This is Article 4(1):
Quote:
For the purposes of this Regulation:
‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
|
This is Recital 30:
Quote:
|
1Natural persons may be associated with online identifiers provided by their devices, applications, tools and protocols, such as internet protocol addresses, cookie identifiers or other identifiers such as radio frequency identification tags. 2This may leave traces which, in particular when combined with unique identifiers and other information received by the servers, may be used to create profiles of the natural persons and identify them.
|
The letter in my post #14 said in part:
Quote:
|
As you have mentioned in your email, you are processing personal data during the course of your activities. This can include email addresses as they could identify a living individual in certain formats. Additionally, the GDPR is now identifying IP addresses as personal data. The legislation covers this in Article 4 (1) which includes online identifiers and is extended upon in Recital 30.
|
The definition is very wide and they seem to be interpreting it more widely still. I think it is a real stretch, for instance, to include ip addresses. Just ask the copyright trolls thrown out of court in the US for failure to link a name to an ip address. The authorities clearly believe that email addresses are also included. They seem to think any identifiers which alone or with other gathered information can be used to identify a natural person are caught. Clearly members who register with their own email and their actual name are providing personal information. I'm not sure what other data is collected/stored but it is likely that we are storing personal information on probably most of our members.