Difference shall be made between personal data and specific categories of personal data. The latter is information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation.
Personal data means any information relating to an identified or identifiable natural person, the data subject. Whenever the information may be used to create a reference to an identifier (personal reference), it is personal data. Therefore, addresses of enterprises are not personal data, unless the record contains, e.g., the contact details of a contact person. Collective data on groups of persons or anonymized data are not data with personal reference, because they do not allow identification of a natural person.
The information protected by data protection includes, inter alia, the name, age, color of the eyes, property, address or utterances of an identified or identifiable natural person. A person may be identified, for example, by means of their e-mail address (e.g., firstname.lastname@example.org). On the other hand, the general e-mail address of a enterprise (for example, email@example.com) is generally not to be classified as a personal date.
The following data are personal data:
- Insurance Number
- Tax Number
- Income Tax Bracket
- Health Condition