Controller To Controller DPA Template for Austria

1. International Transfers: Required when personal data will be transferred outside the EEA, including appropriate safeguards and SCCs

2. Joint Activities: Used when parties engage in any joint processing activities requiring coordination

3. Audit Rights: Optional provisions for mutual auditing of data protection practices

4. Insurance Requirements: Specific insurance obligations for data protection risks

5. Sub-processing: Include if either party may engage sub-processors for the shared data

6. Data Protection Impact Assessments: Required when processing is likely to result in high risk to individuals

7. Language: Required when the agreement needs to be in multiple languages or specify a prevailing language

1. Schedule 1: Categories of Personal Data: Detailed list of personal data categories being shared between the parties

2. Schedule 2: Technical and Organizational Measures: Specific security measures implemented by each party

3. Schedule 3: Data Transfer Mechanisms: Details of transfer mechanisms and safeguards for international transfers

4. Schedule 4: Contact Points: List of key contacts for operational, legal, and data protection matters

5. Schedule 5: Processing Activities: Detailed description of processing activities carried out by each party

6. Appendix A: Standard Contractual Clauses: If required for international transfers, the applicable SCCs

7. Appendix B: Data Breach Response Plan: Detailed procedures for handling and reporting data breaches