A data processor is a business that processes personal data on behalf of the data controller.  This is an essential concept to understand as it determines your obligations concerning the GDPR. A processor always needs to enter into a data processing agreement with the controller, according to article 28 in the GDPR.