As part of its timekeeping process, Dematic uses time clocks at certain locations that are equipped with finger scan devices. The device scans an employee’s or temporary worker’s finger or fingers each time they enter or leave the work area. Dematic uses the finger scan data, which may be considered “biometric data,” to create a record of each employee’s or temporary worker’s working time and attendance, and to ensure that each person is paid correctly for the time they work. Dematic acquired these devices and the related software from UKG Inc., a third-party vendor.

Dematic, its vendors, and/or the licensor of Dematic’s time and attendance software will not sell, lease, trade, or otherwise profit from the biometric data collected; provided, however, that Dematic’s vendors and the licensor of Dematic’s time and attendance software may be paid for products or services used by Dematic that utilize such biometric data.

Dematic will use finger scan data only for the purposes stated in this Policy and for business activities directly related to achieving those purposes. Dematic will not sell, lease, trade, or otherwise profit from an employee’s or temporary worker’s finger scan data. Dematic will not disclose, provide access to, or otherwise disseminate any finger scan data other than as stated in this Policy, unless:

• The employee or temporary worker consents to such disclosure;
• The disclosed data completes a financial transaction requested or authorized by the employee or temporary worker;
• The disclosure is required by state or federal law or municipal ordinance; or
• The disclosure is required by a valid warrant or subpoena issued by a court of competent jurisdiction.

Dematic will store and transmit finger scan data and protect it from disclosure in the same manner that Dematic stores, transmits and protects other confidential and sensitive information, using the reasonable standard of care within its industry. Dematic will require UKG (and any UKG subcontractors who provide equipment or services for the purposes described in this Policy) to comply with this Policy. Dematic’s vendors and contractors, including UKG, have publicly represented that they will not sell, lease, trade or profit from finger scan data, and that they use reasonable standards of care within their industries to store, transmit, and protect such data from disclosure. UKG’s Privacy Policy is available at: https://www.ukg.com/privacy.

Dematic stores each employee’s or temporary worker’s finger scan data in secure password-protected electronic files at a Dematic site, or in secure password-protected electronic storage space provided by UKG. The finger scan data files and the applicable passwords are accessible only by those authorized Dematic or UKG personnel who are responsible to manage or use the data for timekeeping and payroll purposes and who have signed agreements to maintain the confidentiality of the data as required by this Policy.

Dematic will retain an employee’s or temporary worker’s finger scan data until the end of his or her employment or engagement with Dematic, or until the employee or temporary worker is no longer in a Dematic location or position that requires the use of a finger scan device for timekeeping. Within 180 days of either of those events, Dematic will permanently destroy (and, if applicable, will require UKG to destroy) the employee’s or temporary worker’s finger scan data. Dematic will comply with these retention and destruction requirements unless a court of competent jurisdiction issues a valid warrant or subpoena that requires Dematic to deviate from these requirements.