Art. 28 GDPR

…tax, legal consultants). If such third parties do not act as Data Controllers, they will act as Data Processors (Art. 28 GDPR) based on a specific agreement ensuring data security. A complete list of third parties is available upon request…