Data Addendum Generator for Germany

1. Sub-processing: Include when the processor may engage sub-processors

2. International Transfers: Include when personal data will be transferred outside the EU/EEA

3. Joint Controller Arrangements: Include when parties are acting as joint controllers

4. Special Categories of Data: Include when processing sensitive personal data

5. Data Protection Impact Assessment: Include when high-risk processing requires DPIA

6. Industry-Specific Requirements: Include when specific sector regulations apply

7. Employee Data Processing: Include when processing employee personal data

8. Insurance Requirements: Include when specific insurance coverage for data processing is required

1. Schedule 1 - Processing Activities: Detailed description of processing activities, including categories of data subjects and personal data

2. Schedule 2 - Technical and Organizational Measures: Detailed security measures implemented by the processor

3. Schedule 3 - Approved Sub-processors: List of approved sub-processors and their processing activities

4. Schedule 4 - Transfer Mechanisms: Details of international transfer mechanisms including SCCs if applicable

5. Schedule 5 - Data Breach Response Plan: Detailed procedures for handling and reporting data breaches

6. Appendix A - Contact Details: Contact information for data protection officers and key representatives

7. Appendix B - Standard Forms: Standard forms for data subject requests, breach notifications, and audit requests