1. International Data Transfers: Required when personal data will be transferred outside the EU/EEA, incorporating SCCs if necessary

2. Special Categories of Data: Additional safeguards when processing special categories of personal data under Article 9 GDPR

3. Employee Data Protection: Specific provisions required when processing employee data under German law

4. Data Protection Impact Assessment: Cooperation obligations when DPIA is required

5. Industry-Specific Requirements: Additional provisions for specific sectors (e.g., healthcare, telecommunications)

6. Insurance Requirements: Specific insurance obligations for data protection

7. Force Majeure: Provisions for handling extraordinary circumstances affecting data processing

1. Schedule 1 - Processing Activities: Detailed description of processing activities, including purposes, categories of data subjects and personal data

2. Schedule 2 - Technical and Organizational Measures: Detailed security measures implemented by the processor, including access controls, encryption, and backup procedures

3. Schedule 3 - Approved Sub-processors: List of pre-approved sub-processors and their processing activities

4. Schedule 4 - Transfer Mechanisms: Details of international transfer mechanisms if applicable, including SCCs

5. Appendix 1 - Security Breach Response Plan: Detailed procedures for handling and reporting data breaches

6. Appendix 2 - Audit Procedures: Specific procedures and requirements for conducting audits

7. Appendix 3 - Data Deletion Protocol: Technical procedures for secure data deletion and certification