¶¶Òõ¶ÌÊÓƵ

1. Sub-processing: Required when the data importer intends to use sub-processors, detailing approval processes and obligations

2. Special Categories of Data: Required when sensitive personal data is being transferred, specifying additional safeguards

3. Data Retention and Deletion: Detailed requirements for data retention periods and deletion procedures, if not covered in main sections

4. Insurance Requirements: Specific insurance obligations for data protection risks, if required by either party

5. Business Continuity: Disaster recovery and business continuity requirements, if critical to the data processing

6. Joint Controller Provisions: Required when parties act as joint controllers, detailing shared responsibilities

7. Import/Export Compliance: Required for transfers involving countries with specific data localization requirements

1. Schedule 1 - Description of Transfer: Detailed description of data transfers including data categories, subjects, purposes, and processing activities

2. Schedule 2 - Technical and Organizational Measures: Detailed security measures and controls implemented to protect the transferred data

3. Schedule 3 - Authorized Sub-processors: List of approved sub-processors and their processing activities, if applicable

4. Schedule 4 - Transfer Impact Assessment: Assessment of risks and safeguards for transfers to countries without adequate protection

5. Appendix A - Contact Points: List of key contacts for operational, legal, and data protection matters

6. Appendix B - Data Processing Details: Specific details about processing operations, including systems, locations, and procedures

7. Appendix C - Standard Contractual Clauses: If applicable, incorporation of standard contractual clauses approved by Swiss authorities