"Processing" is defined in Article 4 as "any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination." The concept is fairly wide, encompassing pretty much any activity on personal data.