What is personal data?

[chandona]

Article 4 of the General Data Protection Regulation defines personal data as follows: “any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is any person whose identity can be determined, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.”

This definition broadens the classic approach to what constitutes personal data to any key that identifies or allows tracking of an individual person . In particular, the consideration has been broadened to also include digital information used to track the online behavior of individuals, such as cookies, IP addresses or mobile device identifiers . In other bulk sms singapore words, even if this data is not linked to a name, if it allows you to uniquely identify a person, the GDPR would interpret it as personal data.

The European Commission specifies some examples of what can be considered personal data, such as address, telephone number or email address . However, it identifies other data as non-personal, citing business data, statistical data and anonymised data (data resulting from an irreversible encryption or anonymisation process).



The fact that it is personal data does not mean that you cannot collect, process or use it ; but it does mean that, when doing so, you must comply with the measures required by the GDPR to avoid falling into the chaos that occurred before the Regulation was applied. This is especially important when you are going to use that personal data in advertising campaigns, since there is clear evidence of the possession and use of the data. The responsibility of an advertiser is not lost by hiring a processor or intermediary , since the GDPR requires the beneficiary of the advertising to have taken due diligence in ensuring compliance with their duties towards the owners of that personal data.

For all these reasons, it is crucial to have a data agency, such as DataCentric, that guarantees its processes, the security of the information it processes and is responsible for ensuring that the personal data it supplies for marketing campaigns scrupulously complies with the requirements of the current Personal Data Protection Regulation. This is what the Spanish Data Protection Agency has recognised by awarding ASEDIE (an association of which DataCentric is a member) for good practices in data protection.