2 Controller of personal data A person who alone or together with others decides the purpose and means of processing personal data. Personal data assistant A person who processes personal data on behalf of the controller of personal data. Personal data representative A natural person, appointed by the controller of personal data, who shall independently assure that the personal data is processed in a correct and lawful manner. The registered person A person to whom the personal data relates. Consent Every kind of voluntary, specific and unambiguous expression of will by which the registered person, after having received information, accepts processing of personal data concerning him or her. Supervisory authority The authority appointed by the Government to perform supervision. Third country A state that is not included in the European Union or part of the European Economic Area. Third party A person other than the registered person, the controller of personal data, the personal data representative, the personal data assistant and such persons who under the direct responsibility of the controller of personal data or the personal data assistant is authorised to process personal data. Scope The territorial scope Section 4 This Act applies to those controllers of personal data who are established in Sweden. The Act is also applicable when the controller of personal data is established in a third country but for the processing of the personal data uses equipment that is situated in Sweden. However, this does not apply if the equipment is only used to transfer information between a third country and another such country. In the case referred to in the second paragraph, first sentence, the controller of personal data shall appoint a representative for himself who is established in Sweden. The provisions of this Act concerning the controller of personal data shall also apply to the representative.