Privacy policy

This is an English translation provided for convenience. In case of any discrepancy, the Polish version of this policy prevails.

1. Controller and contact

The controller of your personal data is MASTER INVESTMENT sp. z o.o., Rondo Organizacji Narodów Zjednoczonych 1, 00-124 Warsaw, Poland, operating under the Master Taxi brand. For matters concerning personal data, contact us at praca@mastertaxi.pl or by post at the address above.

This policy covers the use of mastertaxi.pl, contacting us and applications concerning work, cooperation and car rental, including applications submitted through Facebook and Instagram forms (Meta Lead Ads). Information about the later performance of contracts and drivers’ obligations is provided separately at the appropriate stage.

2. What data we receive

Through our forms we receive the data you provide: your full name, phone number, email address, city and preferred way of working with us. If you contact us directly, we also receive the content of your correspondence. Later in the process we may receive information about your experience, qualifications and availability, to the extent appropriate to the type of cooperation and the stage of recruitment.

In a Meta form, your data may be pre-filled by the platform; you can check it before sending. We receive the data submitted in the application, as well as the application ID and information about the form or campaign, if the integration provides it.

If you reach our website from a Google ad, we save the ad click identifier (gclid, gbraid or wbraid) with your application so that we know which campaign it came from.

When you use the website, technical data necessary for its operation and protection may be processed: IP address, time of the request, the requested page address, and information about your browser, device and errors. The additional tools we use are described in section 9.

At the contact form stage, please do not send your PESEL number, scans of identity documents, medical records or criminal record certificates. Documents required by law for drivers are verified separately, on the appropriate legal basis and through a secure channel.

3. Purposes and legal bases

Contacting you about your application, presenting the terms of a service contract, B2B cooperation or rental, and taking steps at your request before entering into a contract: Art. 6(1)(b) GDPR, strictly to the extent necessary.

Recruitment for employment under an employment contract: Art. 6(1)(c) GDPR in conjunction with Art. 22¹ of the Polish Labour Code, to the extent of data required by law. Additional voluntary data is processed on the basis of consent, in accordance with Art. 6(1)(a) GDPR and the applicable provisions of the Labour Code. We do not require data disproportionate to the position.

Answering other questions and handling correspondence: Art. 6(1)(f) GDPR; our legitimate interest is handling matters addressed to us.

Future recruitment: Art. 6(1)(a) GDPR, only after obtaining separate, voluntary consent. Not giving it does not affect your current application.

Website security, preventing abuse, and the necessary establishment, exercise or defence of legal claims: Art. 6(1)(f) GDPR; the interest is protecting the controller’s systems and rights. This does not justify keeping all applications indefinitely.

Necessary handling of data subject requests and demonstrating compliance with GDPR obligations: Art. 6(1)(c) GDPR in conjunction with the relevant GDPR provisions.

Analytics and advertising using optional technologies on the website, if enabled: consent, Art. 6(1)(a) GDPR, and the applicable requirements of the Polish Electronic Communications Law regarding access to the user’s device.

4. Do you have to provide data

Providing data in the form is voluntary, but data marked as required is needed to handle your application. Without a way to contact you, we will not be able to get back to you. Data required by law in employee recruitment is needed to carry it out. All other data is optional.

Sending an application does not mean consenting to newsletters, advertising or the transfer of your data to other companies for their own marketing. Being contacted about your application does not require ticking the consent for future recruitment.

5. Meta Lead Ads

If you apply through a form on Facebook or Instagram, we use the data provided to handle that specific application, contact you and carry out the relevant recruitment or discussion about cooperation. The rules described in this policy also apply to such applications.

In the European Economic Area, these platforms are provided by Meta Platforms Ireland Limited. Meta also processes data under its own rules, among other things in connection with your account and use of the platform. Meta’s information: facebook.com/privacy/policy. This policy describes processing by Master Taxi and does not replace Meta’s information.

Submitting a form alone does not authorise us to add your data to advertising audiences or to use it for other purposes that have not been presented to you and have no appropriate legal basis.

6. Who may receive the data

Your data is accessed by authorised persons handling applications. To the extent necessary, data may be entrusted to providers of hosting, email, recruitment or CRM systems, form integrations and IT support, as well as to service providers carrying out recruitment on our behalf. Processors act on the basis of appropriate agreements and our instructions.

Data may be received by legal advisers and competent authorities where there is a legal basis for it. We do not sell candidates’ data.

Applying to Master Taxi does not mean that a candidate’s documents are automatically passed on to Uber, Bolt or other ride-hailing platforms. If starting cooperation requires registration with such a platform, we will first provide you with the relevant information about the recipient, the purpose and the legal basis of the transfer.

7. Transfers outside the EEA

The website is hosted by a Polish hosting provider (LH.pl). Some of the services we use are provided by companies of the Google group (Google Workspace email, Google Tag Manager, Google Analytics 4, Google Ads, Google Fonts) and the Meta group (forms on Facebook and Instagram). As a result, data may be transferred to the United States.

The basis for such transfers is the European Commission implementing decision of 10 July 2023 establishing an adequate level of protection under the EU-U.S. Data Privacy Framework - Google LLC and Meta Platforms, Inc. participate in this programme - and, additionally, standard contractual clauses adopted by the European Commission.

For every transfer outside the EEA we require a basis compliant with Chapter V GDPR, such as an applicable European Commission adequacy decision covering the recipient, or standard contractual clauses together with the required safeguards. Information about the safeguards applied and a copy of them can be obtained by contacting us at praca@mastertaxi.pl.

8. How long we keep data

Data from an ongoing recruitment is kept until it ends; data concerning discussions about cooperation or rental is kept until the application has been handled. We then delete it, unless there is a separate, justified purpose and basis for further storage as described below. Once a contract is concluded, the necessary data becomes subject to the rules on its performance and mandatory documentation.

Data for future recruitment: for 12 months from giving consent or until consent is withdrawn earlier.

Ordinary correspondence not related to concluding a contract: until the matter is closed and then for up to 6 months, unless it is needed for a specific dispute or to fulfil a legal obligation.

Technical logs: up to 90 days; a record of a detected incident may be kept for as long as necessary to investigate it and secure specific claims.

Data needed for a specific claim is kept only to the extent necessary, until the relevant limitation period expires and, if proceedings are initiated, until they are finally concluded and the necessary settlements are completed. We assess the need to keep data in each such case.

Evidence of consent being given or withdrawn and of requests being handled is kept to a limited extent for as long as necessary to demonstrate compliance with the law and to defend related claims. The lifetimes of cookies and similar identifiers are listed in the table in section 9.

9. Cookies and similar technologies

The website may use cookies and similar technologies, including browser storage. Essential technologies are used solely to carry out a transmission or to provide a function explicitly requested by the user, such as access to a password-protected document. They do not require consent within the statutory exception.

We may use analytics and advertising technologies only with your consent. You can withdraw your consent at any time - by deleting these files and blocking them in your browser settings, or by writing to praca@mastertaxi.pl. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

Technologies used on the website (as of 29 September 2026):

The tracking code is loaded by Google Tag Manager. The website’s fonts are downloaded from Google Fonts servers, which involves sending your device’s IP address to Google. Google’s information: policies.google.com/privacy.

You can also manage cookies in your browser. Blocking essential technologies may limit some website functions. Simply scrolling the page does not constitute consent.

10. Your rights

Under the conditions set out in the GDPR, you may request access to your data and a copy of it, rectification, erasure or restriction of processing. The right to data portability applies to data processed automatically on the basis of consent or a contract, to the extent specified in the GDPR.

You may object to processing based on legitimate interest on grounds relating to your particular situation. You may object to direct marketing at any time.

You may withdraw your consent at any time by writing to praca@mastertaxi.pl, and your consent to website technologies also by deleting cookies and blocking them in your browser. Withdrawal does not affect the lawfulness of actions taken before it.

You have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO); information: uodo.gov.pl. We generally respond to requests within one month. If, in accordance with the GDPR, this period needs to be extended, we will inform you of this and the reasons.

11. Automated decisions and changes to this policy

We do not make decisions about candidates based solely on automated processing that produce legal effects or similarly significantly affect them. Decisions about cooperation are made by a person.

We update this policy when our processes, tools or the law change. The current version is available on this page together with its effective date. A change to the policy does not replace any new consent that may be required.