the categories of personal data referred to in Article 9 of Directive (EU) 2016/680 and Article 10(1) of Regulation (EU) 2018/1725 Art. 3(37) GDPR