I created a website for a friend's company that has no user account feature, it is only meant to be an online catalog for prices. The only user data we might receive are data that users fill in the contact form (name, surname, phone number and email) which we receive by email in the official website's mailbox. Is this website concerned by GDPR? Are data received through the contact form considered "personnal data" as GDPR mention?
GDPR only applies if you or your users are European or actually in Europe.
‘Personal data’ is data that can be used to identify an individual. Given that, do you think names, phone numbers and email addresses are personal data?