¶¶Òõ¶ÌÊÓƵ

This Joint Controller Agreement is essential when two or more organizations jointly determine the purposes and means of processing personal data in Switzerland. It's particularly relevant for collaborative projects, shared services, or joint ventures where multiple entities have decision-making power over data processing activities. The agreement must comply with the Swiss Federal Act on Data Protection (FADP) and considers GDPR requirements due to Switzerland's status as a country with EU adequacy. It should be used whenever organizations share responsibility for data processing decisions, defining clear roles, responsibilities, and liability allocation. The document includes detailed provisions for data security, breach notification, data subject rights, and specific Swiss law compliance requirements.

1. Parties: Identification of the joint controllers entering into the agreement

2. Background: Context of the joint processing activities and relationship between the parties

3. Definitions: Key terms used in the agreement, including Swiss law-specific terminology

4. Scope and Purpose: Defines the scope of joint processing activities and purposes of data processing

5. Roles and Responsibilities: Detailed allocation of responsibilities between joint controllers

6. Transparency and Data Subject Rights: Handling of data subject requests and transparency obligations

7. Data Security: Security measures required by both parties

8. Data Breach Notification: Procedures for handling and reporting data breaches

9. Liability and Indemnification: Allocation of liability between controllers and indemnification provisions

10. Term and Termination: Duration of the agreement and termination provisions

11. Governing Law and Jurisdiction: Confirmation of Swiss law application and jurisdiction

12. General Provisions: Standard contractual provisions including severability, entire agreement, etc.