The data processor is an entity that processes personal data on behalf of the controller. Typically these are external service providers that work with the controller's data.
Who is the processor?
The processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
Examples of processors
- Cloud service providers
- Analytics tools (Google Analytics)
- Email platforms
- Accounting and payroll services
- IT support and hosting
Data processing agreement
The relationship between the controller and the processor must be governed by a written contract (Data Processing Agreement) that includes:
- Subject matter and duration of processing
- Nature and purpose of processing
- Types of personal data
- Obligations of the processor
- Security measures
Processors and cookies
Providers of analytics and marketing tools (Google, Facebook, Hotjar) are typical processors of data obtained through cookies. The controller should have a data processing agreement in place with these providers.