What roles are involved in processing?

The controller is the person or organisation who determines the purposes and means of processing personal data. In the context of hobby activities, the controller can be the sports club’s board, because it is responsible for the club’s activities and determines how personal data is processed in those activities and for what purposes.

When the purposes and means of processing personal data are determined by two or more parties together, they are called ‘joint controllers’. Joint controllers must agree on their responsibilities in a clear and transparent manner, for example by contract.

The processor processes personal data on behalf of the controller, that is, according to the controller’s instructions and under its direction. The processor often has access to the controller’s personal data. An example of a processor would be a company providing various services, such as IT services, to the controller.