Data protection at work
The law protects your personal data at work. Your employer can only process the types of your personal data that are necessary for your employment. Even consent given by the employee does not have any impact on this.
Your employer can only request information from you directly. Your employer can only request information on you from elsewhere with your permission.
Your employer only has the right to process your health-related data when necessary:
(1) for paying your wages for the duration of your sick leave
(2) for determining why you have been absent from work
(3) if you ask your employer for a health examination to determine your ability to work, or if you suspect or your employer suspects that you are not healthy or fit to work.
Your employer must store all information related to your health separately from all other information held by the employer. Your health information can only be processed at the workplace by those who are responsible for paying your wages for your sick leave, for example.