Hi, so I want to ask that we are a UK based company with office in asia, who provide saas solutions. Now in terms of the products that we offer we shall be a data processor. I am still not clear on our responsibility of data where we would be acting as a data controller, for example we would be acting as DC for
1. our employee data
2. any data we gather through cookies
3. contact information gathered through contact us forms on our website
4. supplier data (if any is based in uk or EEA)
5. customer data in regard to sales and contracts (incase we have european or uk based customers)
Is this correct ?