Guidelines 1/2020 on processing personal data in the context of connected vehicles and mobility related applications

Paragraph 3.3.5  Recipient

155. In principle, only the data controller and the data processor have access to the data.