Under the General Data Protection Regulation (GDPR), which of the following best defines 'personal data'?