1. Parties: Identification of the data controller and data processor, including official registration details as required under Belgian law
2. Background: Context of the processing relationship and brief description of the services requiring data processing
3. Definitions: Definitions of key terms, incorporating GDPR Article 4 definitions and agreement-specific terms
4. Scope and Purpose of Processing: Detailed description of the processing activities, purposes, and types of personal data involved
5. Duration of Processing: Timeframe for the processing activities and relationship between parties
6. Obligations of the Processor: Core processor obligations under GDPR Article 28, including processing only on documented instructions
7. Sub-processing: Conditions and requirements for engaging sub-processors, including authorization process
8. Technical and Organizational Measures: Security measures implemented to ensure appropriate level of data protection
9. Data Subject Rights: Processor's obligations to assist controller in responding to data subject requests
10. Personal Data Breach: Notification requirements and procedures in case of data breaches
11. Audit Rights: Controller's rights to audit and processor's obligations to demonstrate compliance
12. Data Transfer: Rules for international data transfers and required safeguards
13. Confidentiality: Confidentiality obligations regarding processed personal data
14. Liability and Indemnification: Allocation of liability and indemnification obligations between parties
15. Termination: Conditions for termination and data deletion/return obligations
16. Governing Law and Jurisdiction: Specification of Belgian law as governing law and jurisdiction for disputes
