Clock-ins and privacy
Clock-ins without GPS: less data, fewer problems.
Orevia records the time a person clocks in and nothing else. Here is what is stored, what isn’t, and why it is the simplest option to manage for a professional firm or an SME.
- Data in the European Union
- No geolocation
- From browser and smartphone
What Orevia records, and what it doesn’t
Records
- who clocks in, in or out, with the server time;
- if the clock-in arrives late from the phone (offline), the phone’s time for comparison;
- the linked device and any corrections, with reason and decision.
Does not record
- location, neither when clocking in nor at any other time: the app does not ask for location access;
- photos, selfies or biometric data: Face ID and fingerprint stay on the phone;
- contacts, browsing or other phone data.
What the law says
Article 4 of Law No. 300 of 20 May 1970 (Workers’ Statute – Statuto dei lavoratori), as in force since 8 October 2016, allows tools that may enable remote monitoring of workers only for organisational and production needs, workplace safety or the protection of company assets, subject to a collective agreement or, failing that, authorisation from the National Labour Inspectorate (Ispettorato nazionale del lavoro) (paragraph 1).
Paragraph 2, by contrast, provides that this rule
“does not apply to the tools used by the worker to perform their work or to the tools for recording access and attendance”.
Paragraph 3 allows the information collected to be used for all purposes related to the employment relationship, provided that the worker is given adequate information on how the tools are used and on the checks carried out, in compliance with data protection rules. Text on Normattiva.
On the location of employees via smartphone, the Italian Data Protection Authority (Garante per la protezione dei dati personali) has ruled several times, requiring specific safeguards: for example, its decision of 18 May 2016 and the prior check of 8 September 2016 on attendance tracking using smartphone location. Regulation (EU) 2016/679 (GDPR) also requires that only the necessary data be processed (data minimisation principle, Art. 5).
Why Orevia chose not to use GPS
A clock-in that records only the time is closer to an attendance recording tool and processes less personal data. There are no locations to store, protect or explain, and the relationship with the team starts from trust.
To complete the picture, Orevia provides an employee privacy notice template to complete and approve, and records every acknowledgement with date, time and channel.
This information is general and up to date as of 22 October 2026: it does not replace the assessment of the specific case, which is the responsibility of the employer, as data controller, together with its advisers. SINAPSI S.R.L. processes data on behalf of the organisation as data processor.
Simple clock-ins, without watching over anyone.
We’ll show you how Orevia’s clock-in works in a 20-minute demo.
Request a demo