Data controller

The company, authority or person that determines the purposes and means of processing personal data. The controller carries the main responsibility for GDPR compliance: a legal basis, transparency obligations, security, documentation and the rights of data subjects. An employer, for example, is the controller of its employees' HR data. If the controller uses vendors for processing, data processing agreements must be concluded with them.