Because we are in the process of finalizing our GDPR adequacy, we understand the general requirements of having a data controller. Even the EU itself doesn’t have a good idea on when things are jointly controlled, like in a civic tech project where people donate their own air quality measurement.