Determines the purposes for which and the means by which personal data is processed. The data controller shall implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests.
