‘processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.