In close cooperation with the Helmholtz Data protection officers, a Joint Controller Agreement is finalized that is regulating the processing of personal data in the Helmholtz Cloud Core Components. The Core Components are needed to run the Helmholtz Cloud: Helmholtz AAI, Helmholtz Cloud Portal, Service Database and Helpdesk.