The controller of your personal data within the meaning of Art. 4(7) GDPR is:
BZmedia has not appointed a Data Protection Officer (DPO), as it is not required to do so under Art. 37 GDPR. For all data protection queries, contact us at: office@outsourcingdynamics.com.
Outsourcing Dynamics collects only the data necessary to fulfil specific purposes:
| Category | Examples | Source |
|---|---|---|
| Identity data | First name, last name, job title | Contact form, briefing session, email |
| Contact data | Email address, phone number, LinkedIn profile | Contact form, direct communication |
| Company data | Company name, industry, team size, hiring needs | Briefing session, contact form |
| Transaction data | Service agreement details, invoicing data, payment history | Service contract / Stripe |
| Payment data | Card details — encrypted, stored exclusively by Stripe (PCI DSS Level 1); Outsourcing Dynamics never accesses raw card data | Stripe — directly from client |
| Candidate data | CVs, work samples, AXE Interview Protocol results, professional history, identity verification | Candidate directly or via sourcing platforms (Naukri, LinkedIn) |
| Technical data | IP address, browser type, operating system, visit timestamp | Automatically — server, analytics |
| Behavioural data | Pages visited, time on site, clicks | Google Analytics (anonymised) |
| Marketing data | Cookie identifiers (Facebook Pixel) | Cookies — with user consent only |
Outsourcing Dynamics does not process special categories of personal data (Art. 9 GDPR), such as health data, religious beliefs, or biometric data.
| Purpose | Legal basis (GDPR) | Details |
|---|---|---|
| Providing the recruitment service | Art. 6(1)(b) — contract performance | Sourcing, vetting, and presenting candidates to the B2B client |
| Conducting the briefing session | Art. 6(1)(b) — pre-contractual steps | Understanding the client’s hiring requirements before service commencement |
| Candidate assessment | Art. 6(1)(f) — legitimate interest (B2B client’s interest in verified talent) | AXE stress-test protocol, skills verification, reference checks |
| Invoicing and accounting | Art. 6(1)(c) — legal obligation | Accounting Act, VAT regulations |
| Handling complaints | Art. 6(1)(b) and (c) | Civil Code, contract terms |
| Website analytics | Art. 6(1)(f) — legitimate interest | Improving the service; anonymised/pseudonymised data |
| Targeted advertising (Facebook Pixel) | Art. 6(1)(a) — consent | Activated only after user accepts via the cookie banner |
| Security and fraud prevention | Art. 6(1)(f) — legitimate interest | Protecting the service and verifying client identity |
| Establishing or defending legal claims | Art. 6(1)(f) — legitimate interest | Retaining service records in case of disputes |
Outsourcing Dynamics provides a fully managed recruitment and candidate verification service — sourcing specialists (Video Editors, DM Setters, Operations Admins, and other roles) primarily from India through government database audits and AXE stress-test protocols.
The Outsourcing Dynamics service is directed exclusively at business clients (B2B) acting in the course of their commercial activity. Consumer protection legislation — including the 14-day right of withdrawal — does not apply to contracts concluded between businesses.
The recruitment engagement commences upon confirmation of the briefing session and payment of the service fee. Once active sourcing and candidate assessment has begun, the service cannot be cancelled and refunds are not available, as defined in the service agreement.
Data processed within the recruitment service:
Data collected from B2B clients is used solely to deliver the contracted recruitment service. Specific data processing terms are governed by a separate Data Processing Agreement (DPA) concluded with each business client prior to service commencement.
Client data is never shared with third parties beyond what is necessary to deliver the recruitment service. It is never sold, rented, or used for marketing purposes beyond the scope of the agreed engagement.
Candidate data is collected as part of the recruitment process on behalf of and at the instruction of the B2B client. Outsourcing Dynamics acts as a data processor in relation to candidate data, with the B2B client serving as the data controller for that data.
Candidates whose data is processed have the right to access, rectify, or request deletion of their data. Requests should be directed to office@outsourcingdynamics.com. Candidate data is retained only for the duration of the active recruitment engagement and deleted promptly upon its conclusion, unless the candidate has given separate consent for future consideration.
Data may be shared only with trusted third parties necessary for delivery of our services:
| Provider | Scope of services | Location and safeguards |
|---|---|---|
| Stripe, Inc. | Payment processing (service fees) | USA – DPF + SCC |
| MailerLite UAB | Client communication and follow-up | Lithuania (EEA) – GDPR |
| Google LLC | Google Analytics – website analytics | USA – DPF + SCC |
| Meta Platforms, Inc. | Facebook Pixel – advertising (with consent) | USA – DPF + SCC |
| Naukri / InfoEdge India | Candidate sourcing platform | India – SCC |
| Hosting provider (Hostido) | Website servers | EEA |
| Accounting office | Bookkeeping and tax services | Poland – GDPR |
Transfers to the United States are carried out with appropriate legal safeguards: EU-U.S. Data Privacy Framework (DPF) and Standard Contractual Clauses (SCC). Transfers to India rely on Standard Contractual Clauses (SCC).
| Data type | Retention period | Legal basis |
|---|---|---|
| B2B client contact data | Duration of service + 6 years from contract end | Art. 6(1)(b) GDPR; Civil Code Art. 118 |
| Transaction and invoice data | 5 years from the end of the tax year in which the transaction occurred | Polish Tax Ordinance, Art. 70 |
| Candidate data (active engagement) | Duration of recruitment process; deleted promptly upon conclusion | Art. 6(1)(b) and (f) GDPR |
| Candidate data (future consideration) | Up to 12 months, with candidate’s explicit consent | Art. 6(1)(a) GDPR |
| Data for legal claims | Up to 6 years from the date of the event (B2B) | Polish Civil Code, Art. 118 |
| Server logs (IP, activity) | Up to 12 months | Legitimate interest (security) |
| Analytics data (Google Analytics) | 14 months (Google Analytics configuration) | Legitimate interest / consent |
| Marketing cookies (Facebook Pixel) | Until withdrawal of consent or cookie expiry (max. 90 days) | Consent |
You have the following rights under the GDPR:
To exercise any right, write to: office@outsourcingdynamics.com.
| Category | Purpose | Examples | Legal basis |
|---|---|---|---|
| Strictly necessary | Core website functionality, sessions, security | Session cookies, CSRF token | Art. 6(1)(f) GDPR — legitimate interest |
| Analytics | Measuring traffic and analysing user behaviour | Google Analytics (_ga, _gid) | Art. 6(1)(a) GDPR — consent |
| Marketing | Ad personalisation, custom audience creation | Facebook Pixel (_fbp, _fbc) | Art. 6(1)(a) GDPR — consent |
On your first visit, a cookie banner allows you to manage your preferences. You can update your choices at any time via the Cookie Settings link in the footer.
Outsourcing Dynamics implements appropriate technical and organisational measures to protect personal data:
If you believe that the processing of your data infringes the GDPR, you have the right to lodge a complaint:
Outsourcing Dynamics reserves the right to update this Privacy Policy. Material changes will be communicated by displaying a prominent notice on the website or by email to affected parties. Continued use of our services after the updated policy comes into effect constitutes acceptance.
This Privacy Policy is governed by Polish and European Union law. This document does not constitute legal advice.