[Back to Guidelines 07/2020 on the concepts of controller and processor in the GDPR] [Back to Flowcharts]
graph TD;
A["Do you and other parties jointly determine the purposes and means of the processing?
• Do parties have decisive influence over whether and how processing takes place?
• Is processing impossible without both parties' participation?
• Is the processing by each party inseparable/inextricably linked?"] --> |No| B["You are the sole controller.
Other parties may be:
• Separate independent controllers
• Processors"];
A --> |Yes| C["Do the common/converging decisions on purposes and means relate to the whole processing?"];
C --> |Yes| D["You are joint controllers for the whole processing"];
C --> |No| E["Common/converging decisions only relate to specific processing stages"];
E --> F["You are:"];
F --> G["Joint controllers for stages where purposes/means are determined together"];
F --> H["Separate controllers for stages where purposes/means are determined separately"];
style B fill:#2e5e4a
style D fill:#be474a
style H fill:#2e5e4a
style G fill:#be474a