The processing of personal data by the employer has always to be based on a legal ground, normally performance of a contract, compliance with a legal obligation or for the purposes of the legitimate interest pursued by the employer, except where such interest are overridden by the interest or fundamental rights of the worker.
Poslodavac mora uvijek imati zakonsku osnovu za obradu osobnih podataka, obično je to izvršenje ugovora, zadovoljavanje zakonske obveze ili za potrebe zakonitog interesa poslodavca, osim ako nad takvim interesima prevladavaju interesi ili temeljna prava radnika.