“processing” means any operation or sets of operations which
is performed on personal data or on sets of personal data
whether or not by automated means, such as –
(a) collection, recording, organisation, structuring;
(b) storage, adaptation or alteration;
(c) retrieval, consultation, use;
(d) disclosure by transmission, dissemination, or
otherwise making available; or
(e) alignment or combination, restriction, erasure or
destruction;
“profiling” means any form of automated processing of
personal data consisting of the use of personal data to evaluate
certain personal aspects relating to a natural person, in
particular to analyse or predict aspects concerning that natural
person's race, sex, pregnancy, marital status, health status,
ethnic social origin, colour, age, disability, religion,
conscience, belief, culture, dress, language or birth; personal
preferences, interests, behaviour, location or movements;
“pseudonymisation” means the processing of personal data in
such a manner that the personal data can no longer be attributed
to a specific data subject without the use of additional
information, provided that such additional information is kept
separately and is subject to technical and organisational
measures to ensure that the personal data are not attributed to
an identified or identifiable natural person;
“Register” means the register as established and maintained by
the Data Commissioner under section 19;
“restriction of processing” means the marking of stored
personal data with the aim of limiting their processing in the
future;
“Sensitive personal data” means data revealing the natural
person’s race, health status, ethnic social origin, political
opinion, belief, personal preferences, location, genetic data,
biometrics, sex life or sexual orientation, personal financial
expenditures, of the data subject;
“third Party” means natural or legal person, public authority,
agency or other body, other than the data subject, data
controller, data processor or persons who, under the direct