Joint controllers
Two or more controllers that jointly decide the purposes and means of a processing, and must set out their respective responsibilities in an arrangement (GDPR Article 26).
The arrangement must reflect each controller’s role and relationship with the data subjects, and its essence must be made available to them. Whatever the arrangement says, a data subject can exercise their rights against each of the joint controllers (Article 26(3)).
Source: GDPR Art. 26 ↗
Related terms
ClauseTrail watches vendors' subprocessor lists, DPAs, privacy policies, terms and AI terms, and tells your team what changed and by when to object.