I only have handwritten notes, does the GDPR apply to me?

Yes. Non-automated processed data is also subject to the GDPR. Once you have sorted data in any way, it is subject to the GDPR.

This means that the data subjects have a right to information. Folders must be adequately backed up and data that is no longer needed must be disposed of.

Appropriate means that, for example, personnel files with religious affiliation or union membership should be blocked.