Definitions

3 (1) 'personal data' shall mean any information relating to an identified or identifiable natural person ('data subject')

(4) 'controller' shall mean the natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the pro-cessing of personal data

(9) 'third country' shall mean any state which is not a member of the European Community and which has not implemented agreements entered into with the European Community which contain rules corresponding to those laid down in Directive 95/46/EC of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data.