Privacy Policy
Rules for processing personal data on www.omnitask.pl
In effect from: 25 August 2026. Last updated: 25 August 2026.
1. Data controller
The controller of your personal data is: Warsaw Residential Group Marcin Łętowski, ul. Grafitowa 5, Posoka, 62-504 Stare Miasto, Poland. NIP (Tax ID): 665-306-59-82, REGON: 528314936.
The website www.omnitask.pl and the OmniTask brand are operated as part of the above business activity.
Contact for data protection matters: email kontakt@omnitask.pl, phone +48 721 719 238.
The Controller has not appointed a Data Protection Officer. For any matters concerning the processing of personal data, you can contact us directly using the details above.
2. What data we collect and why
2.1. Quote request form
| Item | Details |
|---|---|
| Scope of data | full name, email address, phone number, company name, message content |
| Purpose | responding to the request, preparing a quote, taking steps prior to entering into a contract |
| Legal basis | Art. 6(1)(b) GDPR – taking steps at the data subject's request prior to entering into a contract; Art. 6(1)(f) GDPR – the Controller's legitimate interest in handling requests |
| Retention period | 3 years from the last contact; if a contract is concluded – for the duration of the cooperation plus 6 years from the end of the tax year in which the last accounting document was issued |
| Providing the data | voluntary, but necessary to receive a response |
2.2. Contact form
| Item | Details |
|---|---|
| Scope of data | name, email address, message content |
| Purpose | responding to the message |
| Legal basis | Art. 6(1)(f) GDPR – legitimate interest in conducting correspondence |
| Retention period | 3 years from the last contact |
| Providing the data | voluntary, but necessary to receive a response |
2.3. Newsletter
| Item | Details |
|---|---|
| Scope of data | email address |
| Purpose | sending information about services, articles and educational materials |
| Legal basis | Art. 6(1)(a) GDPR – consent of the data subject |
| Retention period | until consent is withdrawn |
| Providing the data | voluntary |
You can withdraw your consent at any time – by clicking the unsubscribe link in the footer of any message, or by writing to our contact address. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
2.4. Data collected automatically
While using the website, technical data is automatically collected: IP address, browser type and version, operating system, date and time of visit, pages visited, referring page address.
Purpose: ensuring the website functions correctly, security, traffic statistics.
Legal basis: Art. 6(1)(f) GDPR – legitimate interest in ensuring the security and development of the website.
3. Who we share your data with
Your data may only be shared with entities that process it on our behalf, under a data processing agreement:
| Recipient category | Entity | Scope of processing |
|---|---|---|
| Server infrastructure provider | VPS hosting operator based in the EEA | storing data submitted through forms and the website's database |
| Email provider | Google Ireland Limited | sending notifications about new requests and email correspondence |
| File storage provider | Google Ireland Limited – Google Cloud Storage, region europe-central2 (Warsaw) | image files published on the website |
| Analytics tools provider | Google Ireland Limited – Google Analytics 4 | data on how the website is used, processed only after consent is given |
| Accounting office / tax advisor | the entity handling the Controller's bookkeeping | accounting documentation if a contract is concluded |
Your data may be disclosed to public authorities where required by law.
We do not sell personal data and do not share it with third parties for marketing purposes.
3.1. Transfers of data outside the European Economic Area
Data submitted through the forms and the website's database is stored exclusively on servers located within the European Economic Area.
When Google Analytics 4 is used, data about how the website is used may be transferred to the United States. This transfer is based on the European Commission's adequacy decision for the EU–U.S. Data Privacy Framework, which covers Google LLC, as well as standard contractual clauses approved by the European Commission.
Within Google Analytics 4, users' IP addresses are anonymised before data is stored and are not retained in a form that allows identification. The Controller does not combine Google Analytics data with data submitted through the forms.
You can block data processing by Google Analytics by declining consent in the cookie banner, or by installing the browser add-on available at: tools.google.com/dlpage/gaoptout
4. Your rights
In connection with the processing of your data, you have the following rights:
- Right of access – you can obtain information about what data we process and receive a copy of it
- Right to rectification – you can request correction of inaccurate data or completion of incomplete data
- Right to erasure (the “right to be forgotten”) – you can request deletion of your data if there is no basis for its further processing
- Right to restriction of processing – you can request that processing be suspended in certain situations
- Right to data portability – applies to data processed on the basis of consent or a contract
- Right to object – you can object to processing based on our legitimate interest
- Right to withdraw consent – at any time, without affecting the lawfulness of processing carried out beforehand
To exercise the above rights, write to the address given in point 1. We respond without undue delay, no later than within one month.
Right to lodge a complaint: if you believe that the processing of your data violates the law, you can lodge a complaint with the supervisory authority: President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl
5. Data security
We apply technical and organisational measures appropriate to the risk, in particular:
- SSL/TLS encryption of the connection across the entire website
- access to data restricted to the Controller
- database backups
- server software updates
- servers located within the European Economic Area
6. Cookies
6.1. What cookies are
Cookies are small text files stored on your device while you use the website. They allow the device to be recognised and the website's behaviour to be adapted accordingly.
6.2. Cookie consent
On your first visit to the website, a cookie consent banner is displayed. In it, you can:
- accept all cookies
- reject cookies other than necessary ones
- choose individual categories in the detailed settings
Analytics and marketing cookies are not activated before your consent is obtained. You can change or withdraw your consent at any time using the “Cookie settings” link available in the website's footer. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
6.3. Cookies we use
Necessary cookies – required for the website to function correctly. They do not require consent; the legal basis is Art. 6(1)(f) GDPR (legitimate interest in ensuring the website's functioning and security).
| Name | Purpose | Retention period |
|---|---|---|
| application session cookies | maintaining the session, correct operation of forms | until the browser is closed |
| language preference | remembering the selected language version | 12 months |
| cookie decision record | remembering your choice in the consent banner | 12 months |
Analytics cookies – used to analyse traffic and how the website is used. They require consent; the legal basis is Art. 6(1)(a) GDPR.
| Name | Provider | Purpose | Retention period |
|---|---|---|---|
| _ga | Google Analytics 4 | distinguishing between users | 24 months |
| _ga_<identifier> | Google Analytics 4 | maintaining measurement session state | 24 months |
Marketing cookies – used to measure the effectiveness of advertising campaigns. They require consent; the legal basis is Art. 6(1)(a) GDPR. Activated only while advertising campaigns are running.
| Name | Provider | Purpose | Retention period |
|---|---|---|---|
| _gcl_au | measuring conversions from advertising campaigns | 90 days |
6.4. Managing cookies in your browser
Regardless of the consent banner, you can manage cookies in your browser settings – block them or delete those already stored. Restricting necessary cookies may affect the operation of some website features.
Instructions for the most popular browsers are available in their help documentation.
7. Profiling and automated decisions
Your data is not used for automated decision-making that produces legal effects concerning you or similarly significantly affects you.
Within Google Analytics 4, data on website usage is analysed in aggregated, statistical form – this serves only to improve the website's content and functionality, not to evaluate individual people.
8. Links to external websites
The website may contain links to third-party websites. We are not responsible for their privacy policies – we recommend reviewing them separately.
9. Changes to this privacy policy
We reserve the right to change this policy. The current version, along with its effective date, is always available at www.omnitask.pl/polityka-prywatnosci.
This document has been prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and the Polish Act of 18 July 2002 on the Provision of Electronic Services.