Article 2:
> This Regulation applies to the processing of personal data wholly or partly by automated means and to the processing other than by automated means of personal data which form part of a filing system or are intended to form part of a filing system.
Which makes sense, just keeping customer data on paper instead of in digital storage shouldn't mean you don't have to protect it.
