Data Controller To Data Controller Agreement Template for Denmark

1. International Data Transfers: Required when personal data will be transferred outside the EEA, specifying transfer mechanisms and safeguards

2. Joint Controller Arrangements: Required when the parties act as joint controllers for certain processing activities

3. Special Categories of Data: Required when sharing involves sensitive personal data, specifying additional safeguards

4. Direct Marketing: Required when personal data will be used for direct marketing purposes

5. Data Protection Impact Assessment: Required when processing is likely to result in high risk to individuals

6. Liability and Indemnification: Detailed provisions on liability allocation and indemnification between controllers

7. Insurance: Requirements for maintaining specific insurance coverage

8. Audit Rights: Provisions for conducting audits of data protection compliance

1. Schedule 1 - Categories of Personal Data: Detailed list of personal data categories being shared between controllers

2. Schedule 2 - Purposes of Processing: Detailed description of all processing purposes and activities

3. Schedule 3 - Technical and Organizational Measures: Detailed description of security measures implemented by both parties

4. Schedule 4 - Data Subject Categories: List and description of categories of data subjects whose data is being shared

5. Schedule 5 - Authorized Sub-processors: List of approved sub-processors (if any) used by either controller

6. Schedule 6 - Contact Points: List of key contacts for operational, security, and data protection matters

7. Appendix A - Data Flow Diagram: Visual representation of how data flows between the controllers

8. Appendix B - Security Breach Response Plan: Detailed procedures for handling and reporting data breaches