1. Cross-border Transfers: Required when personal data may be transferred outside Switzerland, detailing the countries involved and safeguards in place

2. Special Categories of Data: Required when processing sensitive personal data as defined under FADP/DSG

3. Third-Party Processing: Required when third-party processors will have access to the data

4. Marketing Consent: Required when data will be used for marketing purposes

5. Automated Decision Making: Required when automated processing or profiling will be performed

6. Industry-Specific Provisions: Required for specific sectors (e.g., healthcare, financial services) with additional regulatory requirements

1. Schedule 1 - Categories of Personal Data: Detailed list of all personal data categories to be collected and processed

2. Schedule 2 - Processing Activities: Comprehensive list of specific processing activities and their purposes

3. Schedule 3 - Technical and Organizational Measures: Detailed description of security measures implemented to protect the data

4. Appendix A - Consent Form: Separate signature page for explicit consent to specific processing activities

5. Appendix B - Privacy Notice: Detailed privacy notice providing additional information about data processing practices

6. Appendix C - Data Subject Request Form: Template form for exercising data subject rights