. . . "However, the company still received 107 applications, all of which contained personal data such as passport number or date of births." . .