Guest
Transfer of pesonal data under GDPR
Hello, our company process customers' personal data for the Client. We are providing consulting services for the customers, including consulting on air transportation issues. If a particular customer asks to transfer his/her personal data to a third party service provider which deals with these issues to assess the possibility of entering into a contract with such customer, this third party service provider would be a controller under GDPR before it enters into a contract with a customer? Or he would be in some different role? Thanks.
Assign topic to the user
Expert
Alessandra Nisticò
Jul 13, 2021
Yes, it would be a data controller even before entering into a contract, because the third-party service provider will be free to decide the purposes and means of the processing of personal data belonging to the potential customer.
Here you can find more information on the role of processor and controller:
- EU GDPR controller vs. processor – What are the differences?: https://advisera.com/eugdpracademy/knowledgebase/eu-gdpr-controller-vs-processor-what-are-the-differences/
- Is consent needed? Six legal bases to process data according to GDPR: https://advisera.com/eugdpracademy/knowledgebase/is-consent-needed-six-legal-bases-to-process-data-according-to-gdpr/
If you want to learn how to process data under the EU GDPR you may consider enrolling in our free training EU GDPR Foundations course: https://advisera.com/training/eu-gdpr-foundations-course/
Comment as guest or Sign in
Jul 08, 2021
Jul 13, 2021
Jul 13, 2021