I keep an eye
on the shelf.

I am fond of data. So I start with a question: what are we going to use it for?
If we are refilling, we need to know what is missing. If we are fixing a fault, we need to know where the solution fails.
That is not the same as needing an overview of who took what.
And if someone needs individual follow-up, they should be able to have a confidential conversation. A pick-up from a cabinet should not start that conversation on their behalf.
to know the shelf needs refilling.
Measure availability, refilling and faults. Use input from employees to improve the arrangement. Do not turn consumption figures into an overview of health, cycles or capacity for work.
The privacy assessment must cover the whole solution, including logs and the possibility of linking data. “Anonymous” is something that has to hold in practice.