What's your issue with them using Biometrics for a clocking in system?
They already know a great deal about you anyway, Most companies will have an employees address, bank details, salary, NI number, Next of Kin, Passport Number, etc, etc.
What they should have in place is a procedure for removing any data after the legal requirement has expired, Biomentrics included.