The natural or legal person, public authority, agency or any other body which processes personal data on behalf of the data controller. In other words, if your company handles or administers the data – like a payroll company or a cloud storage company, etc., you are the ‘processor.’

(EU) 'processing' means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.