Controllers and Processors, Data Processing Agreement (DPA), Lawfulness of Processing, Representative