Create a bespoke document in minutes, Â or upload and review your own.
Get your first 2 documents free
Your data doesn't train Genie's AI
You keep IP ownership of your information
Data Addendum
"I need a Data Addendum under Swiss law for a cloud service provider agreement with our US-based vendor, including provisions for cross-border transfers and sub-processor requirements, to be effective from March 2025."
1. Parties: Identification of the data controller and data processor (or joint controllers)
2. Background: Reference to the main agreement and purpose of this data addendum
3. Definitions: Key terms used in the addendum, aligned with FADP definitions
4. Scope and Purpose: Scope of data processing activities covered by the addendum
5. Data Protection Obligations: Core obligations under Swiss data protection law
6. Security Measures: Required technical and organizational security measures
7. Data Breach Notification: Procedures and timeframes for reporting data breaches
8. Subprocessing: Rules and requirements for engaging subprocessors
9. Data Subject Rights: Procedures for handling data subject requests
10. Audit Rights: Provisions for conducting data protection audits
11. Term and Termination: Duration of the addendum and termination provisions
12. Return or Deletion of Data: Obligations regarding data handling upon termination
13. Governing Law and Jurisdiction: Confirmation of Swiss law application and jurisdiction
1. Cross-Border Transfers: Required if personal data will be transferred outside Switzerland
2. Special Categories of Data: Required if processing sensitive personal data as defined in FADP
3. Data Protection Officer: Required if either party has appointed a DPO
4. Joint Controller Provisions: Required if the relationship is one of joint controllers rather than controller-processor
5. Industry-Specific Requirements: Required for regulated industries (e.g., financial services, healthcare)
6. Insurance Requirements: Optional section specifying required insurance coverage for data protection
7. Force Majeure: Optional provisions for handling data protection obligations during force majeure events
1. Schedule 1 - Processing Activities: Detailed description of data processing activities, categories of data, and purposes
2. Schedule 2 - Technical and Organizational Measures: Detailed security measures implemented to protect personal data
3. Schedule 3 - Approved Subprocessors: List of approved subprocessors and their processing activities
4. Schedule 4 - Transfer Mechanisms: Details of mechanisms used for international data transfers
5. Schedule 5 - Data Breach Response Plan: Detailed procedures for handling and reporting data breaches
6. Appendix A - Contact Details: Key contacts for data protection matters at both parties
7. Appendix B - Standard Contractual Clauses: If needed for international transfers, modified to comply with Swiss law requirements
Authors
Financial Services
Healthcare
Technology
E-commerce
Manufacturing
Professional Services
Insurance
Telecommunications
Education
Retail
Pharmaceutical
Logistics
Consulting
Legal
Compliance
Information Security
IT
Privacy
Risk Management
Procurement
Operations
Information Governance
Data Protection
Data Protection Officer
Privacy Counsel
Legal Counsel
Compliance Officer
Information Security Manager
Chief Information Security Officer
Chief Technology Officer
Chief Privacy Officer
Risk Manager
IT Director
Procurement Manager
Contract Manager
General Counsel
Data Protection Specialist
Information Governance Manager
Find the exact document you need
International Data Transfer Addendum
Swiss law-governed addendum for regulating international personal data transfers, ensuring compliance with FADP requirements and data protection standards.
Intra Group Agreement Data Protection
Swiss law-governed agreement regulating data protection and transfers between group companies under FADP/DSG.
Joint Controller Agreement
A Swiss law-governed agreement establishing responsibilities and obligations between joint controllers for personal data processing under FADP and considering GDPR requirements.
Standard Data Processing Agreement
Swiss law-governed Data Processing Agreement establishing controller-processor obligations under FADP/DSG and aligned with GDPR requirements.
Data Addendum
Swiss law-governed data protection addendum establishing data processing obligations and compliance with FADP/DPA requirements.
Data Processing Addendum DPA
A Swiss law-governed agreement defining terms and responsibilities for personal data processing between controller and processor, ensuring compliance with FADP/revFADP and relevant GDPR requirements.
International Data Protection Agreement
Swiss law-governed agreement regulating international data protection and cross-border data transfers, ensuring compliance with Swiss FADP and relevant international standards.
Data Sharing Agreement Controller To Processor
Swiss law-governed Data Sharing Agreement between Controller and Processor, ensuring FADP/LPD compliance and establishing data processing safeguards.
Processor To Processor DPA
A Swiss law-governed agreement between two data processors establishing terms and conditions for delegated data processing activities.
Controller To Controller Data Processing Agreement
Swiss law-governed agreement establishing data sharing framework between two independent data controllers, ensuring FADP compliance and defining mutual data protection responsibilities.
Intercompany Data Processing Agreement
Swiss law-governed agreement regulating intra-group personal data processing activities, ensuring compliance with Swiss FADP and relevant GDPR requirements.
Controller To Controller DPA
Swiss law-governed agreement between two data controllers establishing framework for lawful personal data sharing and processing.
DPA Agreement
Swiss law-governed Data Processing Agreement defining controller-processor relationships and compliance requirements under FADP/DSG.
Order Processing Agreement
A Swiss law-governed agreement between a data controller and processor that establishes obligations and responsibilities for personal data processing under FADP/DSG.
Data Privacy Addendum
Swiss law-governed Data Privacy Addendum ensuring compliance with Swiss FADP/revFADP and alignment with GDPR requirements for personal data processing.
Sub Processing Agreement
A Swiss law-governed agreement establishing terms for sub-processor data handling, ensuring compliance with Swiss FADP and related data protection requirements.
International Data Transfer Agreement
Swiss-law governed International Data Transfer Agreement for compliant cross-border personal data transfers under the revFDPA.
Data Protection Addendum
A Swiss law-governed Data Protection Addendum establishing data processing requirements and responsibilities between parties under Swiss FADP/DSG.
Download our whitepaper on the future of AI in Legal
³Ò±ð²Ô¾±±ð’s Security Promise
Genie is the safest place to draft. Here’s how we prioritise your privacy and security.
Your documents are private:
We do not train on your data; ³Ò±ð²Ô¾±±ð’s AI improves independently
All data stored on Genie is private to your organisation
Your documents are protected:
Your documents are protected by ultra-secure 256-bit encryption
Our bank-grade security infrastructure undergoes regular external audits
We are ISO27001 certified, so your data is secure
Organizational security
You retain IP ownership of your documents
You have full control over your data and who gets to see it
Innovation in privacy:
Genie partnered with the Computational Privacy Department at Imperial College London
Together, we ran a £1 million research project on privacy and anonymity in legal contracts
Want to know more?
Visit our for more details and real-time security updates.
Read our Privacy Policy.