What is the difference between a data controller and a data processor?

The data controller is the party that determines the purposes and methods of processing personal data; the data processor is the third party that processes data on the controller's instructions. Each has distinct obligations, which should be clarified by contract.