Processor vs. Controller
Auftragsverarbeiter vs. Verantwortlicher
The controller decides on the purposes and means of data processing, while the processor processes data solely on the controller's instructions, without independent authority over the purpose. This division of roles is central to accountability under the GDPR.