Personal data is defined in the GDPR as information that relates to an identified or identifiable individual, either directly or indirectly, from one or more identifiers or from factors specific to the individual.
What identifies an individual could be as simple as a name or a number or could include other identifiers such as an IP address or a cookie identifier, or other factors.