GDPR: Relations And Responsibilities In The Processing Of Personal Data (Controllers, Processors And Sub-Processors)

Data Privacy

There is no doubt that every company processes personal data (e.g. of its' employees', clients', contractual partners').

Most often, this also involves a constant barter between companies processing personal data and companies providing various services (e.g. HR, IT, payroll, datacenters, cloud services), both of them falling within the scope of the GDPR.

However, depending on whether a company processes personal data as a data controller or a data processor, the requirements and responsibilities under the GDPR may differ, and when a company is a data controller as well as a data processor, things might complicate.

So... is your company a data controller, a data processor or both?