1. Personal Data: Any data relating to an identified or identifiable natural person (‘Data Subject’) such as name, address, email address, phone number, educational background, financial details, educational details, nationality etc.
2. Data Controller: Controls purpose and means of processing. Direct responsibility to data subject and data protection authority.
3. Data Processor: Acts on instructions of Data Controller. Direct responsibility to data subject and data protection authority.
4. Data Subject: Data subject is any identified or identifiable natural person, whose personal data is processed by the controller responsible for the processing.
5. Processing: Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
6. Consent: Consent of the data subject is any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
7. Pseudonymisation: The processing of personal data in such a way that the data can no longer be attributed to a specific data subject without the use of additional information.