Guidelines 1/2020 on processing personal data in the context of connected vehicles and mobility related applications

Subparagraph 3.1.2.5  Recipient

126. In principle, only the data controller and the data processor have access to the data.