Delete your Kore data

This page explains how to ask for your data to be deleted from Kore, the time-registration app published by Salvatore Cartillone (Belgium). For the full picture of what the app stores and why, read the Kore app privacy policy.

Read the next section first. What you can have deleted depends on whether you are a worker or the person who owns the company account — and that is a legal difference, not a choice of ours.

App: Kore, for Android, iPhone, Windows and Mac.

Developer: Salvatore Cartillone, Belgium.

Where to send a request: contact@getkore.be.

Kore records the hours people work so that their employer pays them correctly. That makes the employer the data controller and Kore the processor: we run the software on the employer’s instructions.

If you are a worker: you cannot delete your own working-time records, and we may not do it on our own initiative either. Your employer is under a legal duty to keep them. What you can do is ask your employer to delete whatever that duty does not cover — and if they do not act, write to us. We will help you, and we will chase your employer.

If you own the company account: you control the whole workspace. You can ask for it to be deleted in full, including every account inside it.

Step 1 — Ask your employer. They are the data controller, so the request belongs with them first. Ask in writing, so there is a record of it.

Step 2 — If they do not act, email us at contact@getkore.be, with Data deletion request as the subject.

Step 3 — Tell us who you are. Include the email address your Kore account uses and the name of the company you work for. Without those two we cannot find your account, and we will have to come back and ask.

Step 4 — We answer within 30 days. We delete what can be deleted, we tell you plainly what has to be kept and why, and we take the rest up with your employer.

Step 1 — Email us from the address that owns the account, at contact@getkore.be.

Step 2 — Say what you want deleted: your own account only, one of your workers, or the entire company workspace.

Step 3 — Include the account email address and the company name, so we can identify the right workspace. If you write from a different address, we will ask you to confirm from the account address.

Step 4 — We confirm before we delete. Deleting a workspace takes your workers’ access away too, so we ask you to confirm it in writing. After that the data is deleted within 90 days, unless a legal duty requires us to keep part of it longer.

Deleting the workspace does not lift your own obligation as an employer to keep payroll and working-time records. Make sure you hold your own copy of whatever the law requires you to keep — once it is gone, we cannot bring it back.

• Your name
• Your email address
• Your role in the company
• Your language preference
• Your push notification token — so the app stops reaching your phone.
• Your account credentials — the sign-in itself.
• Everything else that is not under a retention duty.

Working-time and pay records are not deleted on request. Belgian payroll and social-security law requires an employer to keep them — generally for five years. That is your employer’s legal obligation rather than a preference of ours, and it is not something we can waive because you ask.

We would rather say that plainly than promise a deletion nobody is allowed to carry out. Those records exist so an employer can show what was worked and what was paid — which is also what protects you if there is ever a dispute about your pay.

When a company closes its account entirely, everything is deleted within 90 days, unless a legal duty requires us to keep part of it longer.

We answer every request within 30 days, the deadline the GDPR sets. If a request is complicated we will tell you inside those 30 days rather than leave you without news.

When a whole company account is closed, its data is deleted within 90 days of the closure, unless the law requires part of it to be kept longer.

You can complain to the Belgian supervisory authority: the Gegevensbeschermingsautoriteit / Autorité de protection des données, Rue de la Presse 35 / Drukpersstraat 35, 1000 Brussels — dataprotectionauthority.be.

You do not need our permission for that, and you do not have to come through us first.