GDPR applies to personal data, which is any information related to an identified or identifiable natural person. In the context of catalysis, this might include names, contact details, professional credentials, or any other data that could identify research participants or collaborators. Data anonymized in such a way that individuals cannot be identified is not subject to GDPR.