Data controller is the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data filing system.

Legal persons are themselves "controllers" in processing of personal data, the responsibility specified in the relevant regulations shall belong to the legal persons themselves. There is no difference between public legal entity and private legal persons in this regard.