Dr. Data protection, I dare once again: Example No. 6 (“Headhunters”) in the WP169 link – too little explainable for me – a joint control between the principals and the headhunters, apparently because by accessing his own database, the headhunter can do the matching enhancen. As for the B-A ratio, can it be argued that B, unless file B contains the number of people desired by A with A`s criteria, can expand its own file by free search (cold battery) in order to find the number of participants desired by A? And does the relationship between A and B change if B is to interview the participants identified immediately after the questionnaire defined by A and send A only the recorded interview and not the participants` contact details? Thank you very much. Les duties du processor towards the controller must be specified in a contract or another legal act. For example, the contract must be used so that personal data based on the deadline does not end. A typical processor business is offering IT solutions, including cloud storage. The data processor may only sub-contract a part of its task to another processor or appoint a joint processor when it has received prior written authorisation from the data controller. One of those possibilities is joint responsibility. This is a constellation established in Article 26 of the GDPR, which allows several companies to share and share their customer data or other personal data. At the same time, the Institute offers customers clarification on which contact person they can contact for data protection reasons. Whether or not there is shared responsibility depends on whether the parties jointly determine the purposes (and means) of the data processing.
Your company/organisation is a common controller when it determines with one or more organisations “why” and “how” personal data should be processed. . . .