Privacy Notices

You need to consider the purpose of data processing, not the mean. Why do employees fill these forms? If they fill the form to perform their job task, then, the processing is included in the employee privacy notice which is attached to the employment agreement (if not, you should).

If the form is a survey to better understand the education or expertise of your staff it may fall under the legitimate interest of the data controller (art. 6 lett. F) GDPR)

In case the processing is not included in the employee privacy notice you can decide whether to make a specific privacy notice or to implement the employee privacy notice.  

Here you can find more information on the legal basis to process personal data according to the GDPR:

• Is consent needed? Six legal bases to process data according to GDPR: https://advisera.com/eugdpracademy/knowledgebase/is-consent-needed-six-legal-bases-to-process-data-according-to-gdpr/

If you want to learn how personal data are processed under the EU GDPR you may consider enrolling in our free training EU GDPR Foundations course: https://advisera.com/training/eu-gdpr-foundations-course/