My personal information is safe and confidential

State Commissioner for Data Protection and Freedom of Information

Personal data is all information that relates to an identified or identifiable natural person (Article 4 No. 1 General Data Protection Regulation). It must therefore be possible to establish a connection, directly or indirectly, between information on the one hand and a person on the other. A direct connection is given, for example, with the name, address or date of birth. An indirect connection is made using additional knowledge, for example with telephone, matriculation and social security numbers or online identifiers such as IP addresses and cookie identifiers. It is sufficient if the information theoretically enables the person concerned to be identified, so it does not matter whether the person is actually identified.

The information must relate to a living person. Individual details about legal persons, such as corporations or registered associations, are not personal data. Something else only applies if the information also relates to the persons behind the legal person, that is to say to them "strike through". This can be the case, for example, with a GmbH of an individual or with a sole proprietorship if there are close financial, personal or economic ties between the natural and legal person.

Special categories of personal data are specially protected in accordance with Article 9 GDPR. These are, for example, health data, data on ethnic origin and religious or ideological beliefs.

Back to overview