A Standard Data Processing Agreement is required whenever an organization (the data controller) engages a service provider (the data processor) to process personal data on its behalf. This document, governed by Austrian law, ensures compliance with Article 28 of the GDPR and the Austrian Data Protection Act (DSG). It is essential for any service relationship involving personal data processing, from cloud services to payroll processing. The agreement details processing instructions, security requirements, confidentiality obligations, sub-processor management, and incident handling procedures. It must be in place before any processing begins and should be regularly reviewed to ensure continued compliance with Austrian and EU data protection requirements.
Your data doesn't train Genie's AI
You keep IP ownership of your information
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
OR
Let Ƶ's market-leading legal AI identify missing terms, unusual language, compliance issues and more - in just seconds.
1. Parties: Identification of the data controller and data processor, including full legal names and registered addresses
2. Background: Context of the processing relationship and reference to the main service agreement
3. Definitions: Key terms used in the agreement, including GDPR-specific terminology and agreement-specific definitions
4. Scope and Purpose of Processing: Detailed description of the data processing activities, categories of data subjects, types of personal data, and processing purposes
5. Duration: Term of the DPA and its relationship to the main service agreement
6. Obligations of the Processor: Core processor obligations under GDPR Article 28, including processing only on documented instructions
7. Obligations of the Controller: Controller's responsibilities and obligations regarding instructions and compliance
8. Security Measures: Technical and organizational measures implemented to ensure appropriate security
9. Sub-processing: Conditions and requirements for engaging sub-processors
10. Data Subject Rights: Processor's obligations to assist with data subject requests
11. Data Breach Notification: Procedures and timeframes for reporting personal data breaches
12. Audit Rights: Controller's audit rights and processor's obligations to demonstrate compliance
13. Data Return and Deletion: Obligations regarding data handling upon agreement termination
14. Liability and Indemnification: Allocation of responsibilities and liabilities between parties
15. Governing Law and Jurisdiction: Specification of Austrian law and jurisdiction
1. International Data Transfers: Required if personal data will be transferred outside the EEA, including references to transfer mechanisms
2. Insurance Requirements: Optional section specifying required insurance coverage for the processor
3. Business Continuity: Optional section detailing business continuity and disaster recovery requirements
4. Specific Security Requirements: Additional security requirements beyond standard measures, used for sensitive data processing
5. Exit Management: Detailed procedures for transition of services, used in complex processing relationships
6. Cost Allocation: Optional section defining cost responsibilities for compliance activities
1. Schedule 1 - Processing Activities: Detailed description of processing activities, including data categories, purposes, and duration
2. Schedule 2 - Technical and Organizational Measures: Detailed description of security measures implemented by the processor
3. Schedule 3 - Approved Sub-processors: List of pre-approved sub-processors and their processing activities
4. Schedule 4 - Transfer Mechanisms: If applicable, Standard Contractual Clauses or other transfer mechanisms
5. Schedule 5 - Security Breach Response Plan: Detailed procedures for handling and reporting data breaches
6. Appendix A - Contact Details: Key contacts for both parties for operational and emergency matters
Relevant legal definitions
Clauses
Relevant Industries
Technology and Software
Healthcare and Medical Services
Financial Services
Professional Services
E-commerce and Retail
Education
Manufacturing
Telecommunications
Insurance
Real Estate
Construction
Transportation and Logistics
Energy and Utilities
Media and Entertainment
Non-profit Organizations
Public Sector
Research and Development
Hospitality and Tourism
Relevant Teams
Legal
Compliance
Information Security
Information Technology
Privacy
Procurement
Risk Management
Operations
Data Protection
Vendor Management
Commercial
Information Governance
Contract Management
Relevant Roles
Data Protection Officer
Privacy Officer
Legal Counsel
Compliance Manager
Information Security Manager
IT Director
Chief Technology Officer
Chief Information Security Officer
Procurement Manager
Contract Manager
Risk Manager
Operations Director
Project Manager
Chief Legal Officer
Privacy Analyst
Information Governance Manager
Vendor Manager
Commercial Director
Chief Operating Officer
Data Protection Specialist
Find the exact document you need
Agreement On The Processing Of Personal Data
An Austrian law-governed agreement establishing terms for personal data processing between controller and processor, ensuring GDPR and DSG compliance.
Download
Data Processing Contract
Austrian law-governed Data Processing Contract ensuring GDPR compliance for controller-processor relationships.
Download
Joint Controller Agreement
An Austrian law-governed agreement defining responsibilities and obligations between parties jointly controlling personal data processing under GDPR Article 26.
Download
Standard Data Processing Agreement
An Austrian law-governed Data Processing Agreement establishing GDPR-compliant terms between data controller and processor.
Download
Order Data Processing Agreement
An Austrian law-governed Data Processing Agreement establishing terms for personal data processing under GDPR and national requirements.
Download
Data Addendum
An Austrian law-governed data processing addendum ensuring GDPR and DSG compliance for controller-processor relationships.
Download
Data Processing Addendum DPA
An Austrian law-governed Data Processing Addendum that establishes GDPR-compliant terms for personal data processing between controllers and processors.
Download
Controller To Controller Data Processing Agreement
An Austrian law-governed agreement establishing data sharing arrangements between two independent data controllers, ensuring GDPR and DSG compliance.
Download
Intercompany Data Processing Agreement
Austrian law-governed Intercompany Data Processing Agreement for GDPR-compliant data processing between group companies.
Download
Controller To Controller DPA
An Austrian law-governed Data Processing Agreement between two independent data controllers, compliant with GDPR and DSG requirements.
Download
Data Transfer Addendum
An Austrian law-governed addendum establishing terms for compliant personal data transfers between organizations, ensuring adherence to GDPR and Austrian data protection requirements.
Download
Controller Processor Agreement
An Austrian law-governed agreement between a data controller and processor establishing GDPR-compliant terms for personal data processing.
Download
Order Processing Agreement
Austrian law-governed Order Processing Agreement establishing GDPR-compliant terms for personal data processing between controller and processor.
Download
Data Protection Agreement For Employees
An Austrian-law governed employee data protection agreement ensuring GDPR and DSG compliance in the employment relationship.
Download
Affiliate Addendum
An Austrian law-governed addendum establishing terms and conditions for affiliate marketing relationships, including commission structures and compliance requirements.
Download
Sub Processing Agreement
An Austrian law-governed agreement establishing terms for delegating personal data processing activities to a sub-processor, ensuring GDPR compliance.
Download
International Data Transfer Agreement
An Austrian law-governed agreement for lawful transfer of personal data from EU/EEA to non-EU/EEA countries, ensuring GDPR compliance and appropriate data protection safeguards.
Download
ұԾ’s Security Promise
Genie is the safest place to draft. Here’s how we prioritise your privacy and security.
Your documents are private:
We do not train on your data; ұԾ’s AI improves independently
All data stored on Genie is private to your organisation
Your documents are protected:
Your documents are protected by ultra-secure 256-bit encryption
We are ISO27001 certified, so your data is secure
Organizational security:
You retain IP ownership of your documents and their information
You have full control over your data and who gets to see it
.png)