A Sub Processing Agreement is essential when a primary data processor needs to engage another entity (sub-processor) to process personal data on its behalf. This document is particularly crucial in the Swiss legal context, where data protection requirements are stringent and align closely with European standards. The agreement must comply with the Swiss Federal Data Protection Act (FADP/DSG) and may also need to address GDPR requirements if European data is involved. It typically includes detailed provisions on data security measures, breach reporting obligations, audit rights, and liability arrangements. The Sub Processing Agreement is commonly used in outsourcing arrangements, cloud services implementations, or any scenario where data processing activities are delegated to third parties. It serves as a critical tool for ensuring unbroken accountability and compliance in data processing chains.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Your data doesn't train Genie's AI
You keep IP ownership of your docs
1. Parties: Identification of the main processor and sub-processor, including full legal names, registration details, and addresses
2. Background: Context of the agreement, reference to the main processing agreement, and the need for sub-processing services
3. Definitions: Key terms used throughout the agreement, including specific Swiss law terminology and data protection concepts
4. Scope and Purpose: Detailed description of the sub-processing services and the types of personal data to be processed
5. Duration and Termination: Term of the agreement, termination conditions, and consequences of termination
6. Sub-processor Obligations: Core obligations including data processing instructions, confidentiality, security measures, and compliance requirements
7. Data Protection Safeguards: Specific measures to ensure compliance with Swiss FADP and other applicable data protection laws
8. Security Requirements: Mandatory security measures and protocols for data protection
9. Audit Rights: Processor's rights to audit and inspect sub-processor's compliance
10. Data Breach Notification: Procedures and timeframes for reporting data breaches
11. Liability and Indemnification: Allocation of responsibility and liability between parties
12. General Provisions: Standard contractual terms including governing law, jurisdiction, and entire agreement provisions
1. International Data Transfers: Required if personal data will be transferred outside Switzerland, including specific safeguards and mechanisms
2. Industry-Specific Compliance: Additional provisions for regulated industries (e.g., financial services, healthcare)
3. Disaster Recovery: Detailed business continuity and disaster recovery procedures, recommended for critical services
4. Insurance Requirements: Specific insurance obligations, recommended for high-risk processing activities
5. Sub-sub-processing: Terms governing any further sub-processing, if permitted
6. Special Categories of Data: Additional safeguards for processing sensitive personal data
7. Exit Management: Detailed procedures for transition of services upon termination, recommended for complex processing arrangements
1. Schedule 1 - Processing Activities: Detailed description of processing activities, including categories of data subjects, types of personal data, and processing purposes
2. Schedule 2 - Technical and Organizational Measures: Comprehensive list of security measures and controls implemented by the sub-processor
3. Schedule 3 - Service Levels: Performance metrics and service level requirements for the sub-processing services
4. Schedule 4 - Fee Schedule: Pricing and payment terms for the sub-processing services
5. Schedule 5 - Approved Sub-sub-processors: List of any approved further sub-processors, if applicable
6. Appendix A - Data Breach Response Plan: Detailed procedures and contact information for handling data breaches
7. Appendix B - Audit Procedures: Specific procedures and requirements for conducting audits
Find the exact document you need
International Data Transfer Addendum
Swiss law-governed addendum for regulating international personal data transfers, ensuring compliance with FADP requirements and data protection standards.
Download
Intra Group Agreement Data Protection
Swiss law-governed agreement regulating data protection and transfers between group companies under FADP/DSG.
Download
Joint Controller Agreement
A Swiss law-governed agreement establishing responsibilities and obligations between joint controllers for personal data processing under FADP and considering GDPR requirements.
Download
Standard Data Processing Agreement
Swiss law-governed Data Processing Agreement establishing controller-processor obligations under FADP/DSG and aligned with GDPR requirements.
Download
Data Addendum
Swiss law-governed data protection addendum establishing data processing obligations and compliance with FADP/DPA requirements.
Download
Data Processing Addendum DPA
A Swiss law-governed agreement defining terms and responsibilities for personal data processing between controller and processor, ensuring compliance with FADP/revFADP and relevant GDPR requirements.
Download
International Data Protection Agreement
Swiss law-governed agreement regulating international data protection and cross-border data transfers, ensuring compliance with Swiss FADP and relevant international standards.
Download
Data Sharing Agreement Controller To Processor
Swiss law-governed Data Sharing Agreement between Controller and Processor, ensuring FADP/LPD compliance and establishing data processing safeguards.
Download
Processor To Processor DPA
A Swiss law-governed agreement between two data processors establishing terms and conditions for delegated data processing activities.
Download
Master Data Protection Agreement
A Swiss law-governed agreement establishing data processing requirements and responsibilities between controllers and processors under FADP/nDSG.
Download
Controller To Controller Data Processing Agreement
Swiss law-governed agreement establishing data sharing framework between two independent data controllers, ensuring FADP compliance and defining mutual data protection responsibilities.
Download
Intercompany Data Processing Agreement
Swiss law-governed agreement regulating intra-group personal data processing activities, ensuring compliance with Swiss FADP and relevant GDPR requirements.
Download
Controller To Controller DPA
Swiss law-governed agreement between two data controllers establishing framework for lawful personal data sharing and processing.
Download
DPA Agreement
Swiss law-governed Data Processing Agreement defining controller-processor relationships and compliance requirements under FADP/DSG.
Download
Order Processing Agreement
A Swiss law-governed agreement between a data controller and processor that establishes obligations and responsibilities for personal data processing under FADP/DSG.
Download
Data Privacy Addendum
Swiss law-governed Data Privacy Addendum ensuring compliance with Swiss FADP/revFADP and alignment with GDPR requirements for personal data processing.
Download
Sub Processing Agreement
A Swiss law-governed agreement establishing terms for sub-processor data handling, ensuring compliance with Swiss FADP and related data protection requirements.
Download
International Data Transfer Agreement
Swiss-law governed International Data Transfer Agreement for compliant cross-border personal data transfers under the revFDPA.
Download
Data Protection Addendum
A Swiss law-governed Data Protection Addendum establishing data processing requirements and responsibilities between parties under Swiss FADP/DSG.
Download
ұԾ’s Security Promise
Genie is the safest place to draft. Here’s how we prioritise your privacy and security.
Your documents are private:
We do not train on your data; ұԾ’s AI improves independently
All data stored on Genie is private to your organisation
Your documents are protected:
Your documents are protected by ultra-secure 256-bit encryption
We are ISO27001 certified, so your data is secure
Organizational security:
You retain IP ownership of your documents and their information
You have full control over your data and who gets to see it
.png)