How the GDPR effects personal data and what is data processing