Article 26 GDPR
Co-directors

1. Where two or more controllers jointly determine the purposes and means of processing, they are joint controllers. By common agreement, the joint controllers shall clearly define their respective responsibilities for fulfilling the obligations under this Regulation, in particular with regard to the exercise by the data subject and their obligations regarding the provision of information referred to in Articles 13 and 14, unless their respective obligations and their scope are determined by Union law or the law of the Member State to which those controllers are subject. The arrangements may designate a contact point for data subjects.

2. The arrangements referred to in paragraph 1 shall duly reflect the respective responsibilities of the joint controllers and the relationship between them and the data subjects. The essential content of the arrangements shall be made available to data subjects.

3. Notwithstanding the arrangements referred to in paragraph 1, the data subject may exercise his or her rights under this Regulation against any controller