(18) This regulation does not apply to the processing of personal data by an individual in the course of purely personal or domestic activities, i.e., with no connection to professional or commercial activities. Personal or domestic activities may include, but are not limited to, correspondence and address storage, maintenance of social ties, and Internet activities undertaken as part of such activities. However, this Regulation applies to controllers or processors who provide means of processing personal data for such personal or domestic activities.
„GDPR covers one of our employees, it's just a few documents"
Are you sure about that?

