An organisation wants to share personal data with me. I do not work for the organisation. In GDPR terms: they are the Data Controller and I am the Data Processor. I…