Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means.

Can include: collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction