A legal contract between two parties: the Controller (decides how personal data is used) and the Processor (handles the data for them), that defines data handling responsibilities, ensuring personal data protection in collaborative research settings.
