Basic GDPR terminology: personal and sensitive data, data subject, data processing

In the basic terminology section, we would like to explain the basic terms of the GDPR in a concise, clear and understandable way.

Personal data
A variety of information relating to a specific or identifiable data subject.

Data Subject
The natural person to whom the personal data relates and can be used to identify. These are EU residents (EU citizens) whose rights are protected by the Regulation.

General personal data are:

Name
Gender
Age and date of birth
Personal status
IP address
Photographic record

Organisational details
So-called organisational data also counts as personal data. The GDPR regulation also applies to natural persons in business and organisational data includes, for example, email address, address, telephone number or various identification data issued by the state.

Personal data also includes special categories of personal data - so-called sensitive data:

Racial or ethnic origin
Political opinions
Religious or philosophical beliefs
Union membership
Health status
Sexual orientation
Personal criminal offences or final convictions

Newly added to the special category are the following sensitive data:

Genetic data
Biometric data
Personal data for children

The processing of sensitive personal data is subject to a much stricter regime than for general personal data.

Data processing
Data processing means any operation or set of operations which the controller or processor carries out systematically on personal data, whether by automated means or by other means.

Processing means, in particular:

collection
Storage on information carriers
Disclosure, alteration or modification
Searching, using, transmitting, disseminating
Disclosure, storage, exchange, classification or combination
Blocking and disposal

If you are interested in details, don't understand something, or need any other information, please contact us. We will be happy to advise and address your needs and questions individually.