(16) (17) (18) (19) (20) (21) (22) (23) (24) (25) (26) “identifiable natural person” means one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, phone number, IP address, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person; “personal data” means any information relating to an identified or identifiable natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person; “personal data breach” means breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed; “proceedings” means any proceedings conducted by a court or an alternative dispute resolution mechanism; and may include an inquiry or investigation into an offence; and disciplinary proceedings; “processing” means an operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction; “profiling” means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to an individual, in particular to analyze or predict aspects concerning that individual’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements; “pseudonymization” means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information and the additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable individual; “recipient” means any person to whom data are disclosed or made available; “Register” means the register kept and maintained by the Commission; “restriction of processing” means the marking of stored personal data with the aim of limiting their processing in the future; “sensitive personal data” means data on a natural person’s: (a) racial or ethnic origins; (b) genetic or biometric data; (c) physical or mental health or condition; (d) sexual life; (e) political opinions; (f) membership of a trade union; (g) religious beliefs or other beliefs of a similar nature; 3