A data processor is the party that processes personal data on behalf of the controller and according to the controller’s instructions. This could be, for example, a cloud service provider or an external IT support function.