Obligations of the Controller, Processors. 2.1 The Controller carries out the processing of Personal Data in accordance with the relevant provisions of the applicable data protection laws. Both Parties and the Publisher are jointly responsible externally for compliance with the applicable data protection laws with regard to joint data processing. In the internal relationship, the scope of the responsibility for compliance with the applicable data protection laws arises from Appendix 1 where the Parties have been assigned individual data processing procedures.