The data controller

Specifically, you can act as a data controller if you are the one who determines why and how these personal data are processed, that is, the purpose and means of processing. You can also be co-data controller, if the decision about the purpose and the means is shared among various organisations.