Card Time Clock Machine: Types, Prices and How to Choose10 minutos de leitura

The card-based time clock remains the most popular physical attendance terminal in Portugal for factories, warehouses, workshops and companies that prefer to avoid the RGPD complexity of biometric readers. The worker taps an RFID card (or enters a PIN) and goes. This guide covers card types, price ranges, main vendors in Portugal, installation requirements, maintenance, advantages over biometrics and when card readers beat mobile apps.

This guide is aimed at international business owners and operations managers running companies in Portugal who are evaluating the purchase of a physical card-based or PIN-based attendance terminal, rather than biometric or mobile app alternatives.

What a card-based time clock is

A fixed terminal installed at the workplace (wall, pedestal or reception desk) that logs clock-in and clock-out events via a personal identification card, numeric PIN or QR code. Unlike biometric terminals, it does not read fingerprints or faces — it recognises only a physical object or a code known to the worker.

It is the oldest technology still in massive use, and also the simplest to operate, audit and justify to both workers and the CNPD. It fully complies with Article 202 of the Portuguese Labour Code (CT) provided the log is reliable, auditable and retained for 5 years.

Available reading technologies

RFID 125 kHz (low frequency)

Legacy technology still widely used. Cheap cards or key fobs (0.50-2€/unit). Fast reading but weak cryptographic security — easy to clone with low-cost devices. Suitable for operations with low security requirements.

RFID 13.56 MHz (MIFARE)

Current recommended standard. MIFARE Classic, MIFARE DESFire or NTAG cards offer fast reads and, in DESFire variants, strong cryptography. Card cost 1-5€/unit. Compatible with multi-purpose cards (access control, vending, printing).

Magnetic stripe

Deprecated technology for attendance (fast wear, weak security). Still found in older terminals. Not recommended for new installations.

PIN keypad

Manual entry of a numeric code (4-6 digits). Zero consumable cost but slower and prone to code sharing between colleagues. Useful as a fallback when the card is forgotten or lost.

QR code

Card printed on paper or QR shown on a smartphone. Cheap and quickly reissued, but easily photographed and shared. Better suited to visitors/temporary staff than to permanent headcount.

Hardware price ranges

Beyond the terminal, budget for: cards 1-5€ each, installation 100-250€, software licence 8-20€/employee/month, annual maintenance 10-15% of hardware value.

Main vendors in Portugal

• IDONIC (Leiria) — Portuguese manufacturer; Nitgen, Virdi and own-brand ranges; strong footprint in Portuguese SMEs; local technical support.
• Innux Technologies (Porto) — Portuguese manufacturer of terminals and integrated software; Innux Time platform; card and multi-technology hardware.
• Deister Electronic (via Iberian representation) — focus on access control and industrial RFID identification; rugged factory-grade terminals.
• ZKTeco (via authorised distributors in Portugal) — Asian manufacturer with competitive price/feature ratio; distributed by local integrators that provide support.
• Local integrators and resellers — often bundle hardware (ZKTeco, Suprema) with Portuguese software (PicaPonto, CucoCloud, PontoSimples) and installation services.

Always assess the proximity of technical assistance: a terminal down for two days means manual paper logging and risk of breaching Article 202.

Installation requirements

• Mounting: wall (height 1.30-1.40 m, wheelchair accessible), pedestal or counter. Leave clear space in front to avoid queues blocking doors.
• Power: 220 V (nearby socket) or PoE (Power over Ethernet, 48 V over the network cable, requires a compatible PoE switch).
• Network: Ethernet RJ45 (recommended) or 2.4 GHz Wi-Fi. In industrial environments with interference, Ethernet is always more reliable.
• Time sync: active NTP to prevent minute-level drifts between terminals, which trigger disputes over tardiness and overtime.
• Power backup: a small UPS (50-100€) prevents log loss during outages; some terminals include a 4-8 h internal battery.
• Lighting: avoid direct light on the screen (glare); provide visual comfort in the punching area.

Maintenance and consumables

• Monthly cleaning of reader and keypad (industrial dust degrades reading).
• Replacement of lost or damaged cards (1-5€ each; charging the worker for a second card is common practice).
• Manufacturer firmware updates (check support policy: vendor-abandoned hardware eventually becomes incompatible with modern operating systems).
• Maintenance contract: typically 10-15% of hardware value per year; covers parts, labour and temporary replacement.
• Regular backup of the associated software database (if local; cloud setups do it automatically).

Advantages over biometrics

1. No RGPD Article 9: cards and PINs are not biometric data. Avoids the special category and the reinforced proportionality burden.
2. No mandatory DPIA from CNPD: while a data-protection impact assessment is good practice for any attendance system, it is not required with the rigour biometrics imposes.
3. Lower worker resistance: the card is perceived as neutral; biometrics triggers objections (religious, cultural, privacy-related) and alternative-method requests.
4. Cheaper hardware: a basic card reader costs 200-500€; an equivalent facial-biometric terminal starts at 500-900€.
5. No reading issues: dirty, wet, cut or cracked fingers; masks; glasses; adverse lighting. The card always reads.
6. Lighter RGPD documentation: fewer mandatory worker notices, fewer RoPA fields, lower risk of CNPD complaints.
7. Reversibility: when a worker leaves, the card is simply deactivated; with biometrics, the template is stored and must be deleted with documented care.

Drawbacks and mitigations

• Buddy punching (one worker clocking in for a colleague): cards can be lent. Mitigation: visual supervision at the punching zone, deterrent cameras, mandatory photo on punch (available in mid-range terminals).
• Lost or forgotten cards: days with a forgotten card require temporary PIN or manual logging; internal policy must define replacement cost.
• Cloning (RFID 125 kHz): avoidable by migrating to MIFARE DESFire with cryptography.
• Non-recoverable upfront investment: hardware depreciates in 3-5 years; compare with cloud apps at 0€ upfront.
• No mobility: does not cover telework (Lei 83/2021), field work or construction sites. In those scenarios a complementary app is unavoidable.

When to choose a card over an app

1. Workers without a smartphone, or who refuse to use their personal phone for work — the card is the concrete alternative required by the proportionality principle.
2. Factories and warehouses with phone restrictions: ATEX zones, chemical areas, anti-distraction policies. The terminal sits at the entrance.
3. Multi-location operations with fixed points: branches, industrial gatehouse, construction sites with a fixed base — one terminal per location handles it.
4. Cultural resistance to biometrics: workers refusing to hand over a fingerprint or face scan; the card avoids the conflict.
5. High-density shift changes: 50 operators entering at the same time; the card is faster than a phone.
6. Poor mobile coverage: basements, metal-clad interiors, rural areas; a terminal on Ethernet solves it.

Article 202 compliance with a card system

The card reader logs the exact time of entry, exit and breaks (if the worker clocks breaks). This information fully meets Article 202 of the CT, provided that:

• The record is reliable and cannot be altered retrospectively without an audit trail.
• It is retained for 5 years.
• It is available for inspection by the Autoridade para as Condições do Trabalho (ACT) at any time.
• The worker can consult and challenge (via a formal complaint procedure) their own records.

The software behind the reader matters as much as the hardware — it generates the evidence the ACT consults.

Interaction with collective bargaining instruments

Many sectors (metalworking, construction, hospitality, retail) have Convenções Colectivas de Trabalho (CCT) or other Instrumentos de Regulamentação Colectiva de Trabalho (IRCT) with specific rules: shift allowance, night premium, meal allowance per workday, compensatory rest.

The card terminal only logs time; it is the software that calculates these premiums. Before contracting, confirm the software supports:

• The sector CCT/IRCT rules (or custom configuration).
• Multiple schedules/shifts in the same company.
• Separation of paid vs unpaid breaks.
• Export to the ERP or payroll software (Primavera, PHC, Sage, Cegid).

Pre-purchase checklist

1. How many locations require a fixed terminal? (Multiply by average price.)
2. Which card technology? (MIFARE 13.56 MHz is the current recommendation.)
3. Which vendor has technical support close to the operation?
4. Does the associated software cover the sector CCT/IRCT?
5. Does it export directly to the payroll software?
6. What is the lost-card replacement policy (who pays)?
7. Is a UPS or battery backup planned?
8. Are there workers without a smartphone who need this alternative?
9. Is the worker-facing RGPD notice drafted?
10. Does the maintenance contract cover temporary replacement in case of failure?

Fontes oficiais

• Portuguese Labour Code (Lei 7/2009), Article 202 — Diário da República
• Autoridade para as Condições do Trabalho — act.gov.pt
• Comissão Nacional de Protecção de Dados — cnpd.pt

Conclusion

A card-based time clock remains the most pragmatic choice for Portuguese SMEs with fixed locations, workers without smartphones, phone restrictions on the shop floor or cultural resistance to biometrics. It offers a solid price/robustness ratio (200-1,500€ per terminal), RGPD simplicity (no Article 9, no heavy DPIA) and full compliance with Article 202 of the CT. The decision hinges on two points: (1) card technology — prefer MIFARE 13.56 MHz with cryptography; (2) associated software — it must support the sector CCT/IRCT and export to payroll. In operations with telework or field work, combining a card with a cloud app (PicaPonto, CucoCloud, PontoSimples) is the approach that covers every scenario.

This article does not constitute legal advice or a commercial recommendation. For specific cases, consult a Portuguese labour lawyer and request demonstrations from the hardware and software vendors mentioned.

Related reading

• Article 202 of the Portuguese Labour Code
• Best App for Time Clocking
• PicaPonto vs Factorial vs Sesame
• ACT Labour Inspections