As per apnaqanoon,The GDPR protects personal data regardless of the technology used for processing that data – it’s technology neutral and applies to both automated and manual processing, according to law/qanoon provided the data is organised in accordance with pre-defined criteria (for example alphabetical order)