Joint controllership exists when two or more controllers jointly determine the purposes and means of the processing of personal data. In such cases, the controllers must define in a transparent agreement who assumes which data protection obligations and how the rights of the data subjects are guaranteed.
