# Processor 28(6) — GDPR — provision context

> Focused context for a single provision (28(6)), curated from overview.legal on 2026-08-22. Canonical: https://overview.legal/laws/gdpr/art-28#par-6
> Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it.

Part of **Processor** (GDPR, full article: https://overview.legal/laws/gdpr/art-28).

## Provision text

### 28(6)

Without prejudice to an individual contract between the controller and the processor, the contract or the other legal act referred to in paragraphs 3 and 4 of this Article may be based, in whole or in part, on standard contractual clauses referred to in paragraphs 7 and 8 of this Article, including when they are part of a certification granted to the controller or processor pursuant to Articles 42 and 43.


## Topics on this provision

- **Processors** — https://overview.legal/topics/processors
  Entities that process data on behalf of controllers
- **Certification** — https://overview.legal/topics/certification
  Data protection certification mechanisms
- **International Transfer** — https://overview.legal/topics/internationale-doorgifte
  Transfer of personal data outside the EU/EEA
- **Controllers** — https://overview.legal/topics/controllers
  Entities that determine purposes and means of processing

## Cited by (exact-provision citations)

- **WELTIMMO S.R.O. V. NEMZETI A DATVEDELMI ES INFORMACIOSZABADSAGH ATOSAG (HUNGARIAN DPA), 1.10.15 (“WELTIMMO”)** (case-law) — https://overview.legal/posts/5956
- **Unabhängiges Landeszentrum für Datenschutz v Wirtschaftsakademie Schleswig-Holstein** (case-law) — https://overview.legal/posts/51477
- **WELTIMMO S.R.O. V. NEMZETI A DATVEDELMI ES INFORMACIOSZABADSAGH ATOSAG (HUNGARIAN DPA), 1.10.15 (“WELTIMMO”)** ¶54 (case-law, CJEU) — https://overview.legal/posts/5956
- **Unabhängiges Landeszentrum für Datenschutz v Wirtschaftsakademie Schleswig-Holstein** ¶24 (case-law, CJEU) — https://overview.legal/posts/51477
- **WELTIMMO S.R.O. V. NEMZETI A DATVEDELMI ES INFORMACIOSZABADSAGH ATOSAG (HUNGARIAN DPA), 1.10.15 (“WELTIMMO”)** ¶52 (case-law, CJEU) — https://overview.legal/posts/5956
- **WELTIMMO S.R.O. V. NEMZETI A DATVEDELMI ES INFORMACIOSZABADSAGH ATOSAG (HUNGARIAN DPA), 1.10.15 (“WELTIMMO”)** ¶57 (case-law, CJEU) — https://overview.legal/posts/5956
- **Opinion 17/2020 on the draft Standard Contractual Clauses submitted by the SI SA (Article 28(8) GDPR)** (guidance) — https://overview.legal/posts/126161
- **Guidelines 07/2020 on the concepts of controller and processor in the GDPR** (guidance) — https://overview.legal/posts/38069
- **Opinion 18/2021 on the draft Standard Contractual Clauses submitted by the LT SA (Article 28(8) GDPR)** (guidance) — https://overview.legal/posts/126032

---
Generated by overview.legal · https://overview.legal/laws/gdpr/art-28#par-6 · 2026-08-22