Just visiting the form shouldn't cause data to be entered in your DB. Bots shouldn't submit any forms on your page AFAIK. You could also take a peek at the user-agent of your visitor and return 410 'gone' if it's a bot.
Robots.txt is probably the easiest way, but will only keep out well-mannered bots.