§ 63 BDSG
Joint controllers
(1)Where two or more controllers jointly determine the purposes and means of processing, they shall be joint controllers. They shall, in a transparent manner, determine their respective responsibilities for compliance with the obligations arising out of this Part by means of an arrangement between them, unless the respective responsibilities of the controllers are determined by a legal provision. The arrangement shall designate a contact point for data subjects.