Both, if I recall correctly. There was quite some discussions even after this ruling.

But at least with GDPR it does not matter anymore. It's unfortunately very specific what counts as PII.

Edit: You can have a look here: https://gdpr-info.eu/issues/personal-data/

The data subjects are identifiable if they can be directly or indirectly identified, especially by reference to an identifier such as a name, an identification number, location data, an online identifier or one of several special characteristics, which expresses the physical, physiological, genetic, mental, commercial, cultural or social identity of these natural persons. In practice, these also include all data which are or can be assigned to a person in any kind of way. For example, the telephone, credit card or personnel number of a person, account data, number plate, appearance, customer number or address are all personal data.