¶¶Òõ¶ÌÊÓƵ

1. Special Categories of Personal Data: Additional provisions for handling sensitive personal data, required if such data is processed

2. International Transfers: Specific provisions for transfers outside the EU/EEA, needed if group includes non-EU entities

3. Joint Controller Arrangements: Detailed arrangements where multiple group entities jointly determine processing purposes

4. Sub-processing: Rules for engaging sub-processors, needed if external processors are used

5. Data Protection Impact Assessments: Procedures for conducting DPIAs, required for high-risk processing

6. Employee Data Processing: Specific provisions for handling employee data, needed if agreement covers HR data

7. Marketing Data: Specific provisions for marketing data sharing, needed if marketing activities are included

1. Schedule 1 - Details of Processing Activities: Detailed description of processing activities, categories of data subjects and personal data

2. Schedule 2 - Technical and Organizational Security Measures: Specific security measures implemented by all parties

3. Schedule 3 - Approved Sub-processors: List of approved sub-processors and their processing activities

4. Schedule 4 - Transfer Mechanisms: Details of transfer mechanisms used for international transfers

5. Schedule 5 - Data Subject Request Procedures: Detailed procedures for handling data subject requests

6. Appendix A - Contact Points: List of key contacts and DPOs for each party

7. Appendix B - Standard Forms: Standard forms for data breach reporting, audit requests, and other regular communications