Create a bespoke document in minutes, 聽or upload and review your own.
Get your first 2 documents free
Your data doesn't train Genie's AI
You keep IP ownership聽of your information
Data Privacy Addendum
"I need a Data Privacy Addendum under Belgian law for a cloud service provider processing customer data in both Belgium and Germany, with specific provisions for health data processing and sub-processor requirements to be implemented by March 2025."
1. Parties: Identification of the data controller and data processor, including registered addresses and company details
2. Background: Context of the existing relationship, reference to main agreement, and purpose of this addendum
3. Definitions: Definitions of key terms aligned with GDPR and Belgian Data Protection Act, including Personal Data, Processing, Data Subject, etc.
4. Scope and Purpose of Processing: Detailed description of the personal data processing activities, categories of data subjects, and types of personal data
5. Obligations of the Data Processor: Core processor obligations including processing only on documented instructions, confidentiality, security measures, and sub-processor requirements
6. Technical and Organizational Measures: Specific security measures required to ensure appropriate level of data protection
7. Data Subject Rights: Processor's obligations to assist controller in responding to data subject requests
8. Personal Data Breach: Notification requirements and procedures in case of data breaches
9. Audit Rights: Controller's rights to audit and processor's obligations to demonstrate compliance
10. Term and Termination: Duration of the addendum and obligations upon termination
11. Return or Deletion of Data: Requirements for handling personal data after service completion or termination
1. Cross-Border Data Transfers: Required when personal data will be transferred outside the EEA, incorporating EU SCCs and transfer impact assessments
2. Special Categories of Personal Data: Additional safeguards required when processing sensitive data as defined in GDPR Article 9
3. Direct Marketing Provisions: Specific requirements when processing involves direct marketing activities under Belgian law
4. Data Protection Impact Assessment: Cooperation requirements when DPIA is necessary under Article 35 GDPR
5. Joint Controller Provisions: Required when the relationship qualifies as joint controllership under Article 26 GDPR
6. Belgian-Specific Processing Requirements: Additional provisions required for specific sectors or processing activities under Belgian law
1. Schedule 1 - Details of Processing: Detailed matrix of processing activities, including data categories, purposes, and retention periods
2. Schedule 2 - Technical and Organizational Measures: Detailed description of security measures implemented by the processor
3. Schedule 3 - Approved Sub-processors: List of pre-approved sub-processors and their processing activities
4. Schedule 4 - Standard Contractual Clauses: EU SCCs for international data transfers when applicable
5. Schedule 5 - Contact Details and Reporting Lines: Key contacts for data protection matters, including DPO details if applicable
6. Schedule 6 - Data Breach Response Plan: Detailed procedures for handling and reporting data breaches
Authors
Technology
Healthcare
Financial Services
E-commerce
Professional Services
Manufacturing
Education
Telecommunications
Retail
Insurance
Human Resources
Marketing Services
Cloud Services
Consulting
Research
Legal
Privacy
Compliance
Information Security
Information Technology
Procurement
Vendor Management
Risk Management
Operations
Data Governance
Business Development
Commercial
Corporate Affairs
Data Protection Officer
Privacy Officer
Legal Counsel
Compliance Manager
Information Security Manager
Risk Manager
Procurement Manager
Vendor Management Officer
IT Director
Chief Technology Officer
Chief Information Security Officer
Chief Privacy Officer
Contract Manager
Business Development Manager
Operations Manager
Find the exact document you need
Data Protection Contract
Belgian law-governed data protection agreement establishing data processing obligations and compliance with GDPR and Belgian data protection requirements.
Personal Data Processing Agreement
Belgian law-governed Personal Data Processing Agreement establishing GDPR-compliant terms for processing personal data between controller and processor.
Data Controller Agreement
A Belgian law-governed agreement establishing terms between data controllers for sharing and processing personal data in compliance with GDPR and local requirements.
Data Privacy Contract
Belgian law-governed data processing agreement ensuring GDPR compliance and establishing controller-processor obligations under Belgian jurisdiction.
Personal Data Protection Agreement
Belgian law-governed agreement regulating personal data processing between organizations, ensuring compliance with local and EU data protection requirements.
Data Privacy Addendum
A Belgian law-governed agreement defining personal data processing terms between controllers and processors, ensuring GDPR and local law compliance.
Download our whitepaper on the future of AI in Legal
骋别苍颈别鈥檚 Security Promise
Genie is the safest place to draft. Here鈥檚 how we prioritise your privacy and security.
Your documents are private:
We do not train on your data; 骋别苍颈别鈥檚 AI improves independently
All data stored on Genie is private to your organisation
Your documents are protected:
Your documents are protected by ultra-secure 256-bit encryption
Our bank-grade security infrastructure undergoes regular external audits
We are ISO27001 certified, so your data is secure
Organizational security
You retain IP ownership of your documents
You have full control over your data and who gets to see it
Innovation in privacy:
Genie partnered with the Computational Privacy Department at Imperial College London
Together, we ran a 拢1 million research project on privacy and anonymity in legal contracts
Want to know more?
Visit our for more details and real-time security updates.
Read our Privacy Policy.