Who is the data controller and who is the data processor?

In most projects, the client company is the data controller: it decides the purposes and means, because the data is its own and its customers are its own. Whoever builds and manages the system acts as the data processor, meaning it handles that data on behalf of the controller and according to its instructions. These roles must be put in writing, because different obligations follow from each.