All articles
24. 7. 2017
2 min read

Basic GDPR terminology: personal and sensitive data, data subject, data processing

In the basic terminology section, we would like to explain the basic terms of the GDPR in a concise, clear and understandable way.


Personal data
A variety of information relating to a specific or identifiable data subject.

Data Subject
The natural person to whom the personal data relates and can be used to identify. These are EU residents (EU citizens) whose rights are protected by the Regulation.

General personal data are:

  • Name
  • Gender
  • Age and date of birth
  • Personal status
  • IP address
  • Photographic record

Organisational details
So-called organisational data also counts as personal data. The GDPR regulation also applies to natural persons in business and organisational data includes, for example, email address, address, telephone number or various identification data issued by the state.

Personal data also includes special categories of personal data – so-called sensitive data:

  • Racial or ethnic origin
  • Political opinions
  • Religious or philosophical beliefs
  • Union membership
  • Health status
  • Sexual orientation
  • Personal criminal offences or final convictions

Newly added to the special category are the following sensitive data:

  • Genetic data
  • Biometric data
  • Personal data for children

The processing of sensitive personal data is subject to a much stricter regime than for general personal data.

Data processing
Data processing means any operation or set of operations which the controller or processor carries out systematically on personal data, whether by automated means or by other means.

Processing means, in particular:

  • collection
  • Storage on information carriers
  • Disclosure, alteration or modification
  • Searching, using, transmitting, disseminating
  • Disclosure, storage, exchange, classification or combination
  • Blocking and disposal

If you are interested in details, don’t understand something, or need any other information, please contact us. We will be happy to advise and address your needs and questions individually.

Have a project?

Get in touch and we'll discuss how we can help.
Contact us

More articles

1 Aug 2026

Cyber Resilience Act: New Rules for Secure Software and Digital Products

The European Union is introducing another important regulation in the field of cybersecurity. It is called the Cyber Resilience Act, or CRA for short, and applies to all products with a digital component. This means not only smart devices, but also software, applications, and systems that connect to a network or communicate with another service…
Read the article
15 Jul 2026

Withdrawal button – Wontilles responds in advance to new legislative requirements

The legislative environment in the field of e-commerce is undergoing constant changes, which place high demands on online shop operators.
Read the article
1 Jun 2026

Railsformers at the Faculty of Arts at the OU: Ruby on Rails in practice and now also in IT business

At the Faculty of Science of the University of Ostrava, we have long been giving students practical experience with Ruby on Rails development and showing them what it looks like to work on real web applications. From the original pilot course, we have developed a stable course Ruby on Rails I and II, which we…
Read the article