Create a bespoke document in minutes, or upload and review your own.
Get your first 2 documents free
Your data doesn't train Genie's AI
You keep IP ownership of your information
Data Processing Agreement
1. Parties: Identification of the data controller and data processor, including their legal representatives
2. Background: Context of the agreement and the processing relationship between the parties
3. Definitions: Key terms used in the agreement, including those from GDPR and Danish law
4. Scope and Purpose: Details of the processing activities covered by the agreement
5. Duration: Term of the agreement and conditions for termination
6. Nature and Purpose of Processing: Detailed description of why and how personal data will be processed
7. Types of Personal Data and Categories of Data Subjects: Specification of the personal data types and whose data will be processed
8. Obligations of the Controller: Responsibilities and duties of the data controller
9. Obligations of the Processor: Core processor obligations including security, confidentiality, and assistance requirements
10. Sub-processing: Rules and requirements for engaging sub-processors
11. Data Subject Rights: Procedures for handling data subject requests and processor's assistance obligations
12. Personal Data Breaches: Notification requirements and procedures for handling data breaches
13. Audit Rights: Controller's audit rights and processor's obligations to demonstrate compliance
14. Return or Deletion of Data: Requirements for data handling upon agreement termination
15. Liability and Indemnification: Allocation of responsibility and liability between parties
16. Governing Law and Jurisdiction: Specification of Danish law application and jurisdiction
1. International Data Transfers: Required when personal data may be transferred outside the EU/EEA, including transfer mechanisms and safeguards
2. Specific Technical Requirements: Include when there are industry-specific or client-specific technical requirements for data processing
3. Insurance Requirements: Include when specific insurance coverage is required for the processing activities
4. Business Continuity: Include when specific business continuity and disaster recovery requirements are needed
5. Special Categories of Personal Data: Required when processing sensitive data categories under Article 9 GDPR
6. Data Protection Impact Assessments: Include when high-risk processing requires specific DPIA procedures
7. Cooperation with Supervisory Authorities: Include when specific procedures for regulatory cooperation are required
1. Schedule 1 - Processing Activities: Detailed description of all processing activities, including purposes, data types, and processing operations
2. Schedule 2 - Technical and Organizational Measures: Detailed security measures implemented to ensure appropriate level of security
3. Schedule 3 - Approved Sub-processors: List of pre-approved sub-processors and their processing activities
4. Schedule 4 - Transfer Mechanisms: Details of international transfer mechanisms if applicable
5. Schedule 5 - Service Level Agreement: Specific service levels and performance metrics for the processing activities
6. Schedule 6 - Security Breach Response Plan: Detailed procedures for handling and reporting personal data breaches
7. Schedule 7 - Audit Procedures: Specific procedures and requirements for conducting audits
Authors
Applicable Data Protection Law
Authorized Persons
Business Day
Controller
Danish Data Protection Act
Data Subject
Data Subject Rights
Documentation
EEA
GDPR
Personal Data
Personal Data Breach
Processing
Processor
Processing Instructions
Restricted Transfer
Services
Special Categories of Personal Data
Sub-processor
Supervisory Authority
Technical and Organizational Measures
Term
Third Country
Written Notice
Working Day
Confidential Information
Data Protection Impact Assessment
Data Protection Officer
Records of Processing Activities
Security Breach
Service Agreement
Standard Contractual Clauses
Transfer Mechanism
Danish Data Protection Agency
Datatilsynet
Appointment
Duration
Scope of Processing
Data Protection Compliance
Controller Obligations
Processor Obligations
Sub-processing
Technical Security
Organizational Security
Confidentiality
Data Subject Rights
Personal Data Breaches
Data Protection Impact Assessment
International Transfers
Audit Rights
Records and Documentation
Liability and Indemnification
Insurance
Term and Termination
Data Return and Deletion
Force Majeure
Assignment
Notices
Severability
Entire Agreement
Variation
Waiver
Third Party Rights
Governing Law
Jurisdiction
Find the exact document you need
Download our whitepaper on the future of AI in Legal
Genie’s Security Promise
Genie is the safest place to draft. Here’s how we prioritise your privacy and security.
Your documents are private:
We do not train on your data; Genie’s AI improves independently
All data stored on Genie is private to your organisation
Your documents are protected:
Your documents are protected by ultra-secure 256-bit encryption
Our bank-grade security infrastructure undergoes regular external audits
We are ISO27001 certified, so your data is secure
Organizational security
You retain IP ownership of your documents
You have full control over your data and who gets to see it
Innovation in privacy:
Genie partnered with the Computational Privacy Department at Imperial College London
Together, we ran a £1 million research project on privacy and anonymity in legal contracts
Want to know more?
Visit our Trust Centre for more details and real-time security updates.
Read our Privacy Policy.