Applicant Privacy Notice

We hereby inform you about the processing of your personal data by the INNIO Group and the rights to which you are entitled to under applicable data protection law.

I. Who is responsible for data processing and who is the data protection officer?

The data controller is INNIO Jenbacher GmbH & Co OG, Achenseestrasse 1-3, A-6200 Jenbach, Austria. You may reach our data protection officer (RA Dr. Karsten Kinast, LLM., Nordstraße 17a, D-50733 Cologne) at: DPO-INNIO@kinast.eu

II. What data processing activities do we carry out in context of the application process?

We process your personal data in compliance with the provisions of the EU General Data Protection Regulation (GDPR), applicable national data protection laws, and all other relevant laws of the Member States.

In connection with your application, we carry out the following processing activities:

1. Online Application

a) Purpose of Processing

If you submit an online application through our website or WhatsApp, we process your personal data for the purpose of handling your application for a position within our company. Your data may also be processed for the purpose of storing, consolidating, and making available an applicant database operated by INNIO.

The personal data processed may include your name, title, address, telephone number, date of birth, education, work experience, salary expectations and any data and images contained in the cover letter, curriculum vitae, references, or any additional documents you provide us in this context.

b) Legal Basis

The primary legal basis for this processing activity is your consent pursuant to Art. 6 (1) a) GDPR.

You may withdraw your consent at any time with effect for the future. Withdrawal of consent means that we will no longer process your data for the above purposes from that time onward, and any related rights, benefits, or opportunities may no longer be available. The lawfulness of processing carried out on the basis of your consent prior to its withdrawal remains unaffected. To withdraw your consent, please contact: careers@innio.com

c) Retention Period

The data provided will be stored in the INNIO database for six months. If you exercise your right to withdraw your consent before the expiry of this retention period, your personal data will be deleted without undue delay from that point onward.

2. Transcription and Summarization of Job Interviews using Microsoft Copilot

a) Purpose of Processing

To improve the efficiency and quality of our recruitment process, job interviews conducted via Microsoft Teams may, with your consent, be automatically transcribed and summarized using Microsoft Copilot. Following a manual review for accuracy, the data will be stored in INNIO’s recruitment management system for the further processing of your application.

The personal data processed may include your name, title, address, telephone number, date of birth, education, work experience, salary expectations, and any other personal data you provide during the job interview.

b) Legal Basis

The legal basis for this processing activity is your consent pursuant to Art. 6 (1) a) GDPR. You may withdraw your consent at any time with effect for the future. Withdrawal of consent means that we will no longer process your data for the above purposes from that time onward. The lawfulness of processing carried out on the basis of your consent prior to its withdrawal remains unaffected.

To withdraw your consent, please contact: careers@innio.com.

c) Retention Period

The personal data shared during the job interview will be stored in INNIO’s database until the applicable statutory retention periods under the relevant national law have expired. If you exercise your right to withdraw your consent before the expiry of this retention period, your personal data will be deleted without undue delay from that point onward.

3. Use of Jobvite AI Companion in the Application Process

a) Purpose of Processing

To improve the efficiency and quality of our application process, we use Jobvite AI Companion with your consent. Interviews conducted via Microsoft Teams may be recorded, automatically transcribed, and summarized. Following a manual review for accuracy, the data is stored in INNIO’s applicant management system and used for the further processing of your application.

The system supports interviewers by generating AI-assisted interview guides and questions based on job descriptions and role information. In addition, candidate profiles may be synchronized from our applicant tracking system in order to link interview insights with application documents. Interviewers may also manually record feedback and evaluations in the form of notes or scorecards. The AI system does not carry out automated evaluation or automated decision-making.

Your personal data provided during the application process is processed solely for the purposes of conducting the application process, structuring interviews, and supporting a fair and transparent decision-making process.

b) Legal Basis

To withdraw your consent, please contact: careers@innio.com.

c) Retention Period

The personal data provided during the application process will be stored in INNIO’s database until the applicable statutory retention periods under the relevant national law have expired. If you exercise your right to withdraw your consent before the expiry of this retention period, your personal data will be deleted without undue delay from that point onward.

4. Use of Jobvite Talent Fit

a) Purpose of Processing

As part of our recruitment process, we use the AI-supported matching tool Talent Fit to help us process incoming applications more efficiently and identify suitable candidates. Talent Fit uses the skills, certifications, licenses, and professional experience listed in an applicant’s CV and compares them with the job description for the role to which the applicant has applied. On this basis, the system generates an initial general assessment of the degree of match between the applicant’s profile and the relevant position. As part of this process, the tool processes only the application documents and the relevant job description.

This assessment serves solely to support recruiters in reviewing and prioritizing applications. The results generated by the system are reviewed by our personnel and used only as a decision-support tool. The final decision as to whether a candidate is invited to an interview or offered employment is made exclusively by our HR staff and is not based on fully automated decision-making.

b) Legal Basis

The legal basis for the processing activity is Art. 6(1) b) GDPR. The processing is necessary in order to take steps at your request prior to entering into a contract and to assess your suitability for the position.

c) Retention Period

The data provided will be stored in the INNIO database until the applicable statutory retention periods under the relevant national law have expired. If you exercise your right to withdraw your consent before the expiry of this retention period, your personal data will be deleted without undue delay from that point onward.

5. Job alerts

a) Purpose of Processing

If you register to receive job alerts, we will process your personal data in order to notify you of open positions within our company that may be of interest to you. This personal data may include your name, contact details, and your areas of professional and geographic interest.

b) Legal Basis

The primary legal basis for this processing activity is your consent, pursuant to Art. 6 (1) a) GDPR.

To withdraw your consent, please contact: careers@innio.com.

c) Retention Period

The data provided will be stored in the INNIO database until the applicable statutory retention periods under the relevant national law have expired. If you withdraw your consent before the expiry of this retention period, your personal data will be deleted without undue delay from that point onward.

6. Candidate Feedback Requests

a) Purpose of Processing

If you submit an online application through our website or via WhatsApp, we may process your data if you agree to complete a feedback form regarding our application process. This feedback is used to improve our recruitment process for future applicants.

The personal data processed may include general personal information, such as your responses to the feedback form, information relating to your experience as a candidate, and feedback concerning the recruitment process, to the extent that such information may make it possible to identify you. This data will be anonymized. INNIO does not require any specific personal data for this purpose.

b) Legal Basis

The primary legal basis for this processing activity is our legitimate interest pursuant to Art. 6 (1) f) GDPR. Our legitimate interest lies in optimizing our application process and aligning it more closely with the needs of applicants and INNIO.

You have the right to object to this processing. Further information is set out under your rights in Section V below.

c) Retention Period

As a rule, the data is anonymized as soon as it has been collected. Once anonymized, deletion is no longer necessary.

III. Transfer of Data to Third Parties

For the processing of your online application and the conduct of the above-mentioned feedback surveys, we use service providers established in the EU for each relevant processing activity. These service-providers may in turn engage their own sub-processors.

As part of the use of Microsoft Copilot for the transcription and summarization of job interviews, personal data will be transferred to a Microsoft data center located within the EU.

Apart from the above, no further personal data is transferred to recipients outside the company in the context of the application process. Within the company, access to your personal data is limited to the Human Resources department and the relevant contact persons in the departments concerned.

For more specific information regarding the service providers used, please contact our HR department.

IV. Transfer of Data to Third Countries Outside the EU/EEA

If your data is processed, in whole or in part, outside the EU or EEA by affiliated companies or external third parties (including sub-processors), we implement appropriate safeguards and measures to ensure an adequate level of data protection.

An adequate level of protection may be ensured, in particular, by means of:

an adequacy decision of the European Commission pursuant to Article 45 GDPR;
binding corporate rules pursuant to Article 47 in conjunction with Article 46(2)(b) GDPR;
standard contractual clauses pursuant to Article 46(2)(c) and (d) GDPR;
approved codes of conduct pursuant to Article 46(2)(e) in conjunction with Article 40 GDPR;
an approved certification mechanism pursuant to Article 46(2)(f) in conjunction with Article 42 GDPR;
contractual clauses authorized by a supervisory authority pursuant to Article 46(3)(a) GDPR; or
in exceptional cases, a transfer based on the derogations set out in Article 49 GDPR.

V. Your Rights

In principle, you have the following rights:

pursuant to Article 15 GDPR, to request access to your personal data processed by us;
pursuant to Article 16 GDPR, to request the rectification of inaccurate personal data or the completion of incomplete personal data stored by us;
pursuant to Article 17 GDPR, to request the erasure of your personal data stored by us, unless processing is necessary for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
pursuant to Article 18 GDPR, to request the restriction of processing of your personal data where you contest the accuracy of the data, where the processing is unlawful, where we no longer need the data, or where you require the data for the establishment, exercise, or defense of legal claims;
pursuant to Article 20 GDPR, to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and to request its transmission to another controller where technically feasible;
pursuant to Article 7(3) GDPR, to withdraw any consent you have given at any time with effect for the future; and
pursuant to Article 21 GDPR, to object to processing based on legitimate interests, unless we demonstrate compelling legitimate grounds for the processing which overrides your interests, rights, and freedoms, or unless the processing serves the establishment, exercise, or defense of legal claims.

If you believe that the processing of your data violates applicable data protection law, or that your rights under data protection law have otherwise been infringed, you may contact our Legal Counsel for Data Protection at (legaldataprivacy@innio.com), our HR Department or the competent supervisory Data Protection Authority.

The competent supervisory authority in Austria is:

The Austrian Data Protection Authority

Barichgasse 40 – 42

1030 Vienna, Austria

Phone: +43 1 52 152-0

E-mail: dsb@dsb.gv.at

VI. Existence of automated Decision-Making Including Profiling

Automated decision-making or profiling as defined in Art. 22 GDPR does not take place.

VII. Status and Changes to this Privacy Policy

The status of this privacy policy is September 2026.

We reserve the right to change this privacy policy in the future within the framework of applicable data protection laws and, if necessary, to adapt it to changed data processing realities.