Authors: Jos Dumortier and Pieter Gryffroy Where two or more controllers jointly determine the purposes and means of processing, they shall be joint controllers. They shall in a transparent manner determine their respective responsibilities for compliance with the obligations under this Regulation, in particular as regards the exercising of the rights of…
Author: Gerrit Hornung Where Art. 3(2) applies, the controller or the processor shall designate in writing a representative in the Union. The obligation laid down in para. 1 of this Article shall not apply to: (a) processing which is occasional, does not include, on a large scale, processing of special categories of data…
Author: András Jóri Where processing is to be carried out on behalf of a controller, the controller shall use only processors providing sufficient guarantees to implement appropriate technical and organisational measures in such a manner that processing will meet the requirements of this Regulation and ensure the protection of the rights of…
Author: András Jóri I. Preliminary remarks The processor and any person acting under the authority of the controller or of the processor, who has access to personal data, shall not process those data except on instructions from the controller, unless required to do so by Union or Member State law. Art. 29 of the…