Data protection and works council
Who sees which times, no health data, log and retention, notes on the works council's co-determination rights when introducing time tracking.
Working times are personal data. allverto is built so that only what is needed for the statutory records and for payroll is recorded and shown.
Who sees what?
- Each person only sees their own times, absences, requests and their log.
- Managers only see the times of all people in the company with the permission View team times, approve absences and corrections; setting up and exporting requires Set up time tracking. Grant these permissions under Settings → Roles & permissions as sparingly as possible.
- In the team calendar, everyone else only sees that someone is absent – not whether it is vacation or sick leave.
- Data of other companies is technically separated; allverto support only sees it during a support access you have granted, and then read-only.
No health data
For sick leave, allverto only stores the period and, if you wish, the note Sick note available – there is deliberately no field for a diagnosis. Messages to managers only mention the period.
What is stored?
The start and end of each working time, breaks, the source (ERP, warehouse app, POS) and who requested, approved or changed what. For the automatic stop, allverto only remembers when the app was last used – no content, no screen recordings, no location.
Log and retention
Time entries cannot be changed; corrections go through a request with a reason, and the old version is kept. Every action is recorded in the person's Log. Records are kept for at least two years (§ 16 (2) ArbZG) and are not deleted automatically.
Works council
Introducing and using electronic time tracking is subject to co-determination under § 87 (1) no. 6 BetrVG (German Works Constitution Act), because it is technically capable of monitoring behaviour or performance. If your company has a works council:
- Involve it before switching time tracking on, and regulate its use in a works agreement.
- Above all, agree there whether the time starts automatically at sign-in, after how many minutes of inactivity it ends, whether breaks are deducted automatically and who gets which permissions.
- Inform employees which data is recorded and who sees it – this article can serve as a basis for that.