What is Sensitive Personal Data and what is considered processing?
According to Article 4 (1) of the General Data Protection Regulation, Personal Data: "any information concerning an identified or identifiable natural person ("data subject"); the identifiable natural person is one whose identity can be verified, directly or indirectly, in particular by reference to an identity element, such as name, identity number, location data, online identity or one or more factors specific to physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person".
Data processing in accordance with Article 4 (2) is: "any operation or series of operations carried out with or without the use of automated means, in personal data or in personal data sets, such as the collection, registration, the structure, storage, adaptation or alteration, retrieval, search for information, use, disclosure by transmission, dissemination or any other form of disposal, association or combination, restriction, deletion or destruction."