Personal information is any information that can be used to identify you. In other words, it's any data that can be linked back to you personally.
Personal information includes your name, phone number, email address, payment details and anything else that could be used to identify you.
The GDPR requires organizations to have a lawful basis for processing personal information. The most common lawful basis is consent; however, there are other conditions under which it is acceptable to process personal information without consent. For example, if you need to process the information in order to complete a contract with the individual or if the processing is necessary for compliance with a legal obligation.