Glossary · Austria and Germany
Data-processing roles
A processor handles personal data on a controller’s behalf and instructions. An organisation determining its own purposes and essential means may instead be a controller. Actual responsibilities matter more than the contract heading.
Distinguish the concepts
Not every external service is processing on behalf of another party. Hosting, accounting software and independent claim handling may involve different roles. A processing agreement is not universal proof that every transfer is lawful. Role allocation, legal basis, transparency and technical safeguards are separate tasks. A confidential invoice does not make disclosure of every attached record necessary.
Jurisdiction and scope
The GDPR applies in Austria and Germany. Assess actual activities, purposes and responsibilities for the collection instruction. Transfer relevant data and correct inaccuracies. incaseof.law’s privacy information describes its stated data flows; this glossary does not replace the parties’ specific role assessment.
Illustrative business example
A business accidentally exports an entire customer account, including unrelated contacts, for one claim. Before upload it limits the file to the invoice, performance evidence and relevant correspondence. It records who needs access and how corrections reach them. This turns an abstract role question into a practical, auditable workflow.
Common questions
Does every supplier need a processing agreement?
The actual role determines that. Independent controllership cannot simply be relabelled by contract.
Can I send any customer data?
Purpose and necessity limit the scope. Remove unrelated material and assess sensitive content separately.
How should corrections be handled?
Correct the source and inform relevant recipients. Updating one local record does not update another organisation’s case file.
Related topics
Sources and basis
Content reviewed on 23 September 2026. Procedural information and our contractual terms are separate foundations. The individual case remains decisive.
Your next step
Prepare your documents and use the existing registration. For questions about the scope of services, visit our contact page.
Received a letter as a debtor? Please go directly to the payment portal.