¶¶Òõ¶ÌÊÓƵ

1. Cross-Border Transfers: Required when personal data will be transferred outside Switzerland or the EEA, including specific safeguards and transfer mechanisms

2. Industry-Specific Requirements: Additional provisions for specific industries (e.g., banking, healthcare) subject to additional regulatory requirements

3. Joint Controller Provisions: Required when the relationship between the parties qualifies as joint controllership rather than controller-processor

4. Insurance Requirements: Specific insurance obligations for data processing activities, if required by company policy or risk assessment

5. Business Continuity: Specific provisions for ensuring continuous data processing operations, required for critical business functions

6. Data Protection Impact Assessment: Procedures for conducting DPIAs when required by the nature of processing

1. Schedule 1 - Processing Activities: Detailed description of processing activities, including categories of data subjects, types of personal data, and processing purposes

2. Schedule 2 - Technical and Organizational Measures: Detailed description of security measures implemented to protect personal data

3. Schedule 3 - Approved Subprocessors: List of approved subprocessors and their processing activities

4. Schedule 4 - Transfer Mechanisms: Details of mechanisms used for international data transfers, including standard contractual clauses if applicable

5. Schedule 5 - Contact Points: List of key contacts for data protection matters, breach notification, and data subject requests

6. Appendix A - Data Subject Rights Procedure: Detailed procedures for handling data subject requests

7. Appendix B - Data Breach Response Plan: Detailed procedures for responding to and documenting data breaches