Privacy Agreement Template for Switzerland

1. Industry-Specific Compliance: Additional requirements for specific sectors (e.g., healthcare, financial services)

2. Data Protection Impact Assessment: Include when processing high-risk data or using new technologies

3. Joint Controller Provisions: Required when multiple parties jointly determine processing purposes

4. Sub-processor Requirements: Include when sub-processors may be engaged for data processing

5. Insurance Requirements: Specific insurance obligations for high-risk processing activities

6. Audit Rights: Detailed audit provisions for complex processing arrangements

7. Data Protection Officer: Required when parties must designate DPOs under applicable law

1. Schedule 1 - Categories of Personal Data: Detailed list of personal data types and categories being processed

2. Schedule 2 - Technical and Organizational Measures: Detailed security measures and controls implemented

3. Schedule 3 - Approved Sub-processors: List of approved sub-processors and their processing activities

4. Schedule 4 - Data Processing Activities: Detailed description of specific processing operations

5. Schedule 5 - Data Transfer Mechanisms: Details of cross-border transfer mechanisms and safeguards

6. Appendix A - Contact Details: Key contacts for data protection matters and breach reporting

7. Appendix B - Standard Forms: Templates for data subject requests, breach notifications, and other standard procedures