Data Privacy Policy for Job Applicants

Data protection information for the application process at Kennametal

I. General

We are pleased that you want to become a part of the Kennametal Group!

As part of the application process, it is necessary that you send us certain personal data that is important for our selection decision. Kennametal attaches great importance to data protection and the protection of your personal data.

This privacy notice explains how your personal data is processed during the application process at Kennametal. It provides information about the controller and the data processed (Section II), the purposes and legal bases of data processing (Section III), the transfer of your data (Section IV), data retention (Section V) and your rights as a data subject (Section (VI).

II. Controller and data processed

The Subsidiaries listed on the footer of www.kennametal.com under Data Privacy Policy and Kennametal Inc. Subsidiaries are responsible for data processing within the meaning of Art. 13 (1) (a) and Art. 4(7) of the EU-General Data Protection Regulation (“GDPR”).

The controller responsible for your specific application is the Kennametal Subsidiary indicated as the company to which you apply. If you submit an unsolicited application, the controller is the subsidiary you indicate as your preferred employer.

The scope of personal data processed depends on the position applied for, the method of application, and the information you choose to provide. In general, we process identification and contact details (such as name and email address), information about your education, qualifications and professional experience, and any application documents you submit. Certain information may be marked as mandatory depending on the role. Voluntary information is clearly indicated as such.

III. Purposes and legal basis of processing

We process your personal data exclusively to be able to carry out the application procedure including any potential communication this requires. The legal basis for data processing is Art. 6 (1) 1 (b) GDPR, according to which the processing of personal data is legal if this is necessary to decide on whether to establish an employment relationship. If we have obtained your consent for data processing, we base our data processing on Art. 6 (1) 1 (a) GDPR. Further, we may process your data if we are subject to a respective legal obligation, Art. 6 (1) 1 c GDPR.

1. Processing of your personal data by using our applicant portal

You can submit your application via our application portal. Our application portal uses current encryption technologies to ensure the secure transmission of your application data. Applications sent to us by postal mail or email are not processed and will be deleted or securely disposed of unread.

Within the application portal of the Kennametal Group, we process your data for your application to a specific position or for an unsolicited application.
For the operation of the applicant portal and the execution of our recruitment processes, Kennametal cooperates with approved external staffing and recruitment service providers. These providers process personal data on behalf of Kennametal and strictly in accordance with our instructions.

All such service providers are contractually bound by adequate data processing agreements and are required to implement appropriate technical and organizational measures to ensure a level of data protection consistent with GDPR requirements.

2. Registration

You can register on the application portal without submitting a concrete application. The following information is required for the creation of your personal applicant account during registration:

• First name
• Last name
• Desired username
• E-mail address
• Password (chosen by you)

With this applicant account, you are able to apply for jobs and manage and update your applications. Please note that you will not be able to register with us if you do not provide all of the data indicated as mandatory. Where we offer the option to provide additional data you will not have to face any disadvantage in regard with a current or future legal relationship with Kennametal if you should not provide such data, provide just a selection of data of your choice or later request to having such data deleted or delete such data yourself from our portal.

For the application procedure, the necessary information and personal details, such as name, address, e-mail address or details of school and professional background, are collected. You can also upload individual application documents (e.g. cover letter, CV, certificates) to the application portal. The information provided and the documents uploaded are stored in our job portal. Your e-mail address is required, as we do not use postal communication for applications via the application portal.

In order to submit your application, it is necessary that you create an applicant account so that we can inform you about the status of processing and contact you.

You can also cancel your application via the account and, depending on the status of processing, add to and change your application.

The processing of your data via the application portal is necessary for carrying out the application process. Where specific processing activities require your consent, we will obtain this separately. If you indicate a general interest in employment within the Kennametal Group, your data may be accessible to recruiters within the Group involved in current staffing processes, in order to identify suitable opportunities.

3. Job advertisement (direct application)

If you apply for an advertised position via the applicant portal, your data can only be viewed and processed by the responsible employees of the personnel department and the employees responsible for the advertising specialist department. Please note that also in this case, we may request some data on a mandatory basis, which will be indicated accordingly. As with any registration on our job portal, please be advised that we may not be able to process your data if you do not provide the full set of mandatory data, but that you will not have to face any adverse effect if you just provide that data.

4. Unsolicited application

With an unsolicited application via our applicant portal, you provide us with your personal data for the purpose of finding a suitable position. Your data can be then viewed by the HR department and by the employees of the relevant departments involved in the application process in order to check your profile for suitable job offers. This means your data will be accessible to all recruiters within Kennametal Group as described in section 3 of this paragraph.

5. Simultaneous application in several companies of the Kennametal Group

In cases you apply for several positions at the same time at several companies of the Kennametal Group, your application documents will be forwarded to the personnel departments of the respective companies, who each will be a controller of its own. This has no effect on current application procedures and no effect on your rights as a data subject. However, we encourage you to mention the concrete company you have applied to in case you want to exercise your rights as a data subject in a single case as this may speed up the process.

IV. Transfer of your data

Access to your personal data is limited to those persons and departments involved in the recruitment process, such as HR staff, hiring managers and relevant internal stakeholders.

To support and operate our recruitment processes, Kennametal engages approved staffing providers, recruitment service providers and recruitment technology providers. These parties may receive access to your personal application data solely for the purposes of supporting the recruitment process and only to the extent necessary.

Such providers may, in particular:

• operate and maintain the applicant tracking system and recruitment platforms,
• support candidate sourcing activities,
• assist in matching applicant profiles with job requirements, and
• provide analytical or technical tools to support a fair and efficient recruitment process.

All external providers process personal data exclusively on our behalf, are subject to confidentiality obligations, and are contractually required to comply with applicable data protection laws.

Beyond approved staffing, recruitment service and recruitment technology providers as described above, your application data will not be disclosed to third parties. Your personal application data will not be transferred to other companies of the Kennametal Group or used for other job opportunities without your prior expressed consent, except in the case of unsolicited applications that are not limited to a specific Group company. In such cases, your application data may be shared within the Kennametal Group where appropriate in relation to vacant positions, your qualifications and stated interest.

During the application process, it might be necessary to transfer your data to recipients in countries outside the European Union ("EU") and the European Economic Area ("EEA") – whenever you apply with a Kennametal Group Subsidiary that is located outside this area and in cases of unsolicited applications that are received without a concrete indication on which of our companies it concerns. In these cases, we use EU-Standard-Contractual Clauses with our contractual partners and affiliated companies to ensure that an adequate level of data protection is guaranteed for your data. Such contracts are also concluded within Kennametal Group.

V. Data retention

Your provided information and applicant documents during the application procedure will be deleted based upon country specific legal requirements after completion of the application process. As a rule, your data therefore is deleted as soon as the underlying application process ends – where we reserve the right to keep the data for a subsequent period as defined by local law and for purposes of defending or implementing legal claims.

You have the right to view, manage and update all of your personal data stored in the applicant portal at any time. This option leaves your rights as a data subject under the data protection law applying unaffected.

The period of use of the account is regularly six months. Before the six months expire, you must agree to extend the period of use. In the event of approval, the period of use is extended by further six months. If you do not agree, your account will be deleted automatically.

If a current application is in progress at the end of the period of use, the period of use will be extended until this application is completed.

VI. Your rights

As a data subject and under the conditions of applicable data protection law, you are entitled to the right of data access including the right to request a copy of the data we have about you, the right to data rectification, the right to have your data deleted (`right to be forgotten´), the right to have the processing of your data restricted, the right to object against any processing of your data, the right to data portability, the right to withdraw any consent you have provided in regard of a data processing and the right not to be subject to a fully automated decision with legal effect on you (such decisions, however, are not taken as all respective decisions at Kennametal are finally taken by humans).

To exercise the rights, you may contact us via dataprotection@kennametal.com.

Concerning the right to object against data processing, please consider that this right is available whenever we are processing your data on the basis of our legitimate interest. In such cases, you may object to processing at any time and for reasons originating from your particular situation. We will then cease processing your personal data unless we can demonstrate compelling legitimate reasons for processing that are outweighing your interests, rights and freedoms and in cases processing that data is required to implement or defend legal claims.

Concerning your right to withdraw your consent in data processing, please be informed that you may revoke such consent any time, without having to name reasons, without having to be bound by any formal requirement and with immediate effect for the future. Withdrawal of consent will leave any previous and legitimate processing based on such consent unaffected.

It is important to us to comply with all laws and provisions regarding your data. However, if you believe that by using your data we are in breach of the General Data Protection Regulation, you have the right to lodge a complaint with a supervisory authority at the location of your (permanent) residence, our business or the location of the alleged violation of your rights.

VII. Contact details

If you have any questions about our data protection and data privacy during the application process or if you like to execute your data subject rights, please send your request or inquiry -preferably to the following email address:
dataprotection@kennametal.com

VIII. General data protection information

Please also refer to our general data protection information available on the footer of www.kennametal.com under Data Privacy Policy.