Who is affected by the GDPR?

It applies to all persons processing personal data and any processing or operation involving personal data or sets of personal data is considered as processed. This includes, for example, collecting (obtaining data), recording (storing information on any medium, ie in systems, applications, media, etc.), organizing (sorting by specific categories), saving (not deleting personal data for a certain period of time), reworking or modifying (eg. correcting outdated or incorrect data), viewing (looking at personal data without changing it), deleting or destroying (removing personal data by deleting, disassembling, destroying material media, etc.) and many others.

At present, it is hard to imagine that an organization or company would not process personal data under the GDPR.