A controller determines the purposes, conditions, and means for the processing of personal data, while the processor processes the personal data on behalf of the controller.