Definition
Means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data
Source
Point (10) of Article 4 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016
Link
https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32016R0679
