The data controller is the party that decides that data should be collected and for what purpose it should be used. In a limited company, it is the legal person, the company itself, that is the controller. For a sole trader or a private individual processing data in a way that falls within the scope of the regulation, it is the natural person who is the controller.