Workplace biometric clock-in — privacy notice
Version 1 · POPIA section 18 notice · Template — your employer and its attorney should adapt it.
Your employer (the Responsible Party) uses Werktyd (the Operator) to record your working time using a face scan.
What is collected
A numeric face template (biometric data — “special personal information” under POPIA s.26) plus your clock in/out times, worker number and name. Your photograph is not kept — only the numeric template used to recognise you.
Why (purpose)
Solely to record attendance and working hours for payroll and the employer’s record-keeping duty under the Basic Conditions of Employment Act. It is not used for anything else and is not sold or shared for marketing.
Your choice
You may decline the face scan and use a PIN instead, at no penalty. Ask your employer.
Where it is processed
On secure servers in Germany (European Union), whose GDPR protections are recognised as adequate under POPIA s.72. This transfer is disclosed here and governed by an operator agreement.
How long it is kept
Your face template is deleted when you leave employment (after a short dispute buffer). Your time records are kept for at least 3 years as the law requires, then deleted.
Your rights
You may ask to see, correct or delete your information, or object to processing — at /popia/request. You may also complain to the Information Regulator (South Africa).
Contact
Operator: Werktyd — privacy@werktyd.co.za. Your employer is the Responsible Party; their Information Officer handles rights requests.