The GDPR is very vague, but maybe some food for thought can clear it up a bit. As a general rule, the GDPR is considered to cover the following areas:
Basic identity information such as name, address and ID numbers
Web data such as location, IP address, cookie data and RFID tags
Health...