GDPR has no concept of PII. Personal data is anything relating to a natural person. It's not just an identifier like an address or phone number.