How to setup, that only PERSON profile can create ORG profiles? Is this possible?

You need to assign different memberships for Persons and Orgs modules, you can do it from Studio > Persons | Orgs > "Default member's level to assign after person's profile creation" 

Then you can disallow for Orgs to create Orgs in membership settings.