“…a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller…”
Retrieved from General Data Protection Regulation (GDPR) 2016/679 Article 4. European Union (EU) Commission. (2018). https://eugdpr.org/