SERVICES

Data protection contracts & data sharing

Clear roles, responsibilities and conditions for using personal data in commercial relationships.

When is this service relevant?

For supplier, partnership and intra-group agreements, exchanges of customer or employee data, and negotiations over standard provider terms.

Drafting and reviewing data processing agreements (DPAs), with negotiation support.
Data sharing arrangements between independent controllers and allocation of joint controller responsibilities.
Intra-group data sharing structures, purposes, lawful bases and transparency obligations.
Terms covering subprocessors, breach notifications, assistance, audits and deletion.
Alignment of contractual schedules with actual processes, vendor assessments and transfer mechanisms.

The agreement must reflect the parties’ actual roles. A supplier is not necessarily a data processor.