1. Scope & Purpose
This Data Processing Agreement applies when OffshoreBase processes personal data on behalf of a client (the "data controller") in connection with delivering our offshore team infrastructure services.
OffshoreBase acts as a data processor when handling employee personal data, payroll records and HR information on behalf of our clients.
2. Categories of Data Processed
In the course of delivering our services, we may process the following categories of personal data:
Employee data
- Full name, date of birth and national identification details
- Contact information (address, phone, email)
- Employment records, job title and performance data
- Bank account details for payroll processing
- Tax identification numbers and statutory compliance records
Client contact data
- Names and professional contact information of client representatives
- Communication records and meeting notes
3. Processing Activities
OffshoreBase processes personal data for the following purposes:
- Recruitment, onboarding and employment administration
- Monthly payroll processing and salary disbursement
- Statutory compliance (PF, ESI, TDS and other Indian statutory requirements)
- HR record management and employee lifecycle administration
- Infrastructure provisioning and IT account management
- Attendance, leave and performance tracking
4. Technical & Organisational Measures
OffshoreBase implements the following measures to protect personal data:
- Encrypted storage and transmission of all personal data
- Role-based access controls limiting data access to authorised personnel only
- Secure, password-protected systems for HR and payroll management
- Regular data backups with encrypted storage
- Confidentiality agreements for all staff handling personal data
- Incident response procedures for data breaches
5. Sub-processors
We may engage trusted sub-processors to assist in delivering our services. All sub-processors are bound by equivalent data protection obligations. Current sub-processors include:
- Payroll and compliance software providers
- Cloud storage and communication platforms
- Accounting and financial management tools
We will notify clients of any changes to sub-processors that may impact data processing.
6. International Data Transfers
Personal data processed by OffshoreBase is primarily stored and processed within India. Any international transfers are conducted with appropriate safeguards in place, including contractual protections and compliance with applicable data protection laws.
7. Data Breach Notification
In the event of a personal data breach, OffshoreBase will:
- Notify affected clients without undue delay and within 72 hours of becoming aware of the breach
- Provide details of the nature, scope and likely consequences of the breach
- Describe the measures taken or proposed to address the breach
- Cooperate fully with clients and relevant authorities in breach response
8. Contact
For data processing enquiries, to request a signed DPA, or to exercise data subject rights, please contact us:
- Email: hello@offshorebase.co
- WhatsApp: +91 8017100789
- Address: Kolkata, West Bengal, India