natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal dataDefinition reference: Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC
The controller determines the purposes and means of the processing of personal data. In other words, the controller decides how and why the processing operation is carried out. The controller may be a legal person, such as an entrepreneur, a small and medium-sized enterprise (SME), a public authority, agency or other body. Official Website of the EU