Data & Privacy: templates and forms
3 forms available to fill out or download.
Data subject access request under Article 15 GDPR (Germany)
Your request to a company, club or other body in Germany that processes data about you: under Article 15 of the GDPR (DSGVO in German) you ask what data it holds, why, who receives it, how long it keeps it and where it came from, and for a copy of the data — the first copy free. The answer is due within one month (Article 12(3)). If none comes, you can complain to the data protection authority of your German state. For customer, member and user accounts. In German.
Objection to data transfers from the population register (Germany)
The informal letter to the German registration office (Meldebehörde) that has transfer blocks entered in the population register: you object, point by point, to your data being passed to political parties before elections, to office-holders and the press for birthday and wedding anniversaries, to address-book publishers (§ 50(5) of the Federal Registration Act, BMG) and to a family member's religious community (§ 42(3) BMG). It leaves out the objection to transfers to the Bundeswehr, abolished on 1 January 2026. Many offices also offer their own free form. In German.
Data processing agreement under Art. 28 GDPR (Germany)
The data processing agreement (Auftragsverarbeitungsvertrag, AVV) every business in Germany needs when a service provider processes personal data for it — hosting, cloud software, payroll, newsletters, IT support. It contains everything Art. 28(3) GDPR requires: subject-matter, duration, nature and purpose, types of data and data subjects, instructions, confidentiality, security, sub-processors, assistance, deletion or return, information and audits, with annexes for the technical and organisational measures and the sub-processors. Free models from supervisory authorities and the European Commission also exist. In German.