The GDPR often talks about “processing” data.

This doesn’t just mean using it. Collecting, storing, recording and editing personal data are also classed as data processing.

Almost everything we can do with personal data comes under “data processing” – even deleting it.