A personal data controller is a legal or natural person, state authority or other body that maintains a collection of personal data, i.e. that independently or with others determines the purposes and method of personal data processing (Article 2 paragraph 1 point 5 of the Law on the Protection of personal data). When the purposes and method of processing are determined by law or another regulation, the same law or regulation determines the controller or the special criteria for its determination.
This definition includes all commercial companies, state bodies, local government units, public enterprises, hospitals, schools, kindergartens, citizens’ associations, trade unions, political parties, persons who are self-employed (lawyers, etc.), notaries, executors and dr.
Controllers are also natural persons, but this Law does not apply to them if the collection and processing of personal data “is carried out exclusively for personal or domestic activities”.