The research team decides that the interaction with the biometric system will happen through dedicated kiosks. During the research, the kiosks will be placed in the laboratory of the developers. The kiosks will collect data and store them locally, and users will interact with the kiosks in the presence of the research team. The use of the kiosks in the controlled environment of the laboratory will inform the developers of the feasibility of the technology and will act as a pilot test for future deployment on actual working sites.

One of the goals of the research is to streamline the authentication of workers. To achieve such goals, researchers aim to make the authentication process quicker by increasing the ease of use, thus minimizing the time spent by each user at the kiosk. For this reason, they decide to split the functionalities into two different kinds of kiosk: one dedicated to authentication (authentication kiosk), and one dedicated to other functionalities, such as accessing information and updating personal data (extra kiosk). This way workers who need to perform actions other than authentication will not slow down the authentication of other workers.

The authentication kiosk has two main components: a scanner for the hand and a monitor. If the authentication is successful, a green mark is displayed, the door opens,and the worker can proceed. The authentication is not recorded (since the goal is not to measure the working hours of individuals), and the monitor does not display any information on the person.

The extra kiosk has the same elements of the authentication kiosk, with the difference that the monitor is touchscreen to ensure users can interact with the system. Also, the extra kiosk is boxed to avoid shoulder surfing. Users can activate the extra kiosk by simply scanning their hands. When this is done, the monitor displays a menu with three options:

• Display data processing information: this option opens a pop-up window where all the information listed in “Identify the most appropriate legal basis” are provided;
• Access and rectify personal data: this option opens a pop-up window where all the personal data of the subjects are displayed, and where the user can rectify such data, including recording new palm impressions;
• Exercise right to rectification, restriction, data portability or objection: this option is currently disabled in the research prototype kiosk.If a user selects it, members of the research team receive an alert on their mobile devices andare required to verify with the data subjects whether they intend to exercise any of their rights.