Processor

A Processor (Henkilötietojen käsittelijä) is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller. Processors act under the instructions of the controller and are subject to specific obligations under the GDPR and the Tietosuojalaki, particularly regarding data security and cooperation with the controller. The relationship between a controller and a processor must be governed by a written contract or other legal act.