Any person whose personal data is being collected, held, or processed is a data subject per GDPR.
In Apprise, data subjects include customers, suppliers, prospects, and contacts.