The responsible entity decides alone or jointly with others on the purposes and means of processing personal data (e.g. names, contact details, etc.).