Create a bespoke document in minutes, or upload and review your own.
Get your first 2 documents free
Your data doesn't train Genie's AI
You keep IP ownership of your information
Privacy Policy Agreement
"I need a Privacy Policy Agreement for my new AI-powered healthcare app launching in Austria in March 2025, which will process sensitive medical data and use automated decision-making features - it needs to be GDPR-compliant and include specific provisions for handling health data and algorithmic transparency."
1. Parties: Identification of the data controller (organization) and the categories of data subjects covered by the policy
2. Background: Brief context explaining the purpose of the privacy policy and its scope of application
3. Definitions: Key terms used throughout the policy, including technical terms and GDPR-specific terminology
4. Scope and Acceptance: Details of what activities and data processing the policy covers and how acceptance is obtained
5. Types of Personal Data Collected: Comprehensive list of personal data categories collected and processed
6. Legal Basis for Processing: Explanation of the legal grounds under GDPR Article 6 for processing personal data
7. Purposes of Processing: Detailed description of how and why personal data is processed
8. Data Subject Rights: Explanation of all rights under GDPR and Austrian law, including how to exercise them
9. Data Security Measures: Overview of technical and organizational measures to protect personal data
10. Data Retention: Information about how long different types of personal data are stored
11. International Data Transfers: Information about any data transfers outside the EU/EEA and safeguards in place
12. Contact Information: Details of the data protection officer (if applicable) and how to contact the organization
13. Updates to Privacy Policy: Process for updating the policy and notifying data subjects of changes
1. Cookie Policy: Detailed information about cookie usage - required if the organization operates websites using cookies
2. Children's Privacy: Special provisions for processing children's data - required if services are offered to children
3. Marketing Communications: Specific section on marketing-related data processing - needed if conducting direct marketing
4. Employee Data Processing: Specific provisions for employee data - required if the policy covers employment relationships
5. Automated Decision Making: Information about automated processing and profiling - required if such processing occurs
6. Special Categories of Data: Specific provisions for sensitive data processing - required if processing special categories of personal data
7. Third-Party Services: Information about third-party data processors - needed if external service providers are used
1. Schedule 1: Technical Security Measures: Detailed description of specific security measures implemented
2. Schedule 2: Data Processing Activities: Detailed register of processing activities as required by GDPR Article 30
3. Schedule 3: Approved Third-Party Processors: List of approved data processors and their processing activities
4. Appendix A: Cookie List: Detailed list of all cookies used, their purposes and duration
5. Appendix B: Data Retention Schedule: Specific retention periods for different categories of personal data
6. Appendix C: Subject Access Request Form: Template form for data subjects to exercise their rights
Authors
Processing
Data Subject
Data Controller
Data Processor
Consent
Special Categories of Personal Data
Data Protection Officer
Supervisory Authority
Filing System
Third Party
Recipient
Cross-border Processing
Main Establishment
Binding Corporate Rules
Privacy Shield
Standard Contractual Clauses
Profiling
Pseudonymization
Anonymization
Data Breach
Cookies
Log Files
IP Address
User
Website
Services
Legal Basis
Legitimate Interest
Data Minimization
Storage Limitation
Data Portability
Right to be Forgotten
Automated Decision Making
Child/Minor
Marketing Communications
Technical Measures
Organizational Measures
Data Protection Impact Assessment
Records of Processing Activities
Consent
Data Collection
Data Processing
Data Transfer
Data Security
Data Retention
Data Subject Rights
International Transfer
Breach Notification
Children's Privacy
Marketing Communications
Cookie Usage
Third-Party Processing
Automated Processing
Access Control
Data Protection
Confidentiality
Compliance
Amendments
Liability
Jurisdiction
Dispute Resolution
Contact Information
Severability
Termination
Acceptance
Notice
Audit Rights
Subprocessing
Technology and Software
E-commerce
Healthcare
Financial Services
Education
Retail
Professional Services
Manufacturing
Telecommunications
Tourism and Hospitality
Real Estate
Non-profit Organizations
Government and Public Sector
Media and Entertainment
Legal
Compliance
Information Technology
Information Security
Human Resources
Marketing
Customer Service
Operations
Risk Management
Data Protection
Digital Operations
Website Management
Data Protection Officer
Chief Privacy Officer
Legal Counsel
Compliance Manager
Information Security Manager
Chief Information Security Officer
Chief Technology Officer
HR Director
Marketing Director
IT Manager
Risk Manager
Operations Manager
Customer Service Manager
Website Administrator
System Administrator
Find the exact document you need
GDPR Notice
A GDPR-compliant privacy notice for organizations operating in Austria, outlining personal data processing practices in accordance with EU and Austrian data protection laws.
Cookies Notice
An Austrian law-compliant Cookies Notice detailing website cookie usage and user rights under GDPR and local regulations.
Cctv Privacy Notice
An Austrian law-compliant CCTV privacy notice detailing video surveillance practices and data subject rights under GDPR and Austrian DSG requirements.
Privacy Notice GDPR
A GDPR-compliant Privacy Notice under Austrian law, detailing personal data processing practices and data subject rights in accordance with EU and Austrian data protection requirements.
Privacy Notice
An Austrian law-compliant Privacy Notice detailing personal data handling practices under GDPR and local data protection requirements.
Cookie Consent Notice
Austrian-law compliant Cookie Consent Notice meeting GDPR and local data protection requirements for website cookie usage and user consent.
Cookie Notice Text
A GDPR and Austrian law-compliant Cookie Notice Text explaining website tracking technologies and user rights under Austrian jurisdiction.
Website Privacy Notice
An Austrian-law compliant Website Privacy Notice meeting GDPR and local data protection requirements for website operators.
Recruitment Privacy Notice
An Austrian-compliant privacy notice for job applicants, detailing personal data handling during recruitment in accordance with GDPR and Austrian data protection laws.
Privacy Policy Notice
An Austrian/EU law-compliant Privacy Policy Notice detailing an organization's personal data handling practices and data subject rights under GDPR and Austrian Data Protection Act.
Employee Privacy Notice
An Austrian law-compliant Employee Privacy Notice detailing the organization's processing of employee personal data under GDPR and local data protection requirements.
Cookie Consent Policy
An Austrian law-compliant Cookie Consent Policy outlining website cookie usage and user rights under GDPR and local regulations.
Privacy Policy Agreement
An Austrian law-compliant privacy policy outlining personal data handling practices under GDPR and local data protection requirements.
Privacy Agreement
An Austrian law-governed Privacy Agreement establishing data processing terms and GDPR compliance requirements between parties.
Data Protection Notice
An Austrian law-compliant Data Protection Notice that informs individuals about personal data processing activities and their rights under GDPR and DSG.
Download our whitepaper on the future of AI in Legal
Genie’s Security Promise
Genie is the safest place to draft. Here’s how we prioritise your privacy and security.
Your documents are private:
We do not train on your data; Genie’s AI improves independently
All data stored on Genie is private to your organisation
Your documents are protected:
Your documents are protected by ultra-secure 256-bit encryption
Our bank-grade security infrastructure undergoes regular external audits
We are ISO27001 certified, so your data is secure
Organizational security
You retain IP ownership of your documents
You have full control over your data and who gets to see it
Innovation in privacy:
Genie partnered with the Computational Privacy Department at Imperial College London
Together, we ran a £1 million research project on privacy and anonymity in legal contracts
Want to know more?
Visit our Trust Centre for more details and real-time security updates.
Read our Privacy Policy.