2.2 This DPA applies when Customer Data is processed by “Chilliapps”. In this context, “Chilliapps” will act as “Data Processor” to Customer who may act either as “Data Controller” only for the purpose of providing the Services in accordance with documented instructions from you with respect to Customer Data (as each term is defined in the GDPR). </p> <p> 2.3 The Services provide Customer with a number of controls, including security features and functionalities, that Customer may use to create automation with data provided by Customer.