means a person who processes personal information for a responsible party in terms of a contract or mandate, without coming under the direct authority of that party;