1. International Data Transfers: Required if personal data will be transferred outside the EEA

2. Special Category Data Processing: Required if processing sensitive data like health information or biometric data

3. Automated Decision Making: Required if any automated processing or profiling will be performed

4. Photography and Video Consent: Required if the employer wishes to use employee images or videos

5. Marketing Communications: Required if employee data will be used for any marketing purposes

6. Emergency Contact Information: Required if collecting emergency contact details of third parties

1. Schedule 1: Detailed Data Processing Activities: Comprehensive list of all data processing activities and their specific purposes

2. Schedule 2: Third Party Processors: List of all third-party data processors and their roles

3. Schedule 3: Data Retention Schedule: Detailed retention periods for different categories of personal data

4. Appendix A: Employee Privacy Notice: Full privacy notice providing detailed information about data processing activities

5. Appendix B: Data Subject Rights Request Form: Template form for employees to exercise their data protection rights