Your data doesn't train Genie's AI
You keep IP ownership of your docs
1. Parties: Identification of the contracting parties, including the data controller, any processors, and other relevant stakeholders
2. Background: Context of the agreement and explanation of why the DPIA is being conducted
3. Definitions: Key terms used in the agreement, including technical terms and references to GDPR and BDSG definitions
4. Purpose and Scope: Detailed description of the processing activities being assessed and the scope of the DPIA
5. Roles and Responsibilities: Definition of roles and responsibilities of all parties involved in the DPIA process
6. Assessment Methodology: Description of the methodology used to conduct the DPIA, including risk assessment criteria
7. Data Processing Description: Detailed description of personal data processing activities, including data types, purposes, and processing operations
8. Necessity and Proportionality Assessment: Assessment of whether the processing is necessary and proportionate to the purposes
9. Risk Assessment: Identification and assessment of risks to data subjects' rights and freedoms
10. Risk Mitigation Measures: Description of measures to address identified risks and ensure GDPR compliance
11. Monitoring and Review: Procedures for ongoing monitoring and periodic review of the DPIA
12. Documentation and Reporting: Requirements for documenting the DPIA process and findings
13. Term and Termination: Duration of the agreement and conditions for termination
14. Governing Law and Jurisdiction: Specification of German law as governing law and jurisdiction for disputes
1. Consultation with Data Subjects: Procedures for consulting with data subjects or their representatives, used when processing affects large groups of individuals
2. Prior Consultation with DPA: Procedures for consulting with supervisory authorities, included when residual risks remain high
3. Employee Data Processing: Specific provisions for processing employee data, included when the DPIA involves workforce monitoring or employee data processing
4. Cross-border Data Transfers: Additional requirements for international data transfers, included when processing involves data transfers outside the EU/EEA
5. Special Categories of Data: Additional safeguards for processing sensitive data, included when processing special categories of personal data
6. Automated Decision-Making: Specific provisions for automated processing and profiling, included when such processing is part of the assessed activities
1. Schedule 1: Processing Activities Register: Detailed inventory of all processing activities covered by the DPIA
2. Schedule 2: Risk Assessment Matrix: Detailed risk assessment criteria and scoring matrix
3. Schedule 3: Technical and Organizational Measures: Detailed description of security measures and controls implemented
4. Schedule 4: Data Flow Diagrams: Visual representations of data flows and processing activities
5. Schedule 5: Compliance Checklist: Checklist of GDPR and BDSG requirements and compliance status
6. Schedule 6: Review and Update Log: Record of DPIA reviews and updates
7. Appendix A: Relevant Policies and Procedures: References to related organizational policies and procedures
8. Appendix B: DPA Consultation Records: Documentation of any consultations with data protection authorities
Find the exact document you need
Pre Negotiation Agreement
A German law-governed preliminary agreement establishing the framework and terms for conducting business negotiations, including confidentiality and good faith obligations.
Third Party Processing Agreement
A German law-governed agreement establishing terms for third-party data processing, ensuring GDPR and BDSG compliance.
Controller To Controller Agreement
A German law-governed agreement establishing joint processing arrangements between two or more data controllers under GDPR and BDSG requirements.
Product Development Non Disclosure Agreement
German law-governed NDA for protecting confidential information in product development relationships, compliant with GeschGehG and BGB requirements.
Data Processing Contract
A German law-governed agreement establishing terms for GDPR-compliant personal data processing between controller and processor.
Joint Controller Agreement
A German law-governed agreement establishing shared data protection responsibilities between joint controllers under GDPR Article 26 and BDSG requirements.
Standard Data Processing Agreement
A German law-governed Data Processing Agreement ensuring GDPR compliance for personal data processing between controller and processor.
Order Data Processing Agreement
German law-governed Data Processing Agreement establishing terms for personal data processing under GDPR and BDSG requirements.
Dpia Agreement
A German law-compliant agreement establishing the framework for conducting Data Protection Impact Assessments under GDPR and BDSG requirements.
Data Processing Addendum
A German law-compliant Data Processing Addendum that establishes terms for personal data processing under GDPR and BDSG requirements.
Data Addendum
A German law-governed Data Processing Addendum ensuring GDPR and BDSG compliance for personal data processing activities.
Controller Processor Contract
A GDPR-compliant data processing agreement under German law governing the relationship between a data controller and processor, establishing terms for lawful personal data processing.
International Data Protection Agreement
German law-governed International Data Protection Agreement ensuring GDPR compliance for cross-border data transfers.
Data Sharing Agreement Controller To Processor
A German law-governed agreement establishing terms for personal data processing between a controller and processor under GDPR and BDSG requirements.
Processor To Processor DPA
German law-governed Data Processing Agreement between processors, compliant with GDPR and BDSG requirements.
Intra Group Data Transfer Agreement
German law-governed agreement regulating personal data transfers between group companies, ensuring GDPR and BDSG compliance.
Data Controller To Data Controller Agreement
A German law-governed agreement between two data controllers establishing terms for sharing personal data in compliance with GDPR and German data protection laws.
Intercompany Data Processing Agreement
German law-governed data processing agreement between group companies, compliant with GDPR and BDSG requirements.
Controller To Controller DPA
A German law-governed agreement between two data controllers establishing terms for joint personal data processing, compliant with GDPR and BDSG requirements.
Third Party Data Processing Agreement
A German law-governed agreement establishing terms for personal data processing, ensuring compliance with GDPR and German data protection requirements.
Data Transfer Addendum
German law-governed Data Transfer Addendum ensuring GDPR compliance and German BDSG requirements for secure personal data transfers between organizations.
Personal Data Transfer Agreement
A German law-governed agreement for compliant transfer of personal data between parties, ensuring GDPR and BDSG compliance.
Controller Processor Agreement
A German law-governed agreement between data controller and processor defining data processing terms and obligations under GDPR and BDSG.
Order Processing Agreement
A German-law governed agreement between a data controller and processor establishing terms for compliant personal data processing under GDPR and BDSG.
Affiliate Addendum
A German law-governed addendum establishing terms and conditions for affiliate marketing relationships, including commission structures and compliance requirements.
Sub Processing Agreement
A German law-governed agreement between a processor and sub-processor for GDPR-compliant personal data processing, incorporating specific requirements under German data protection law.
International Data Transfer Agreement
German law-governed agreement for regulating international transfers of personal data from German organizations to non-EEA recipients, ensuring GDPR compliance.
ұԾ’s Security Promise
Genie is the safest place to draft. Here’s how we prioritise your privacy and security.
Your documents are private:
We do not train on your data; ұԾ’s AI improves independently
All data stored on Genie is private to your organisation
Your documents are protected:
Your documents are protected by ultra-secure 256-bit encryption
We are ISO27001 certified, so your data is secure
Organizational security:
You retain IP ownership of your documents and their information
You have full control over your data and who gets to see it

.png)