If GÉANT, as Data controller, engage another organization as Data processor (DP) to process personal data on behalf of GÉANT requirements defined in Article 28 of GDPR should be met and apropriate Data processing agreement (DPA) shoud be signed between GÉANT and DP. Process of drafting, approving and signing of DPA is shown on the following figure.
