This data is collected by the contracting party as data controller as defined in data protection legislation. "Data Protection Legislation" as used herein means all applicable data protection laws and related implementing regulations, including laws and regulations stemming from the implementation of Directive 2002/58/EC concerning the processing of personal data and the protection of privacy in the electronic communications sector and the General Data Protection Regulation (2016/679) ("GDPR").