What is personal data?

    This page gives you some more information about what personal data is, what kinds of personal data there are, what to do in case of a data breach, and the rights of a data subject. 

    Definition of personal data

    Personal data can be any information relating to an identified or identifiable natural person ('data subject'). 

    • Identified person: the person can be clearly determined from the data available. 
    • Identifiable natural: the person can be identified, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person. 

    Different pieces of information, which collected together can lead to the identification of a particular person, also constitute personal data. 

    Personal data that has been de-identified, encrypted, or pseudonymised but that can be used to re-identify a person remains personal data and falls withtin the scope of the GDPR. 

    What is data processing?

    Processing covers a wide range of operations performed on personal data, including by manual or automated means. It includes the collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of personal data. 

    Examples of personal data

    General personal data:

    • A name and surname
    • A home address
    • An email address (such as name.surname@company.com)
    • An identification card number
    • Location data (for example, the location data function on a mobile phone)
    • An Internet Protocol (IP) address
    • A cookie ID
    • The advertising identifier of your phone
    • Data held by a hospital or doctor, which could be a symbol that uniquely identifies a person

    Sensitive personal data:

    Sensitive personal data are special kinds of personal data which need a high level of protection, because a data leak could cause the person involved harm on many levels. When processing these kinds of data, some additional measures need to be taken, Please contact privacy@mpi.nl for help. 

    • Racial or ethnic origin (NOT nationality)
    • Political opinions
    • Religious or philosophical beliefs
    • Trade union membership
    • Health
    • Sex life
    • Genetic data
    • Biometric data for the purpose of uniquely identifying a natural person