The policy designates TaskRabbit, Inc., a US entity, as the sole data controller for all EEA, Swiss, and UK users' personal information, notwithstanding the existence of TaskRabbit Limited, TaskRabbit GmbH, and TaskRabbit Poland Sp. z o.o. as separate legal entities.
This analysis describes what TaskRabbit's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that a US-domiciled entity is the data controller for EU and UK data subjects, which requires legally adequate transfer mechanisms for personal data flowing from the EEA or UK to the United States, and may require evaluation of local representative obligations under GDPR Article 27.
Interpretive note: The policy does not specify the transfer mechanism used for EEA and UK to US data flows, and it is unclear whether TaskRabbit's local European entities act as processors or joint controllers, creating interpretive uncertainty about the full scope of controller responsibilities.
The agreement designates TaskRabbit, Inc. in the United States as the data controller responsible for EEA, Swiss, and UK users' personal information, meaning data subject rights requests and regulatory accountability flow through the US entity. The adequacy of transfer mechanisms for personal data sent from the EU or UK to the US is not addressed in the policy text provided.
How other platforms handle this
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
If you are an end user in a Workspace not owned by you and wish to update, delete, or receive any information we have about you, you may do so by contacting the organization who owns your ClickUp Workspace.
Where ZipRecruiter processes your Personal Data in the capacity of a service provider (data processor), and you seek access, or want to correct, amend, or delete your Personal Data...we will provide you with the data controller's contact information, so you can contact them directly.
"Controller. TaskRabbit, Inc. is the data controller for your Personal Information.Excerpt from TaskRabbit's Privacy Policy
(1) REGULATORY LANDSCAPE: Designation of a US entity as data controller for EEA users engages GDPR Chapter V transfer restrictions and the EU-US Data Privacy Framework adequacy decision.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes that a US-domiciled entity is the data controller for EU and UK data subjects, which requires legally adequate transfer mechanisms for personal data flowing from the EEA or UK to the United States, and may require evaluation of local representative obligations under GDPR Article 27.
The agreement designates TaskRabbit, Inc. in the United States as the data controller responsible for EEA, Swiss, and UK users' personal information, meaning data subject rights requests and regulatory accountability flow through the US entity. The adequacy of transfer mechanisms for personal data sent from the EU or UK to the US is not addressed in the policy text provided.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by TaskRabbit.