“Controller” – a natural or legal person, public body, unit or another entity that independently or jointly with others sets the purposes and means processing personal data; “Personal data” – information about an identified or identifiable person (data subject); an identifiable person is someone who can be directly or indirectly identified, in particular on the basis of an identifier such as name, identification number, location details, Internet identifier or one or more specific factors determining a physical, physiological, genetic, psychological, economic, cultural or social identity of a person; “Processing” – operation or set of operations performed on personal data or personal data sets in an automated or non-automated manner, such as collecting, recording, organizing, ordering, storing, adapting or modifying, downloading, browsing, using, disclosing by sending, distributing or otherwise sharing, matching or linking, limiting, deleting or destroying; “Sensitive Data” – data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, genetic data or biometric data, health-related data, data concerning sex life and sexual orientation.