Data controller and data processor process the personal data. Data controller defines the objectives and means of processing personal data while a data processor processes personal data on behalf of a data controller.