Any operation performed on personal data, including collection, storage, alteration, and deletion (Article 4(2)).