US Applicant Privacy Notice

This Privacy Notice and Notice at Collection (“Privacy Notice” or “Notice”) explains what personal information INNIO Legal Entities in the US¹ (“INNIO Group,” “we,” “us,” or “our”), collects and uses about job applicants and candidates for employment (“you”), why we collect it, how we use and share it, and the rights you may have relating to your personal information under the California Consumer Privacy Act of 2018, as amended from time to time, and its implementing regulations (collectively, the “CCPA”).

Job applicants with disabilities may access this Notice in an alternative format by contacting +1 888 268 3320. Certain terms used in this Privacy Notice have the meanings given to them in the CCPA. Certain terms used in this Privacy Notice have the meanings given to them in the California Consumer Privacy Act of 2018 (“CCPA”).

1. What Personal Information Do We Process?

Depending on your interactions with us, we may not have collected each of these categories of personal information about you. However, we may collect (and may have collected during the 12-month period prior to the effective date of this Privacy Notice) the following categories of personal information about job applicants:

1. 1. Identifiers and Contact Information, such as your name, alias, postal address, telephone number, email address, Social Security number, driver’s license or other government ID, passport number, and online identifiers (e.g., IP address, login credentials used in connection with our careers portal).
2. 2. Categories of Personal Information Described in Cal. Civ. Code § 1798.80(e), such as signature, insurance policy number, physical characteristics or description, and medical information (for example, information you choose to provide in connection with workplace accommodation requests).
3. 3. Demographic and Protected Classifications, such as gender, sex, race, age (40+), ethnic origin, religion, marital status, sexual orientation, disability status, medical conditions, citizenship, nationality, and veteran or military status (to the extent you provide this information voluntarily or as permitted/required by law).
4. 4. Professional, Employment, and Education Information, such as details in your résumé, cover letter, references, job application materials, desired position, available start date, desired compensation and availability, immigration or work authorization status, relationship with the company or its current/former employees, work history (including job titles, duties, dates of employment, skills, and experience), health, safety and environmental training, certifications, licenses, assessment results (including score or outputs generated using automated assessment tools), language proficiencies, professional memberships, honors or awards, internships, and education records.
5. 5. Electronic and Technical Information, such as login credentials for our applicant systems, browsing activity on our careers website, device and connectivity information used to access our online platforms, and technical information related to remote video interviews (e.g., IP address, device type, browser, or meeting log data). This may include transcripts or summaries generated by video interview platforms.
6. 6. Geolocation Data, such as the time and approximate location associated with accessing our online applicant systems or visiting our offices for interviews.
7. 7. Sensory or Surveillance Information, such as video footage from security cameras when visiting our offices, recordings, or transcripts of virtual interviews (including transcriptions generated by platforms such as Microsoft Teams or similar services), or health and safety screening information (e.g., temperature checks, if applicable).
8. 8. Inferences and Profiles – such as information derived from other personal information to assess qualifications, preferences, aptitudes, or likely interests relevant to recruitment (including match indicators generated by the résumé matching tool and automated skills testing software described in Sections 8 and 9).
9. 9. Voluntary Information You Provide, such as hobbies, interests, career goals, or other personal details you choose to share that go beyond application requirements.

We do not collect or process “sensitive personal information” (as defined under the CCPA) for the purpose of inferring characteristics about you.

By providing us with personal information, you agree that you are authorized to provide us with such information. Where the information you are providing pertains to someone else (such as a job applicant reference), you acknowledge that you are required to inform them of the contents of this Privacy Notice.

2. How Do We Collect Your Personal Information?

During the 12-month period prior to the effective date of this Privacy Notice, we may have collected or received personal information:

• Directly from you, for example, when you submit an application, résumé, cover letter, or other materials; participate in interviews or assessments; or communicate with us about opportunities.
• From third party sources, such as information provided by professional references, recruitment agencies, background check providers, or otherwise publicly available information (such as professional networking sites, publicly available databases, or job boards);
• Automatically and indirectly from you, such as through logging and analytics tools, cookies, pixel tags, and other technologies on our careers website and applicant tracking systems, or through technical information generated during remote video interviews; and
• From third parties, such as job applicant references and our service providers and business partners involved in our employment, benefits, and retention processes.

3. For What Purposes Do We Process Your Personal Information?

We may use (and may have used during the 12-month period prior to the effective date of this Notice) job applicants ‘personal information for the purposes of carrying out and supporting recruitment and hiring activities, including the uses described below.

• Recruitment and Hiring, such as receiving, reviewing, and processing applications; assessing qualifications and fit for a position (including through the résumé matching tool and automated skills testing software described in Sections 8 and 9); scheduling and conducting interviews (including remote/virtual interviews); administering skills, aptitude, or personality assessments; and making hiring decisions.
• Background Checks and Eligibility to Work, such as conducting reference checks, verifying employment or education history, confirming work authorization or immigration status, and performing background checks as permitted by law.
• Communication, such as corresponding with you about your application, scheduling interviews, providing status updates, and maintaining a talent pool for future opportunities.
• Equal Opportunity and Fair Hiring Practices, such as collecting and reporting demographic data where permitted or required by law to ensure nondiscrimination, monitor representation, and support fair and inclusive recruitment processes.
• Immigration and Work Authorization, such as verifying eligibility to work and complying with immigration and visa requirements.
• Compensation Benchmarking, such as considering salary expectations and comparing them with internal ranges to inform hiring decisions.
• Health, Safety, and Security, such as ensuring a safe interview process, complying with health and safety protocols, securing physical offices and IT systems, and preventing fraud or unauthorized access to our applicant platforms.
• Business Planning and Management, such as evaluating recruitment strategies, tracking candidate sourcing channels, forecasting workforce needs, and conducting analytics to improve our recruiting process.
• Legal and Compliance, such as complying with immigration, labor, and employment laws; responding to lawful requests from regulators or law enforcement; defending against legal claims; and complying with recordkeeping and reporting obligations.
• Interview Documentation, such as recording, transcribing, or summarizing interviews (whether virtual or in person) to evaluate candidates and maintain a record of the recruitment process.
• Talent Pools and Job Alerts, such as maintaining applicant databases, creating candidate pipelines, or providing job alerts or similar notifications if you choose to sign up.
• Quality, Improvement, and Innovation, such as monitoring the performance of applicant systems, identifying errors, and improving candidate experience and hiring technology. This may include collecting candidate feedback on the application or interview process.

4. Disclosures of Personal Information for a Business Purpose

We do not:

• Sell your personal information;
• Share or disclose your personal information for cross-context behavioral advertising;
• Use your sensitive personal information for purposes other than those allowed by the CCPA as set out in Cal. Code Regs. tit. 11 § 7027(m); or
• Sell or share the personal information of individuals under 16 years of age as those terms are defined under the CCPA.

We generally disclose, and in the preceding 12 months we may have disclosed, the categories of personal information listed above to the following categories of entities for business purposes:

• Service providers supporting our recruitment process, including:
  • Applicant tracking system (ATS) and recruiting platforms (to receive, process, and manage applications);
  • Background check and identity verification providers (to verify employment history, education, or eligibility to work);
  • Video interview, transcription, and assessment platforms (e.g., Microsoft Teams, automated scheduling tools, skills testing providers);
  • Recruitment partners such as external recruiters, search firms, and job boards engaged to identify or evaluate candidates;
  • IT hosting and support providers (for secure storage of applicant data); and
  • Professional advisors such as outside legal counsel, auditors, or consultants assisting with recruiting, compliance, or dispute resolution.
• Regulatory and legal authorities, such as government agencies, courts, or law enforcement, in response to subpoenas, lawful requests, immigration/work authorization requirements, or other legal obligations.
• Corporate transaction participants, such as potential buyers, investors, or other counterparties (and their advisors) in connection with a proposed merger, acquisition, reorganization, or sale of some or all of our business or assets.

5. Retention & Deletion Period

We retain applicant personal information for as long as necessary to carry out the processing activities described in this Privacy Notice and as required or permitted by applicable law. In general, we retain applicant records for a minimum of five years after recruitment process, or longer as needed to comply with applicable state law, or in response to your consent to be considered for future opportunities, as described in Section 5A below. If you are hired, your application materials and related records will be incorporated into your personnel file and retained for the duration of your employment plus seven years, unless a longer retention period is required by applicable law or company policy. If a charge, complaint, audit, or actual or reasonably anticipated legal claim arises relating to your application, we will retain relevant records until final disposition of that matter, regardless of any other period stated in this Notice.

We may retain personal information for longer periods in specific circumstances, including:

• Where legal, regulatory, or immigration/work authorization obligations require us to keep records;
• Where records must be retained for equal opportunity reporting, audit, or compliance purposes;
• Where applicant information is relevant to potential or ongoing legal claims or disputes; or
• We may retain your information beyond the five-year period stated above for consideration for future opportunities, including as part of our Talent Community described in Section 5A below, only if you have separately and affirmatively opted in to that extended retention. You may withdraw that consent, or request to be omitted from future consideration, at any time as described in Section 5A.

If interviews are recorded, transcribed, or summarized, these materials may be retained in our recruitment management system for as long as necessary to evaluate your candidacy and to comply with recordkeeping obligations. Candidate feedback surveys, if collected, are anonymized as soon as practicable.

We determine our retention and deletion periods according to the following characteristics:

• The scope, nature, and sensitivity of personal information;
• The risk of harm from unauthorized use or disclosure;
• The purposes for which the information was collected and how long it is needed for those purposes;
• The period during which the information may remain accurate and relevant;
• Applicable legal, accounting, reporting, or regulatory requirements; and
• The potential need to retain records for legal claims or compliance audits.

When applicant information is no longer needed for the purposes described above, it will be securely deleted or anonymized in accordance with our records retention policies.

Please contact our Lead Counsel for Data Privacy (legaldataprivacy@innio.com) for more information.

6. Talent Community and Extended Retention by Consent

If you are not selected for a position, we would like the option to consider you for future opportunities with INNIO Group beyond our standard retention periods described in Section 5 above (our “Talent Community”). We will only do this with your consent.

Requesting your consent. If you wish to join our Talent Community, we will ask you to take a separate, affirmative action – such as checking an unchecked box or clicking a clearly labeled button.

Renewal. Talent Community consent is not indefinite. Approximately every twelve (12) to twenty-four (24) months, we will ask you to reconfirm your interest in remaining in the Talent Community. If we do not receive a reconfirmation, or if you do not respond, we will remove you from the Talent Community and your information will be handled in accordance with the standard retention periods in Section 5 (including deletion where no other retention basis applies).

Withdrawing consent. You may withdraw your Talent Community consent at any time, free of charge, by contacting us at legaldataprivacy@innio.com. Withdrawal will not affect the lawfulness of any processing carried out before you withdrew and will not affect any current application you have submitted. Once you withdraw, we will retain your information in accordance with the standard retention periods in Section 5.

Limitations. Talent Community consent is a basis for extended retention only; it does not change or extend our retention of records that are subject to a legal hold, or to any other retention obligation described in Section 5, which will continue to apply on their own terms regardless of your Talent Community status. We do not condition consideration of your current application, or any employment decision, on whether you join the Talent Community.

7. Rights for California Residents

The CCPA provides California residents with specific rights regarding their personal information. This section describes those rights and explains how to exercise them. This section applies only to residents of California.

• Know and Access: California residents have the right to request, twice in a 12-month period, that we disclose the personal information we have collected about them, including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom we disclose personal information, and the specific pieces of personal information we have collected about them.
• Correction: California residents have the right to request that we correct the personal information we maintain about them, if that information is inaccurate.
• Deletion: California residents have the right to request that we delete certain personal information we have collected about them, subject to certain exceptions.
• Portability: California residents have the right of portability, or the right to have us transfer their personal information to other persons or entities upon their request.
• Automated Tools Used in Recruiting: We use certain automated tools to help our recruiters review applications, as described in Sections 8 and 9 below. Our recruiters and hiring managers, not those tools, make the decisions about a candidate’s application. We therefore do not use these tools as “automated decisionmaking technology” to make significant decisions within the meaning of the CCPA regulations. To learn more about our use of automated decision-making technologies, please see Section 8, below.
• Non-Discrimination: California residents have the right to not be discriminated against for exercising their privacy rights.

California residents can exercise their privacy rights by submitting a request to us at legaldataprivacy@innio.com or calling us toll-free at +1 888 268 3320.

We will verify the identity of California residents before fulfilling requests to access, correct, or delete personal information, or requests to access ADMT. Authorized agents may submit requests on behalf of California residents if they provide proof of authorization, and we may also require the individual to verify their identity directly. We will respond to requests as required by applicable law. We may deny a request if we cannot verify identity or if the law otherwise permits.

8. Automated Screening Tool

As part of our recruitment process, we use an artificial intelligence-supported matching tool, Talent Fit, to help us process incoming applications more efficiently and identify suitable candidates.

Talent Fit uses the skills, certifications, licenses, and professional experience listed in an applicant’s resume and compares them with the job description for the role to which the applicant has applied. On this basis, the system generates an initial general assessment of the degree of match between the applicant’s profile and the relevant position. As part of this process, the tool processes only the application documents and the relevant job description.

This assessment serves solely to support recruiters in reviewing and prioritizing applications. The results generated by the system are reviewed by our personnel and used only as a decision-support tool. The final decision as to whether a candidate is invited to an interview or offered employment is made exclusively by our HR staff and is not based on fully automated decision-making.

If you have questions about our application screening process, or if you require a reasonable accommodation during the application process due to a disability, please contact our recruitment team at careers@innio.com.

9. Automated Skills Testing

In some instances, we may use automated skills testing, which could be considered an automated decision-making technology (“ADMT”) under certain laws, in connection with our recruiting process. Specifically, we may use software that administers practical, job-related exercises during the interview process, analyzes your responses, and generates a score of your answers. We use this score, together with other information gathered during the recruitment process, to evaluate your qualifications for your desired position. The results of this testing are never the sole basis for a decision about your candidacy. For more information about our use of automated skills testing software, please review our Automated Skills Testing Notice.

10. Changes to this Notice

We may update this Notice to reflect the changes in our privacy practices at any time and without prior notice to you. When we do so, we will update the Effective Date above. We encourage you to periodically review this Notice for the latest information on our privacy practices.

11. Contact

If you have any questions or concerns regarding this Privacy Notice or our collection of your personal information, please contact legaldataprivacy@innio.com

The status of this privacy policy is September 2026.

We reserve the right to change this privacy policy in the future within the framework of applicable data protection laws and, if necessary, to adapt it to changed data processing realities.