Create a bespoke document in minutes, Â or upload and review your own.
Get your first 2 documents free
Your data doesn't train Genie's AI
You keep IP ownership of your information
DPA Agreement
1. Parties: Identification of the data controller and data processor, including full legal names, registration numbers, and addresses
2. Background: Context of the agreement, relationship between parties, and purpose of the data processing arrangement
3. Definitions: Key terms used in the agreement, including those from GDPR and Danish law
4. Scope and Purpose: Details of the processing activities, categories of data subjects, and types of personal data
5. Duration: Term of the agreement, including start date and conditions for termination
6. Data Processor Obligations: Core obligations of the processor including processing only on documented instructions
7. Sub-processors: Conditions for engaging sub-processors and obtaining controller authorization
8. Technical and Organizational Measures: Security measures required to ensure appropriate level of data protection
9. Data Subject Rights: Processor's obligations to assist controller in responding to data subject requests
10. Personal Data Breaches: Notification requirements and procedures for handling data breaches
11. Audit Rights: Controller's rights to audit and processor's obligations to contribute to audits
12. Data Return and Deletion: Obligations regarding data handling upon agreement termination
13. Liability and Indemnification: Allocation of responsibility and liability between parties
14. Governing Law and Jurisdiction: Specification of Danish law application and jurisdiction
1. International Data Transfers: Required when personal data will be transferred outside the EU/EEA
2. Specific Processing Instructions: Detailed processing instructions when complex or multiple processing activities are involved
3. Insurance Requirements: Specific insurance obligations when handling high-risk or large-scale processing
4. Business Continuity: Required for critical processing activities needing disaster recovery provisions
5. Confidentiality: Additional confidentiality provisions beyond standard data protection requirements
6. Cost Allocation: Specific provisions for allocation of costs related to data subject requests or breach management
1. Schedule 1 - Processing Activities: Detailed description of processing activities, including purposes, categories of data subjects and data
2. Schedule 2 - Technical and Organizational Measures: Detailed security measures and controls implemented by the processor
3. Schedule 3 - Approved Sub-processors: List of pre-approved sub-processors and their processing activities
4. Schedule 4 - Transfer Mechanisms: Details of transfer mechanisms for international data transfers if applicable
5. Schedule 5 - Contact Points: Key contacts for operational, technical and legal matters
6. Schedule 6 - Security Breach Response Plan: Detailed procedures for handling and reporting personal data breaches
Authors
Find the exact document you need
Download our whitepaper on the future of AI in Legal
³Ò±ð²Ô¾±±ð’s Security Promise
Genie is the safest place to draft. Here’s how we prioritise your privacy and security.
Your documents are private:
We do not train on your data; ³Ò±ð²Ô¾±±ð’s AI improves independently
All data stored on Genie is private to your organisation
Your documents are protected:
Your documents are protected by ultra-secure 256-bit encryption
Our bank-grade security infrastructure undergoes regular external audits
We are ISO27001 certified, so your data is secure
Organizational security
You retain IP ownership of your documents
You have full control over your data and who gets to see it
Innovation in privacy:
Genie partnered with the Computational Privacy Department at Imperial College London
Together, we ran a £1 million research project on privacy and anonymity in legal contracts
Want to know more?
Visit our for more details and real-time security updates.
Read our Privacy Policy.