Data kept in manual format, such as files, paperwork etc.

Persons under the age of 18 years.  This is relevant where a data request has been made by somebody under the age of 18 (or in the case of a Data access request being made [...]

In a case of a personal data breach the Controller shall without undue delay (no later than 72 hours after having become aware of it) notify the personal data breach to the supervisory authority.  If [...]