¶¶Òõ¶ÌÊÓƵ

1. Special Categories of Data: Additional provisions for processing sensitive data - include if sensitive data is processed

2. International Data Transfers: Specific provisions for transfers outside Switzerland - include if data leaves Switzerland

3. Data Protection Officer: DPO appointment and responsibilities - include if required by law or voluntarily appointed

4. Sub-processing: Rules for engaging sub-processors - include if sub-processing is anticipated

5. Joint Controller Arrangements: Specific provisions for joint controller scenarios - include if joint controller relationship exists

6. Employee Data Processing: Specific provisions for employee data - include if employee data is processed

7. Insurance and Liability: Specific insurance requirements and liability allocation - include for high-risk processing

1. Schedule 1 - Categories of Data: Detailed list of personal data categories processed under the agreement

2. Schedule 2 - Processing Activities: Detailed description of processing activities conducted by each party

3. Schedule 3 - Technical and Organizational Measures: Detailed security measures implemented by all parties

4. Schedule 4 - Sub-processors: List of approved sub-processors and their processing activities

5. Schedule 5 - Transfer Mechanisms: Details of mechanisms used for international data transfers

6. Schedule 6 - Contact Points: List of key contacts for data protection matters at each entity

7. Appendix A - Data Processing Agreement: Standard terms for controller-processor relationships within the group

8. Appendix B - Security Breach Response Plan: Detailed procedures for handling data breaches