So what counts as “personal” data, anyway?

The GDPR defines personal data as any data which can identify a single living person. 

If we have an account with Amazon, and they have our full name and address, this makes us identifiable.

Amazon are therefore handling our personal information, and if they lose it, it’s a personal data breach.