<!-- headlesslaw {"release":{"id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","published":"2026-11-01T16:41:30Z","pinned":false},"limits":{"coverage":{"history":"current_only","held_since":"2026-10-26","gaps":[],"covered":["2021/915 — Decision — Contractual clauses between controllers and processors [in force] L2"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"a4f2a0495fe55b47323883f82977a9b34ab66171ec9623e39925d3a7045b6c81","release_published":"2026-11-01T16:41:30Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/gdpr/level-2/implementing-acts/2021-915-contractual-clauses-between-controllers-and-processors/annexes/annex-iv","url":"https://www.headlesslaw.com/gdpr/level-2/implementing-acts/2021-915-contractual-clauses-between-controllers-and-processors/annexes/annex-iv","title":"ANNEX IV","family":"l2_unit_view","work_id":"spaces/gdpr/level-2/implementing-acts/2021-915-contractual-clauses-between-controllers-and-processors","view_of":"/gdpr/level-2/implementing-acts/2021-915-contractual-clauses-between-controllers-and-processors","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-01","applies_from":null,"application":null,"version_label":"Commission Implementing Decision (EU) 2021/915, OJ L 199, 7.6.2021","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/eli/dec_impl/2021/915/oj/eng","valid_from":"2021-06-27","valid_until":null,"content_id":"dd892d70dc6a3388","versions":["2021-06-27"],"version_url":"https://www.headlesslaw.com/gdpr/level-2/implementing-acts/2021-915-contractual-clauses-between-controllers-and-processors/annexes/annex-iv/versions/2026-10-26","revision_url":"https://www.headlesslaw.com/gdpr/level-2/implementing-acts/2021-915-contractual-clauses-between-controllers-and-processors/annexes/annex-iv/versions/2026-10-26/rev/dd892d70dc6a3388","versions_url":"https://www.headlesslaw.com/gdpr/level-2/implementing-acts/2021-915-contractual-clauses-between-controllers-and-processors/annexes/annex-iv/versions","relations_url":"https://www.headlesslaw.com/gdpr/level-2/implementing-acts/2021-915-contractual-clauses-between-controllers-and-processors/annexes/annex-iv/relations","act_url":"https://www.headlesslaw.com/gdpr/level-2/implementing-acts/2021-915-contractual-clauses-between-controllers-and-processors#annex-iv","source_line":"Commission Implementing Decision (EU) 2021/915 · binding on its addressees · dated 4 Jun 2021 [in force]","attribution":{"prepared_by":"European Commission","published_by":"Publications Office of the EU","published_in":"Official Journal of the European Union","document_type":"implementing_decision","legal_nature":"binding_adopted","addressees":"not stated in the document","dates":{"document_date":"2021-06-04","entry_into_force":"2021-06-27","locators":{"document_date":"CELLAR 32021D0915 work_date_document","entry_into_force":"CELLAR 32021D0915 resource_legal_date_entry-into-force (earliest)"}},"adoption":null},"context":{"act":{"work_id":"spaces/gdpr/level-2/implementing-acts/2021-915-contractual-clauses-between-controllers-and-processors","path":"/gdpr/level-2/implementing-acts/2021-915-contractual-clauses-between-controllers-and-processors","name":"Commission Implementing Decision (EU) 2021/915","number":"2021/915","celex":"32021D0915","title_official":"COMMISSION IMPLEMENTING DECISION (EU) 2021/915 of 4 June 2021 on standard contractual clauses between controllers and processors under Article 28(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council and Article 29(7) of Regulation (EU) 2018/1725 of the European Parliament and of the Council (Text with EEA relevance)","document_date":"2021-06-04"},"position":{"kind":"annex","key":"annex-iv","index":5,"articles":4,"annexes":5},"prev":{"path":"/gdpr/level-2/implementing-acts/2021-915-contractual-clauses-between-controllers-and-processors/annexes/annex-iii","key":"annex-iii","title":"ANNEX III"},"next":null,"act_anchor":"#annex-iv"}}} -->
# ANNEX IV

**Commission Implementing Decision (EU) 2021/915 · binding on its addressees · dated 4 Jun 2021 [in force]**

*In force · Commission Implementing Decision (EU) 2021/915, OJ L 199, 7.6.2021 · Checked against EUR-Lex on 26 Oct 2026 · [Official source](https://eur-lex.europa.eu/eli/dec_impl/2021/915/oj/eng)*

<a id="annex-iv"></a>List of sub-processors

EXPLANATORY NOTE:

This Annex needs to be completed in case of specific authorisation of sub-processors (Clause 7.7(a), Option 1).

The controller has authorised the use of the following sub-processors:

1.

Name: ...

Address: ...

Contact person’s name, position and contact details: ...

Description of the processing (including a clear delimitation of responsibilities in case several sub-processors are authorised): ...

2.

...
