Which of the following would most likely NOT be covered by the definition of “personal data” under the GDPR?