The Data Processing Addendum (DPA) is a crucial legal document required whenever a company (controller) engages another party (processor) to process personal data on its behalf under Swiss jurisdiction. This document serves as an addendum to the main service agreement and ensures compliance with the Swiss Federal Data Protection Act (FADP/revFADP) and, where applicable, the GDPR. The DPA outlines essential elements such as processing purposes, data security requirements, breach notification procedures, and cross-border transfer mechanisms. It becomes particularly important in the context of Switzerland's unique position as a non-EU country that maintains close alignment with EU data protection standards. The document must be in place before any data processing activities commence and should be updated as regulatory requirements or processing activities change.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Your data doesn't train 蜜桃传媒's AI
You keep IP ownership聽of your docs
Alternatively...
1. Parties: Identification of the data controller and data processor, including full legal names and addresses
2. Background: Context of the relationship between parties and purpose of the DPA as an addendum to the main service agreement
3. Definitions: Key terms used in the agreement, including those from FADP/revFADP and GDPR where applicable
4. Scope and Purpose: Details of the data processing activities covered by the agreement
5. Roles and Responsibilities: Clear delineation of roles as controller and processor, and their respective obligations
6. Processing Instructions: Controller's instructions for data processing and processor's obligation to follow them
7. Confidentiality: Confidentiality obligations and personnel access restrictions
8. Security Measures: Technical and organizational security measures required to protect personal data
9. Subprocessing: Conditions and requirements for engaging subprocessors
10. Data Subject Rights: Processor's obligations to assist controller with data subject requests
11. Data Breach Notification: Procedures and timeframes for reporting data breaches
12. Audit Rights: Controller's rights to audit and processor's obligations to demonstrate compliance
13. Data Transfer Mechanisms: Requirements for international data transfers
14. Term and Termination: Duration of the DPA and termination provisions
15. Return or Deletion of Data: Obligations regarding personal data upon termination
16. Governing Law and Jurisdiction: Specification of Swiss law as governing law and jurisdiction for disputes
1. GDPR Specific Provisions: Additional provisions specifically addressing GDPR requirements when processing EU resident data
2. Data Protection Impact Assessments: Processor's obligations to assist with DPIAs when required
3. Insurance Requirements: Specific insurance obligations for data protection risks
4. Joint Controller Provisions: Additional provisions when parties act as joint controllers rather than controller-processor
5. Industry-Specific Requirements: Additional provisions for specific industries (e.g., healthcare, financial services)
6. Data Protection Officer: Provisions regarding DPO appointment and coordination
7. Special Categories of Data: Additional safeguards for processing sensitive personal data
8. Liability and Indemnification: Specific liability provisions for data protection breaches
1. Schedule 1 - Processing Activities: Detailed description of processing activities, including categories of data subjects, types of personal data, and processing purposes
2. Schedule 2 - Technical and Organizational Measures: Detailed description of security measures implemented to protect personal data
3. Schedule 3 - Approved Subprocessors: List of approved subprocessors and their processing activities
4. Schedule 4 - Transfer Mechanisms: Details of mechanisms used for international data transfers, including standard contractual clauses if applicable
5. Schedule 5 - Security Breach Response Plan: Detailed procedures for handling and reporting data breaches
6. Appendix A - Contact Details: Contact information for key personnel responsible for data protection
7. Appendix B - Audit Procedures: Detailed procedures for conducting compliance audits
Authors
Find the document you need
International Data Transfer Addendum
Swiss law-governed addendum for regulating international personal data transfers, ensuring compliance with FADP requirements and data protection standards.
Download
Intra Group Agreement Data Protection
Swiss law-governed agreement regulating data protection and transfers between group companies under FADP/DSG.
Download
Joint Controller Agreement
A Swiss law-governed agreement establishing responsibilities and obligations between joint controllers for personal data processing under FADP and considering GDPR requirements.
Download
Data Processing Addendum DPA
A Swiss law-governed agreement defining terms and responsibilities for personal data processing between controller and processor, ensuring compliance with FADP/revFADP and relevant GDPR requirements.
Download
Controller To Controller Data Processing Agreement
Swiss law-governed agreement establishing data sharing framework between two independent data controllers, ensuring FADP compliance and defining mutual data protection responsibilities.
Download
DPA Agreement
Swiss law-governed Data Processing Agreement defining controller-processor relationships and compliance requirements under FADP/DSG.
Download
Sub Processing Agreement
A Swiss law-governed agreement establishing terms for sub-processor data handling, ensuring compliance with Swiss FADP and related data protection requirements.
Download
骋别苍颈别鈥檚 Security Promise
蜜桃传媒 is the safest place to draft. Here鈥檚 how we prioritise your privacy and security.
Your data is private:
We do not train on your data; 骋别苍颈别鈥檚 AI improves independently
All data stored on 蜜桃传媒 is private to your organisation
Your documents are protected:
Your documents are protected by ultra-secure 256-bit encryption
We are ISO27001 certified, so your data is secure
Organizational security:
You retain IP ownership of your documents and their information
You have full control over your data and who gets to see it
