Joint Controller Agreement Template for Austria

1. Subprocessors: Include when either controller uses subprocessors for the joint processing activities

2. International Transfers: Required when personal data is transferred outside the EEA

3. Insurance: Include when specific insurance requirements need to be maintained by the parties

4. Audit Rights: Optional section detailing mutual audit rights between controllers

5. Cost Allocation: Include when there are shared costs for the joint processing activities

6. Data Protection Impact Assessment: Required when processing likely results in high risk to individuals

7. Joint Controller Contact Points: Include when specific organizational units or roles need to be designated as contact points

1. Schedule 1 - Processing Activities: Detailed description of joint processing activities, including categories of data and purposes

2. Schedule 2 - Technical and Organizational Measures: Specific security measures implemented by each controller

3. Schedule 3 - Data Subject Information: Template privacy notices and information provided to data subjects

4. Schedule 4 - Data Breach Response Plan: Detailed procedures and contact information for breach response

5. Appendix A - Contact Details: Key contacts for each controller for various purposes under the agreement

6. Appendix B - Subprocessor List: Current list of approved subprocessors (if applicable)