Definition
Means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller
Source
Point (8) of Article 4 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016
Link
https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016R0679