Personal data means any information relating to an identified or identifiable natural person (data subject).
An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier. Identifiers include, for example, a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
The General Data Protection Regulation (GDPR) regulates what is known as “special categories of data”, which are those that reveal racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership. It also regulates the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.
Any of the circumstances established in Article 9, section 2, of the GDPR must exist to be able to process these data.