A processor processes personal data on behalf of the controller, who decides the purposes and means. Their relationship is governed by a contract specifying instructions, security, confidentiality and the fate of the data. The controller only chooses processors offering sufficient guarantees.
Example
A hosting or email-sending provider is a processor.