Consent and commissioned processing

The decision whether to outsource a processing activity to a processor can only be made by the controller itself. The controller is also obliged to carefully select the processor. A contract processing agreement (see Art. 28 DSGVO) must be concluded. Consequently, a data subject cannot decide or consent to the commissioning of a processor, i.e. he or she has no power of decision or participation. In the event of consent, this would not be legally effective.