As you keep discovering different vendors, group companies processing data in a processing activity, you should also decide a legal role that these companies will play. Based on the regulation they might be playing the role of a controller or a processor.
You can associate a legal role with an entity or vendor. We have the following legal roles configured:
Controller
Joint Controller
Independent Controller
Processor
Sub-Processor
Along with defining the legal role, you can also add if there is a cross-border transfer happening and specify the applicable transfer mechanism along with it.
Auto-suggestions: We automatically suggest you certain entity and vendors which are potentially playing some roll in a process. These suggestions are based on the assets, vendors, and entities linked to your processing activity in data flow diagrams. Managing Entity of the processing activity is also suggested for a legal role, it's generally a controller or a processor.
Steps to create a legal relationship:
Select a processing activity and move to the Legal tab
If there is a suggestion, click on Assign Role if relevant, else dismiss with the cross icon.
When you click on Assign Role or Add Legal Relationship a side panel will open up.
Select the relevant vendor or entity for which you want to add a relationship.
Select the relevant law for which you want to add the Legal relationship
Select the role that the vendor or entity is playing in the process
In case of a transfer, use the toggle to enable that
Select the transfer mechanism and click Save to add the Legal Relationship
