Don't forget the brilliant and deeply meaningful paragraph 37:
"A group of undertakings should cover a controlling undertaking and its controlled undertakings, whereby the
controlling undertaking should be the undertaking which can exert a dominant influence over the other
undertakings by virtue, for example, of ownership, financial participation or the rules which govern it or the
power to have personal data protection rules implemented. An undertaking which controls the processing of
personal data in undertakings affiliated to it should be regarded, together with those undertakings, as a group of
undertakings."
"A group of undertakings should cover a controlling undertaking and its controlled undertakings, whereby the controlling undertaking should be the undertaking which can exert a dominant influence over the other undertakings by virtue, for example, of ownership, financial participation or the rules which govern it or the power to have personal data protection rules implemented. An undertaking which controls the processing of personal data in undertakings affiliated to it should be regarded, together with those undertakings, as a group of undertakings."