Where more than one party is involved in personal data processing operations, the first and most important question to answer is: are they acting as a controller or a processor? Indeed, depending on the role of the parties (i.e. controller
Controller or Processor?
