Recruitment agencies are data controllers. Data controllers determine the purpose and means of processing personal data as well as processing activities.