Processor
Short definition
The processor is the person or body that processes personal data on behalf of the controller, following its instructions (GDPR, Article 4(8)).
In plain language
Typical examples are companies providing cloud-hosted clinical software, payroll processing or archiving. The relationship must be set out in a contract or other legal act with the content required by Article 28 of the GDPR, including confidentiality and security measures. If a supplier neither receives nor processes the institution's personal data, it is not its processor for those data.