ok, in my comments I glossed over the fact that you specifically argued about the interview notes a bit, which maybe are not as clear as other data points. But

ok, in my comments I glossed over the fact that you specifically argued about the interview notes a bit, which maybe are not as clear as other data points. But that on the other hand that applicant data is personal data that falls under GDPR and that applicants can request their data is quite obvious, and that notes contain "personal data" about a person is also established, so you'd really need a specific argument why they don't fall under the access request requirement. At least in the German case law I've seen, it's by now established that internal notes etc about a person also count specifically for the data access request - a prominent case was someone suing their insurance company for all internal records.