Delete my data.

How to request deletion

Your employer — the venue that employs you — is the data controller for your work records. Inntally Ltd. runs the software on their behalf. So the request starts with them, and we act on it.

1. Ask your employer. In the app: Me → Privacy & data → Request my data or deletion. Or email your manager or HR contact directly, saying you want your data deleted and naming the Inntally MySpace app.
2. If you cannot reach them, or they do not respond, email us. Send your request to dpo@inntally.com with your name, your work email, and the name of the venue you work or worked at. We use those only to find your records and answer you.
3. We respond within 30 days, as GDPR requires. If any part of your data has to be kept, we will tell you exactly which part and why, rather than simply refusing.

You do not need the app installed to make a request, and you do not need an active account.

What you can delete yourself, right now

• The recognition of your phone. On the clock-in screen choose “Not me”, or sign out. The token that lets the app recognise your phone is removed immediately, on the device and on our servers.
• Notifications. Turn them off in Me → Notifications, or in Android’s own settings.
• Facial verification. You can stop using it at any time and clock in another way. To have the face template itself erased, ask your employer — see the table below.

What is deleted, and what is kept

Some of this data is a record your employer is legally required to keep, and neither you nor we can delete it on request. That is stated plainly here rather than discovered later.

Deleted on request

• Your face template — the biometric data used for facial clock-in. Erased on request; you can still clock in by PIN, QR or at a terminal. Attendance records already created remain, but they no longer link to a template.
• Device recognition tokens — removed immediately, by you or by us.
• Photos you attached to reports, checklists or lost-property items, where the record itself is not required for a safety or compliance obligation.
• Messages you sent colleagues, and comments, survey answers and recognition posts, subject to your employer’s own retention rules.
• Your account and sign-in — closed and removed, so the app can no longer be used.

Kept, because the law requires it

• Attendance and working-time records — hours worked, breaks, clock-in and clock-out. Irish employment law (Organisation of Working Time Act 1997) requires an employer to keep these for at least three years.
• Payroll and pay records — payslips, pay rates, tax details and the bank account used to pay you. Irish tax law requires these to be retained for six years.
• Leave and absence records, for the same statutory period, because they evidence entitlements that were paid.
• Records needed for a live dispute, claim, investigation or audit, for as long as that is open.

Once the statutory period ends, these records are deleted under your employer’s retention schedule. If you ask us to delete data that must be kept, we restrict it instead — it stops being used for anything except the legal purpose that requires it.

After deletion

Data we delete is removed from live systems immediately and from routine backups within 30 days, after which backups holding it are overwritten in the normal cycle.

Your other rights

As well as deletion you can ask for a copy of your data, ask for it to be corrected, object to processing, or ask us to restrict it. Same route, same 30 days. You can also complain to the Irish Data Protection Commission at dataprotection.ie, or to your own country’s supervisory authority.

Contact

Inntally Ltd., Limerick, Ireland · Data Protection Officer: dpo@inntally.com · General privacy queries: privacy@inntally.com

See also the MySpace app privacy notice and the Inntally Privacy Notice.