Under the EU GDPR, a data processor handles personal data on a controller's behalf and documented instructions. The term does not cover every party that receives customer information.[1]
A provider processing an order file solely for your fulfilment may have this role. If it uses information for independently determined purposes, assess that activity separately. Clearly document the actual task and instructions.
Content updated:
Sources
Compiled with AI assistance using public sources. General explanation, not individual legal or tax advice. Describing a concept does not mean Zoloo offers it as a feature.