; Provided that anonymised, encrypted or pseudonymized data which is incapable of identifying an individual is not personal data. (h) “processing”, in relation to personal data, means collecting, recording, holding or storing the personal data or carrying out any operation or set of operations on the personal data, including— (i) the organization, adaptation or alteration of personal data; (ii) the retrieval, consultation or use of personal data; and (iii) the disclosure of personal data by transmission, transfer, dissemination or otherwise making available; or (iv) the alignment, combination, correction, erasure or destruction of personal data; (j) “third party”, in relation to personal data, means any person other than— (i) a data subject; (ii) a relevant person in relation to a data subject; (iii) a data controller; (iv) a data processor; or (v) a person authorized in writing by the data controller to process the personal data under the direct control of the data controller; (k) “data filing system” means any set of data structured according to specific criteria suitable to ease processing of data; (l) “relevant filing system” means any set of information relating to individuals to the extent that, although the information is not processed by means of equipment operating automatically in response to instructions given for that purpose, the set of information is structured, either by reference to individuals or by reference to criteria relating to individuals, in such a way that specific information relating to a particular individual is readily accessible; (m) “relevant person” in relation to a data subject means (a) in the case of a data subject who is below the age of 18 years, the parent or a guardian appointed by a court of competent jurisdiction; (b) in case of a data subject who is incapable of managing his own affairs, a person who is appointed by a court to manage those affairs; or (c) a person authorized by the data subject to make a data access or data correction request or both such requests. (n) “rules” means rules made under this Act; and (n) “sensitive personal data” means personal data consisting of information revealing racial or ethnic origin, religious, philosophical or other beliefs, political opinions, membership in political parties, trade unions, organizations and associations with a religious, philosophical, political or trade-union, biometric or genetic data, or provide information as to the health or sexual life of an individual, the commission or alleged commission by him of any offence, or any proceedings for any offence committed or alleged to have been committed by him, the disposal of such proceedings or the sentence of any court in such proceedings and financial, 4