The GDPR applies to personal data, which is defined as any information relating to an identifiable natural person.