Data Use Agreement Template for Germany

1. International Data Transfers: Required when data will be transferred outside the EU/EEA, including Standard Contractual Clauses references

2. Subprocessing: Include when the data recipient may engage subprocessors, specifying approval requirements and obligations

3. Industry-Specific Requirements: Additional provisions for specific sectors (e.g., healthcare, financial services)

4. Audit Rights: Detailed audit provisions when regular compliance verification is required

5. Data Subject Rights Management: Specific procedures for handling data subject requests when direct interaction with data subjects is expected

6. Joint Controller Provisions: Required when parties are acting as joint controllers under GDPR Article 26

7. Insurance Requirements: Specific insurance obligations for high-risk data processing activities

1. Schedule 1 - Data Categories and Processing Activities: Detailed list of data types, processing purposes, and categories of data subjects

2. Schedule 2 - Technical and Organizational Measures: Detailed security measures and controls implemented by the parties

3. Schedule 3 - Authorized Subprocessors: List of approved subprocessors and their processing activities, if applicable

4. Schedule 4 - Contact Points and Escalation Procedure: Key contacts for operational matters and emergency situations

5. Schedule 5 - Service Levels: Performance metrics and response times for data-related services

6. Appendix A - Standard Contractual Clauses: EU SCCs for international data transfers, if applicable

7. Appendix B - Data Processing Details: Specific details about processing operations, systems, and workflows