[dminuoso]

GDPR has no such exclusion criteria. The definition is astonishingly simple:

‘Personal data’ means any information relating to an identified or identifiable natural person (‘data subject’).

Note the weight of the word “any” here.