Data controller
The person or organisation that decides why and how personal data is processed, and is accountable for it under the law.
The data controller is whoever determines the purposes (why) and means (how) of processing personal data, as defined in Art. 4 of the GDPR. It’s the controller that must choose the lawful basis, inform people, handle their rights and pick suitable suppliers.
Example: a company decides to record its project meetings to write minutes and uses a transcription tool. The company is the controller; the tool, which processes the recordings on its instructions, is a data processor.
- Controller: decides what is recorded, why and how long it’s kept.
- Processor: processes the data on the controller’s behalf and instructions.
When a company uses Echo, Edorteam acts as processor for the content of the recordings, as set out in the data processing agreement (in Spanish). For the account’s own data (name, email, billing), Edorteam is the controller, as its privacy policy explains. This is general information, not legal advice.
