According to the GDPR, "processing personal data" is any operation carried out on the data by automated and non-automated means, including its collection, registration, alteration, consultation, use, transmission and destruction.