A third party within the meaning of the GDPR is a natural or legal person, a public authority, a service or body other than the data subject, the controller, the processor and the persons (internal recipients) who, under the direct authority of the controller or processor, are authorised to process personal data.
Third party
