Panicking here! I work for a non for profit organisation & recently sent a 3rd party details of organisations that we support under a specific criteria after they asked. I sent them without thinking though didn't include any personal details or contact details...Now it has been flagged as a possible breach of gdpr...does this constitute such a breach??