company name are needed to set up a demo - without them we cannot accept the request. You provide a phone number only if you ask for a phone call or agree to phone calls with offers. Job title, number of users and question are optional and help us prepare for the conversation, and marketing consents do not affect the demo. In the chat with the AI assistant, a call request needs your phone number and e-mail address, and a conversation copy needs your e-mail address. Providing customer data is a contractual requirement: without it, we cannot conclude a licence agreement. You provide invoice details because the law requires it (Article 106e of the Polish VAT Act).
Automated assessment of requests
Demo requests are checked by an automated system. It does not start the demo automatically if the address comes from a disposable email service, the domain of the address does not exist in the DNS, requests are repeated or the score is lower than 20 out of 100. We do not finally reject a request that the automated system does not let through - a person checks it within 2 working days, and you receive an email saying that we will contact you about access. Requests from the chat with the AI assistant also receive an assessment (hot, warm, cold), which only sets the order on the list of requests - a human decides whether and when we contact you. We describe the assessment logic and your rights in the privacy policy.