{"id":426,"date":"2018-04-02T08:24:29","date_gmt":"2018-04-02T08:24:29","guid":{"rendered":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/controller-or-processor-and-the-need-for-privacy-notices\/"},"modified":"2018-04-02T08:24:29","modified_gmt":"2018-04-02T08:24:29","slug":"controller-or-processor-and-the-need-for-privacy-notices","status":"publish","type":"post","link":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/blog\/controller-or-processor-and-the-need-for-privacy-notices\/","title":{"rendered":"Controller or processor, and the need for Privacy Notices"},"content":{"rendered":"

\nIn a business to business transaction, Company A obtains the contact details of a representative of Company B, and places those details (such as name, e-mail, telephone) in to its CRM. This information is only to be used to connect to the other company.<\/p>\n

\nHowever, Company A takes the decision as to when to contact and when it will delete the contact details. Because Company A decides on the lawful basis of processing, retention period, etc, it becomes the controller.<\/p>\n

\nIn this instance, Article 14 GDPR applies and it obliges the controller to inform the data subject, and a link to the privacy notice on the website of Company A may help.<\/p>\n

\nWhere there is a formal business contract in place between Company A and Company B, it should have defined roles and responsibilities of each party. Based on the contractual terms a preliminary determination of who might be the controller (or joint controllers) and who might be the processor (or joint processors) could be made, on the basis of which specific data controller- data processor clauses to the contract could be drafted.<\/p><\/p>\n","protected":false},"excerpt":{"rendered":"

In a business to business transaction, Company A obtains the contact details of a representative of Company B, and places those details (such as name, e-mail, telephone) in to its CRM. This information is only to be used to connect to the other company. However, Company A takes the decision as to when to contact […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[10],"tags":[],"class_list":["post-426","post","type-post","status-publish","format-standard","hentry","category-blog"],"acf":[],"yoast_head":"\nController or processor, and the need for Privacy Notices<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/blog\/controller-or-processor-and-the-need-for-privacy-notices\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Controller or processor, and the need for Privacy Notices\" \/>\n<meta property=\"og:description\" content=\"In a business to business transaction, Company A obtains the contact details of a representative of Company B, and places those details (such as name, e-mail, telephone) in to its CRM. This information is only to be used to connect to the other company. However, Company A takes the decision as to when to contact […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/blog\/controller-or-processor-and-the-need-for-privacy-notices\/\" \/>\n<meta property=\"og:site_name\" content=\"Three Graces Legal\" \/>\n<meta property=\"article:published_time\" content=\"2018-04-02T08:24:29+00:00\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@3GracesLegal\" \/>\n<meta name=\"twitter:site\" content=\"@3GracesLegal\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/blog\\\/controller-or-processor-and-the-need-for-privacy-notices\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/blog\\\/controller-or-processor-and-the-need-for-privacy-notices\\\/\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/#\\\/schema\\\/person\\\/3b3ca8846a44fac333321a731ef72f67\"},\"headline\":\"Controller or processor, and the need for Privacy Notices\",\"datePublished\":\"2018-04-02T08:24:29+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/blog\\\/controller-or-processor-and-the-need-for-privacy-notices\\\/\"},\"wordCount\":191,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/#organization\"},\"articleSection\":[\"Blog\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/blog\\\/controller-or-processor-and-the-need-for-privacy-notices\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/blog\\\/controller-or-processor-and-the-need-for-privacy-notices\\\/\",\"url\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/blog\\\/controller-or-processor-and-the-need-for-privacy-notices\\\/\",\"name\":\"Controller or processor, and the need for Privacy Notices\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/#website\"},\"datePublished\":\"2018-04-02T08:24:29+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/blog\\\/controller-or-processor-and-the-need-for-privacy-notices\\\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/blog\\\/controller-or-processor-and-the-need-for-privacy-notices\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/blog\\\/controller-or-processor-and-the-need-for-privacy-notices\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Controller or processor, and the need for Privacy Notices\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/#website\",\"url\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/\",\"name\":\"Three Graces Legal\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/#organization\",\"name\":\"Three Graces Legal\",\"url\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/logo.png\",\"contentUrl\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/wp-content\\\/uploads\\\/2025\\\/11\\\/logo.png\",\"width\":222,\"height\":140,\"caption\":\"Three Graces Legal\"},\"image\":{\"@id\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/3GracesLegal\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/three-graces-legal\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/#\\\/schema\\\/person\\\/3b3ca8846a44fac333321a731ef72f67\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/aecf3f750710d1d9193635e72597e6c31cecbceec1193c52121d09ce2c866a8b?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/aecf3f750710d1d9193635e72597e6c31cecbceec1193c52121d09ce2c866a8b?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/aecf3f750710d1d9193635e72597e6c31cecbceec1193c52121d09ce2c866a8b?s=96&d=mm&r=g\",\"caption\":\"admin\"},\"sameAs\":[\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\"],\"url\":\"https:\\\/\\\/isquaredemo.com\\\/MLT\\\/threegraceslegal\\\/author\\\/admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Controller or processor, and the need for Privacy Notices","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/blog\/controller-or-processor-and-the-need-for-privacy-notices\/","og_locale":"en_GB","og_type":"article","og_title":"Controller or processor, and the need for Privacy Notices","og_description":"In a business to business transaction, Company A obtains the contact details of a representative of Company B, and places those details (such as name, e-mail, telephone) in to its CRM. This information is only to be used to connect to the other company. However, Company A takes the decision as to when to contact […]","og_url":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/blog\/controller-or-processor-and-the-need-for-privacy-notices\/","og_site_name":"Three Graces Legal","article_published_time":"2018-04-02T08:24:29+00:00","author":"admin","twitter_card":"summary_large_image","twitter_creator":"@3GracesLegal","twitter_site":"@3GracesLegal","twitter_misc":{"Written by":"admin","Estimated reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/blog\/controller-or-processor-and-the-need-for-privacy-notices\/#article","isPartOf":{"@id":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/blog\/controller-or-processor-and-the-need-for-privacy-notices\/"},"author":{"name":"admin","@id":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/#\/schema\/person\/3b3ca8846a44fac333321a731ef72f67"},"headline":"Controller or processor, and the need for Privacy Notices","datePublished":"2018-04-02T08:24:29+00:00","mainEntityOfPage":{"@id":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/blog\/controller-or-processor-and-the-need-for-privacy-notices\/"},"wordCount":191,"commentCount":0,"publisher":{"@id":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/#organization"},"articleSection":["Blog"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/blog\/controller-or-processor-and-the-need-for-privacy-notices\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/blog\/controller-or-processor-and-the-need-for-privacy-notices\/","url":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/blog\/controller-or-processor-and-the-need-for-privacy-notices\/","name":"Controller or processor, and the need for Privacy Notices","isPartOf":{"@id":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/#website"},"datePublished":"2018-04-02T08:24:29+00:00","breadcrumb":{"@id":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/blog\/controller-or-processor-and-the-need-for-privacy-notices\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/blog\/controller-or-processor-and-the-need-for-privacy-notices\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/blog\/controller-or-processor-and-the-need-for-privacy-notices\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/"},{"@type":"ListItem","position":2,"name":"Controller or processor, and the need for Privacy Notices"}]},{"@type":"WebSite","@id":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/#website","url":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/","name":"Three Graces Legal","description":"","publisher":{"@id":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/#organization","name":"Three Graces Legal","url":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/#\/schema\/logo\/image\/","url":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/wp-content\/uploads\/2025\/11\/logo.png","contentUrl":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/wp-content\/uploads\/2025\/11\/logo.png","width":222,"height":140,"caption":"Three Graces Legal"},"image":{"@id":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/3GracesLegal","https:\/\/www.linkedin.com\/company\/three-graces-legal\/"]},{"@type":"Person","@id":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/#\/schema\/person\/3b3ca8846a44fac333321a731ef72f67","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/secure.gravatar.com\/avatar\/aecf3f750710d1d9193635e72597e6c31cecbceec1193c52121d09ce2c866a8b?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/aecf3f750710d1d9193635e72597e6c31cecbceec1193c52121d09ce2c866a8b?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/aecf3f750710d1d9193635e72597e6c31cecbceec1193c52121d09ce2c866a8b?s=96&d=mm&r=g","caption":"admin"},"sameAs":["https:\/\/isquaredemo.com\/MLT\/threegraceslegal"],"url":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/wp-json\/wp\/v2\/posts\/426","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/wp-json\/wp\/v2\/comments?post=426"}],"version-history":[{"count":0,"href":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/wp-json\/wp\/v2\/posts\/426\/revisions"}],"wp:attachment":[{"href":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/wp-json\/wp\/v2\/media?parent=426"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/wp-json\/wp\/v2\/categories?post=426"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/isquaredemo.com\/MLT\/threegraceslegal\/wp-json\/wp\/v2\/tags?post=426"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}