The decision as to whether a processing activity is outsourced to a processor can only be made by the controller. The person responsible is also obliged to carefully choose the order processor. A contract processing contract (see Art. 28 GDPR) must be concluded. Consequently, an affected person can not decide or consent to having a processor assigned to him / her. she has no power of decision or participation. In the case of consent, this would not be legally valid.