The controller's and the processor's duties — Data protection, explained | Arakan