As per Article 4 of the GDPR, profiling is any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
Automated decision-making is the ability to make decisions by technological means without human involvement. These two often overlap.