yAppointment Scanner — Data Deletion Request

This page explains how to request deletion of personal data collected through yAppointment Scanner, the staff companion app published by LohiSoft s.r.o. The app is used by employees of businesses running the yAppointment platform to scan product barcodes, take stock, and validate passes and event tickets. It has no consumer sign-up: staff accounts are created by the employing business, and the app is paired to a device with a one-time code issued by that business.

Follow these steps. Step 1 is the fastest route, because your employer can act immediately; step 2 reaches us directly.

• Step 1 — Ask the business you work for. The business that issued your scanner device is the data controller for your staff account and for the records you create with it. It can delete your staff account and unpair your device straight away from the yAppointment admin panel.
• Step 2 — Or write to us at info@yappointment.com with the subject line "Scanner data deletion request".
• Step 3 — In your message include your full name as it appears in the app, the name of the business you work for, and roughly when you last used the app. Never send us your worker PIN.
• Step 4 — We confirm receipt, verify the request with the business acting as controller, carry out the deletion, and confirm to you in writing when it is done.
• Step 5 — On your own device, open the app and unpair it, or simply uninstall it. This removes the stored authentication token and any scans still queued offline.

On completion of a request the following are permanently removed:

• Your staff user account and its profile details: name, e-mail address, phone number, and the stored hash of your worker PIN.
• The pairing record of every scanner device registered to you, together with its authentication token, so that device can no longer sign in.
• Your session and presence records — which device was online, and who took part in a shared stock-taking session.
• Everything the app stored on the device itself: the authentication token in secure storage, app preferences, and any offline scan queue.

Some records cannot be erased outright, because they are the employing business's own operational and accounting records, or because the law requires them to be kept. In these your personal identifiers are removed — the record survives, the link to you does not:

• Operational records created through the app — stock movements, goods receipts, inventory counts, pass redemptions and ticket check-ins — are kept as the business's inventory and attendance records, with your identifiers stripped out.
• Invoicing and billing records: 7 years, a statutory tax obligation.
• Other operational booking data: 3 years from the last related appointment.
• We keep no crash reports or analytics about you: the app sends no diagnostic data to any third-party service.

A business can request deletion of its entire yAppointment account, which covers every scanner device and every record belonging to it. Such a request is handled as follows:

• It first enters a 72-hour cancellation window, during which the business can still withdraw it.
• After the window closes, all company-scoped data is permanently deleted — scanner devices, products and stock, passes, tickets, and the associated stored files and cache entries.
• A narrow core is kept with personal data scrubbed: invoices, payments and accounting records, for the statutory 7-year period.
• One audit entry recording that the account was deleted, and when, is kept. It contains no personal data.

We acknowledge every request within 5 working days and complete it within 30 days of verifying who you are, in line with Article 12 of the GDPR. If a request is unusually complex we may extend that period, and we will tell you why before the 30 days are up.

LohiSoft s.r.o. Komenskeho 317/135, Sturovo, 943 01, Slovak Republic Email: info@yappointment.com