Personal Data Sharing Agreement Template for Germany

1. International Data Transfers: Required when personal data will be transferred outside the EEA, including appropriate transfer mechanisms

2. Sub-processing: Needed when the receiving party may engage sub-processors for data processing

3. Joint Controller Arrangements: Required when parties are acting as joint controllers, defining respective responsibilities

4. Works Council Requirements: Necessary when sharing involves employee data subject to Works Constitution Act requirements

5. Industry-Specific Requirements: Additional provisions for specific sectors (e.g., healthcare, telecommunications)

6. Audit Rights: Detailed audit provisions when regular compliance verification is required

7. Insurance Requirements: Specific insurance obligations for data protection risks

8. Data Protection Impact Assessment: Provisions regarding DPIAs when processing is likely to result in high risk

1. Schedule 1 - Processing Details: Detailed description of processing activities, including nature, purpose, and types of personal data

2. Schedule 2 - Technical and Organizational Measures: Detailed specification of security measures implemented by parties

3. Schedule 3 - Authorized Sub-processors: List of approved sub-processors and their processing activities

4. Schedule 4 - Transfer Mechanisms: Details of international transfer mechanisms (e.g., SCCs, BCRs) if applicable

5. Schedule 5 - Contact Points: List of key contacts for operational, technical, and data protection matters

6. Appendix A - Data Processing Details: Specific details about data categories, processing purposes, and retention periods

7. Appendix B - Security Breach Response Plan: Detailed procedures for handling and reporting data breaches

8. Appendix C - Data Subject Request Procedure: Detailed process for handling data subject rights requests