Set by the law · GDPR Art. 26(1)
Joint controllers
In plain English
Two or more controllers who decide together why and how data are processed. They must agree who does what, but people can still exercise their rights against each of them.
The official text
Where two or more controllers jointly determine the purposes and means of processing, they shall be joint controllers. They shall in a transparent manner determine their respective responsibilities for compliance with the obligations under this Regulation
Irrespective of the terms of the arrangement referred to in paragraph 1, the data subject may exercise his or her rights under this Regulation in respect of and against each of the controllers.
20 decisions on Fino cite Article 26 GDPR. See them →
Related
The official text is quoted word for word from the English version of the source named under it; only the version published in the Official Journal of the EU is legally binding. The plain-English line is Fino’s own summary, not legal advice.