GDPR Controller or Processor?

[Ishmael]

Who is the "Controller" and "Processor" in this scenario relationship? Thanks.

A financial credit services provider and a car dealership. The potential customer walks into a car dealership and wants to purchase a car, but requires financial assistance. N/B: An explanation is required please and thanks. Also, can they be joint "Controllers" and what are the implications?

 

[fisicx]

The controller has to be a named person (eg the MD). They are responsible for everything. The sales team are data processors. The credit services provider is a data processor. There is only one controller but there can be a number of processors.

 

[Ishmael]

Who is the "Controller" and "Processor" in this scenario relationship? Thanks.

A financial credit services provider and a car dealership. The potential customer walks into a car dealership and wants to purchase a car, but requires financial assistance. N/B: An explanation is required please and thanks. Also, can they be joint "Controllers" and what are the implications?

I forgot to add the most important part of the question, is that this is under the GDPR/DPA 2018. Thanks.