Privacy and what is stored on your device

kloko is a product of Gemara.

For employees' working times, their employer is the data controller: the employer has to keep them and decides what they are used for. Gemara processes that data on the employer's behalf.

For the data of the account itself, such as the owner's name and email address, Gemara is the data controller.

• Of the business: name, address and enterprise number.
• Of each user: first name, surname, email address and language.
• The records: every clock event (start, break, resume, stop) with its time. If someone clocked in without a connection, also the device's time and the moment the server received it.
• Corrections: the old time, the new time, the reason, who requested it and who approved it.
• A log of every change, so that nothing can change silently.

No location, no photos, no fingerprint or facial recognition, and nothing of what anyone otherwise does on their phone.

• An employee sees their own hours, corrections and history.
• The owner sees the hours, corrections and history of their own employees.
• kloko administrators have access for support and maintenance, and only when that is necessary.
• Anyone who enters a document's check code on this website sees only the type of document, the period and the time it was created. No names.

Records are kept for at least 5 years. That period is usually mentioned for the new registration requirement; we will adjust it if the law asks for something different. An employee who leaves is deactivated, not deleted: their hours remain part of the employer's file.

Subject to the final legal text.

You may view your data and have it corrected. As an employee you do that in the app itself: you see your own hours, and you put a mistake right with a correction. For everything else, turn to your employer.

A question about your account or this text? Write to [email protected]. You can also lodge a complaint with the Data Protection Authority (Gegevensbeschermingsautoriteit).