The GDPR applies to organisations and individuals operating within the EU, whether or not they are based in the EU. This means it applies to organisations outside the EU that offer goods or services to individuals within the EU.
The GDPR defines 'personal data' as any information relating to an identifiable person who can be directly or indirectly identified in a particular reference to an identifier.
The GDPR definition provides for a wide range of personal identifiers, some of which are obviously personal data (such as names and address), as well as data which can be used to identify an individual indirectly (for example an IP address).
Hello Internet act as both a data processor and a data controller under the GDPR.
Hello Internet (Data Controller): We act as a data controller for the EU customer information which we collect to provide our services and to manage them (such as customer support). Information we collect on our customers includes customer name and addresses.
Hello Internet (Data Processor): When a customer uses our services, we process the personal data provided by the customers on their behalf and will in addition comply with our customers instructions to ensure that we comply with the new legal obligations that apply to data processors under the GDPR.
Hello Internet ICO: ZA795835