Do the data protection rules apply to data about a company?

Answer

No, the rules only apply to personal data about individuals, they don’t govern data about companies or any other legal entities. However, information in relation to one-person companies may constitute personal data where it allows the identification of a natural person. The rules also apply to all personal data relating to natural persons in the course of a professional activity, such as the employees of a company/organisation, business email addresses like ‘forename [dot] surnamecompany [dot] eu (forename[dot]surname[at]company[dot]eu)’ or employees’ business telephone numbers.