Privacy Policy

We take the protection of your personal data very seriously and would therefore like to inform you about how we collect, process, pass on and use your personal data. The processing of your personal data is carried out exclusively in accordance with the General Data Protection Regulation (hereinafter "GDPR") and other data protection laws that apply.

In this privacy policy, we set out, among other things, what personal data we process about you in connection with the use of our Customer Portal and communication with customers in connection with the ordering of spare sparts, how long we keep this data and what rights you have. If you have any questions, this Privacy Policy also contains information on how to contact us.

I. Name and contact details of the controller

The controller within the meaning of the GDPR is

INNIO Jenbacher GmbH & Co OG.,
Achenseestrasse 1-3,
A-6200 Jenbach.

You can contact us by email at webportal@innio.com

For questions regarding the ordering of spare parts, please contact us by email at TS.Germany@innio.com

II. Name and contact details of the data protection officer

Our data protection officer is

RA Dr. Karsten Kinast, LLM.,
Nordstraße 17a
D-50733 Köln

You can contact our data protection officer at the e-mail: DPO-INNIO@kinast.eu.

III. Categories of personal data processed

In connection with the use of our Customer Portal and communication with customers in connection with the ordering of spare parts, we process the following personal data, among others:

  • Contact data (First and last name, (business/institution) email address, phone number, address)
  • Relationship Type (Customer, Vendor, Distributor/Solution Provider, Other)
  • Company information (company name, company address, preferred language (German/English)
  • Newsletter preferences (sales, service, documentation)
  • Access level
  • Dates (Registration, last access, last modification)
  • Certifications issued by INNIO Jenbacher

We would like to point out that you are not obliged to provide us with your personal data. However, if you do not want to provide us with your data or object to the collection of certain data, you may not be able to use the customer portal in full.

IV. Processing of personal data

1. Registration on the customer portal

a. Scope and purpose of the processing

You can register on our website on the customer portal to gain access to information. We collect and use personal information when you register on the Customer Portal. This data is required to create your own user account and to enable access to the relevant information on the Customer Portal.

The registration includes the following personal data:

  • Relationship Type (Customer, Vendor, Distributor/Solution Provider, Other)
  • Last and First Name
  • (Business/Institution) Email address
  • Company

b. Legal basis

The processing of the registration data is carried out on the basis of our legitimate interest, Art. 6 (1) (f) GDPR, in order to enable the registration and management of user accounts.

c. Storage period

User data will be automatically deleted no later than three years after the last login to the portal.

2. Classification of individual users into categories

a. Scope and purpose of processing

After registration, individual users are assigned to different categories, which determines what content they can view on the portal. The purpose of this distinction is to ensure that different users can access the content on the portal that is relevant to them and that no internal confidential information is accessible to the wrong recipients. This assignment is made according to pre-defined criteria. Automated decision-making does not take place.

The following personal data is processed for classification purposes:

  • Relationship Type (Customer, Vendor, Distributor/Solution Provider, Other)
  • Company

b. Legal basis

The legal basis for classifying users of the customer portal into different categories and for processing the aforementioned data is our legitimate interest under Art. 6(1)(f) GDPR to provide users with information relevant to them and to grant them access without disclosing internal confidential information.

c. Storage Period

The storage period for the personal data listed above depends on the duration of the registration in the customer portal and the duration of the business relationship. However, the data will be deleted as soon as the purpose for storing it no longer applies or longer storage is not required by law.

3. Ordering spare parts

a. Scope and purpose of processing

INNIO provides various contact options to enable its customers to order spare parts for the engines they use, ensuring that the reorder process is as simple and quick as possible. Reorders can be placed via email, WhatsApp, phone, or mail.

To assign and process the requested reorder, the following personal data is processed:

  • Contact data (name, email address, phone number, address)
  • Engine number
  • Company

b. Legal basis

The legal basis for contact and processing of the above-mentioned data is our legitimate interest, pursuant to Art. 6(1)(f) GDPR, in providing you with the opportunity to reorder spare parts and in being able to process your order quickly.

c. Storage period

The deletion of the personal data collected when contacting us to reorder spare parts depends on the specific inquiry and the duration of the customer relationship. However, the personal data will be deleted as soon as the purpose of storing the data has been fulfilled or longer storage is not required by law.

V. Recipients of the data & transfer to third countries

Within INNIO, only people who need it to perform the tasks assigned to them have access to your data. In addition, service providers who help us perform our tasks may have access to your data. These are service providers in the following categories:

  • IT service provider,
  • Telecommunications (e.g., SMS-Provider, WhatsApp, AnywhereNow)
  • Customer Relationship Management

Web analytics service provider (Matomo, self-hosted on our behalf within the European Union) These service providers process personal data exclusively on behalf of INNIO and are obliged to comply with applicable data protection laws. All processors have been carefully selected and will only have access to your personal data to the extent and for the period necessary to provide the service or for which you have authorised the processing and use of your personal data.

INNIO may also transfer personal data to public authorities if required to do so by law.

In certain cases, personal data is transferred to data recipients outside the European Economic Area. Such transfers are made on the basis of so-called adequacy decisions of the European Commission pursuant to Art. 45 GDPR or appropriate safeguards pursuant to Art. 46 GDPR, such as on the basis of standard contractual clauses of the European Union, in order to ensure an adequate level of data protection with regard to the processing of your personal data. It is also ensured that your personal data is protected by appropriate technical and organisational measures.

VI. Tracking- and Analytics tools

1. Matomo

We use Matomo, a self-hosted open-source web analytics tool operated within the European Union, on our customer portal website in order to continuously improve and further develop our platform. Matomo uses cookie-like technologies that are stored on your device and help us understand how our platform is used. Matomo is configured in a privacy-friendly way, in particular with IP-address anonymisation, no cross-site tracking, no persistent user ID and no sharing of data with third parties. We process your personal data for the purpose of improving and ensuring the compatibility of our platform. We do not use your personal data for advertising or other commercial purposes.

Specifically, these purposes include the following:

  • Platform compatibility: to ensure that we understand and support our users’ languages, operating systems, and screen sizes.
  • Analytics: serves to better understand the use of our platform through statistical surveys and thereby continuously improve it

The legal basis for this processing is our legitimate interest in analysing and improving our platform pursuant to Art. 6(1)(f) GDPR. You have the right to object to this processing at any time with effect for the future pursuant to Art. 21 GDPR. You can opt out of Matomo tracking at any time via the opt-out option provided on our Terms & Conditions page. We store the data collected via Matomo for a maximum of two years (730 days) from the date of collection.

VII. Rights of data subjects

You have the following rights:

  • In accordance with Art. 15 GDPR, you can request information about your personal data processed by us.
  • In accordance with Art. 16 GDPR, you can request the immediate correction of inaccurate data, or the completion of your personal data stored by us.
  • In accordance with Art. 17 GDPR, you can request the deletion of your personal data stored by us, unless the processing is necessary for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise, or defence of legal claims.
  • In accordance with Art. 18 GDPR, you can request the restriction of the processing of your personal data if you contest the accuracy of the data, if the processing is unlawful, if we do not need the data and if you oppose the deletion of the data because it is necessary for the establishment, exercise or defence of legal claims.
  • In accordance with Art. 20 GDPR, you can request that the personal data you have provided to us be received in a structured, commonly used and machine-readable format, you can also request that it be transmitted to another controller.
  • If you have given us your consent, you have the right to withdraw it, in accordance with Art. 7 para. 3 GDPR.
  • In addition, you have a right to object under Art. 21 GDPR, which can also be declared against data processing that is lawful. We will no longer process your personal data unless there are compelling legitimate grounds for the processing.

If you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way, you can contact our Legal Counsel for Data Protection legaldataprivacy@innio.com or our Data Protection Officer DPO-INNIO@kinast.eu or to the competent data protection authority (The Austrian Data Protection Authority, address Barichgasse 40 - 42, 1030 Vienna, Tel: +43 1 52 152-0, E-mail: dsb@dsb.gv.at).

VIII. Automated decision-making

Automated decision-making does not take place in connection with the processing of your personal data.

IX. Changes to the Privacy Policy

This Privacy Policy may be updated periodically and without notice to reflect changes in our information practices. We will indicate at the end of this Privacy Policy when it was last updated.

This Privacy Policy was last updated on July 15, 2026.