Controller To Controller Agreement GDPR Template for Netherlands

1. International Data Transfers: Required when personal data will be transferred outside the EEA, including transfer mechanisms and safeguards

2. Industry-Specific Requirements: Additional provisions for specific sectors (e.g., healthcare, financial services) with special data protection requirements

3. Joint Processing Activities: Required when certain processing activities are conducted jointly by both controllers

4. Audit Rights: Provisions for mutual auditing of data protection compliance, if agreed between parties

5. Insurance and Liability: Specific provisions on insurance requirements and liability allocation beyond standard provisions

6. Data Protection Impact Assessments: Procedures for conducting DPIAs when required and cooperation between parties

7. Sub-processing: Rules regarding the appointment of processors by either controller, if relevant

1. Schedule 1 - Categories of Personal Data: Detailed list of personal data categories being shared, including special categories if applicable

2. Schedule 2 - Processing Activities: Detailed description of processing activities, purposes, and data flows between controllers

3. Schedule 3 - Technical and Organizational Measures: Specific security measures and controls implemented by each party

4. Schedule 4 - Contact Points: List of key contacts for operational matters, data protection officers, and emergency situations

5. Schedule 5 - Data Subject Rights Procedure: Detailed procedures for handling data subject requests and cooperation between parties

6. Appendix A - Standard Contractual Clauses: If applicable for international transfers, including approved SCCs

7. Appendix B - Data Protection Impact Assessment: Summary or full DPIA if conducted for the shared processing activities