A data controller is the “natural or legal person, public authority, agency or any other body that, alone or jointly with others, determines the purposes and means of the processing of personal data”.
A data processor is the “natural or legal person, public authority, agency or any other body that processes personal data on behalf of the data controller”.