Replying to @gabrielazanfir and @PrivacyMatters, @buchtan, @CNIL
Right — I think one way to look at it is that it is logic similar to establishing controllerness: a contract may inform the distinction, but the facts are what drive the assessment and they can readily contradict any contract.