Controller
The party that determines the purposes and means of processing personal data under GDPR.
In practice
Record controller decisions in the processing inventory and ensure notices, lawful basis, and request handling match that role.
Common confusion
A customer is not always the controller for every data flow; a vendor can be an independent controller for its own purposes.