Common use of Consent to Collection, Processing and Transfer of Personal Data Clause in Contracts

Consent to Collection, Processing and Transfer of Personal Data. Pursuant to applicable personal data protection laws, the Company hereby notifies the Grantee of the following in relation to the Grantee’s personal data and the collection, processing and transfer of such data in relation to the Company’s grant of this Award and the Grantee’s participation in the Plan. The collection, processing and transfer of the Grantee’s personal data is necessary for the Company’s administration of the Plan and the Grantee’s participation in the Plan. The Grantee’s denial and/or objection to the collection, processing and transfer of personal data may affect the Grantee’s participation in the Plan. As such, the Grantee voluntarily acknowledges and consents (where required under applicable law) to the collection, use, processing and transfer of personal data as described in this paragraph. The Company and the Employer hold certain personal information about the Grantee, including name, home address and telephone number, date of birth, social security number or other employee identification number, salary, nationality, job title, any Shares or directorships held in the Company, details of all Awards or any other entitlement to Shares awarded, canceled, purchased, vested, unvested or outstanding in Grantee’s favor, for the purpose of managing and administering the Plan (“Data”). The Data may be provided by the Grantee or collected, where lawful, from third parties, and the Company will process the Data for the exclusive purpose of implementing, administering and managing the Grantee’s participation in the Plan. The Data processing will take place through electronic and non-electronic means according to logics and procedures strictly correlated to the purposes for which Data are collected and with confidentiality and security provisions as set forth by applicable laws and regulations in the Grantee’s country of residence. Data processing operations will be performed minimizing the use of personal and identification data when such operations are unnecessary for the processing purposes sought. Data will be accessible within the Company’s organization only by those persons requiring access for purposes of the implementation, administration and operation of the Plan and for the Grantee’s participation in the Plan. The Company and the Employer will transfer Data amongst themselves as necessary for the purpose of implementation, administration and management of the Grantee’s participation in the Plan, and the Company and the Employer may each further transfer Data to any third parties assisting the Company in the implementation, administration and management of the Plan. These recipients may be located in the European Economic Area, or elsewhere throughout the world, such as the United States. The Grantee hereby authorizes (where required under applicable law) them to receive, possess, use, retain and transfer the Data, in electronic or other form, for purposes of implementing, administering and managing the Grantee’s participation in the Plan, including any requisite transfer of such Data as may be required for the administration of the Plan and/or the subsequent holding of Shares on the Grantee’s behalf to a broker or other third party with whom the Grantee may elect to deposit any Shares acquired pursuant to the Plan. The Grantee may, at any time, exercise his or her rights provided under applicable personal data protection laws, which may include the right to (a) obtain confirmation as to the existence of the Data, (b) verify the content, origin and accuracy of the Data, (c) request the integration, update, amendment, deletion, or blockage (for breach of applicable laws) of the Data, and (d) to oppose, for legal reasons, the collection, processing or transfer of the Data which is not necessary or required for the implementation, administration and/or operation of the Plan and the Grantee’s participation in the Plan. The Grantee may seek to exercise these rights by contacting the Grantee’s local human resources manager.

Consent to Collection, Processing and Transfer of Personal Data. (a) Pursuant to applicable personal data protection laws, the Company and the Employer (if different) hereby notifies notify the Grantee Optionee of the following in relation to the Grantee’s Optionee's personal data and the collection, processing and transfer of such data in relation to the Company’s grant of this Award Option and the Grantee’s Optionee's participation in the Plan. The collection, processing and transfer of the Grantee’s Optionee's personal data is are necessary for the Company’s administration of the Plan and the Grantee’s Optionee's participation in the Plan. The Grantee’s Optionee's denial and/or objection to the collection, processing and transfer of personal data may affect the Grantee’s Optionee's participation in the Plan. As such, the Grantee The Optionee voluntarily acknowledges and consents (where required under applicable law) to the collection, use, processing and transfer of personal data as described in this paragraph. herein. (b) The Company and the Employer (if different) hold certain personal information about the GranteeOptionee, including the Optionee's name, home address and telephone number, date of birth, social security number or other employee identification number, salary, nationality, job title, any Shares or directorships held in the Company, details of all Awards awards or any other entitlement to Shares awarded, canceled, purchased, vested, unvested or outstanding in Grantee’s the Optionee's favor, for the purpose of managing and administering the Plan (“Data”). The Data may be provided by the Grantee Optionee or collected, where lawful, from third parties, and the Company and Employer (if different) will process the Data for the exclusive purpose of implementing, administering and managing the Grantee’s Optionee's participation in the Plan. The Data processing will take place through electronic and non-electronic means according to logics and procedures strictly correlated to the purposes for which Data are collected and with confidentiality and security provisions as set forth by applicable laws and regulations in the Grantee’s Optionee's country of residence. Data processing operations will be performed minimizing the use of personal and identification data when such operations are unnecessary for the processing purposes sought. Data will be accessible within the Company’s organization only by those persons requiring access for purposes of the implementation, administration and operation of the Plan and for the Grantee’s Optionee's participation in the Plan. . (c) The Company and the Employer (if different) will transfer Data amongst themselves as necessary for the purpose of implementation, administration and management of the Grantee’s Optionee's participation in the Plan, and the Company and the Employer may each further transfer Data to any third parties assisting the Company in the implementation, administration and management of the Plan. These recipients may be located in the European Economic Area, or elsewhere throughout the world, such as the United States. The Grantee Optionee hereby authorizes (where required under applicable law) them to receive, possess, use, retain and transfer the Data, in electronic or other form, for purposes of implementing, administering and managing the Grantee’s Optionee's participation in the Plan, including any requisite transfer of such Data as may be required for the administration of the Plan and/or the subsequent holding of Shares on the Grantee’s Optionee's behalf to a broker or other third party with whom the Grantee Optionee may elect to deposit any Shares acquired pursuant to the Plan. . (d) The Grantee Optionee may, at any time, exercise his or her rights provided under applicable personal data protection laws, which may include the right to (ai) obtain confirmation as to the existence of the Data, (bii) verify the content, origin and accuracy of the Data, (ciii) request the integration, update, amendment, deletion, or blockage (for breach of applicable laws) of the Data, and (div) to oppose, for legal reasons, the collection, processing or transfer of the Data which is not necessary or required for the implementation, administration and/or operation of the Plan and the Grantee’s Optionee's participation in the Plan. The Grantee Optionee may seek to exercise these rights by contacting the GranteeCompany’s local human resources managerCorporate Secretary’s Department.

Consent to Collection, Processing and Transfer of Personal Data. Pursuant to applicable personal data protection laws, the Company hereby notifies the Grantee of the following in relation to the Grantee’s personal data and the collection, processing and transfer of such data in relation to the Company’s grant of this Award and the Grantee’s participation in the Plan. The collection, processing and transfer of the Grantee’s personal data is necessary for the Company’s administration of the Plan and the Grantee’s participation in the Plan. The Grantee’s denial and/or objection to the collection, processing and transfer of personal data may affect the Grantee’s participation in the Plan. As such, the Grantee voluntarily explicitly and unambiguously acknowledges and consents (where required under applicable law) to the collection, use, processing and transfer of personal data as described in this paragraphAgreement and any other Award grant materials by and among, as applicable, the Company, its Subsidiaries and/or the Grantee's employer for the purpose of implementing, administering and managing the Grantee's participation in the Plan. The Company and the Employer hold certain personal information about the Grantee, including name, home address and telephone number, date of birth, social security number or other employee identification number, salary, nationality, job title, any Shares or directorships held in the Company, details of all Awards or any other entitlement to Shares awarded, canceled, purchased, vested, unvested or outstanding in Grantee’s favor, for the purpose of managing and administering the Plan (“Data”). The Data may be provided by the Grantee or collected, where lawful, from third parties, and the Company will process the Data for the exclusive purpose of implementing, administering and managing the Grantee’s participation in the Plan. The Data processing will take place through electronic and non-electronic means according to logics and procedures strictly correlated to the purposes for which Data are collected and with confidentiality and security provisions as set forth by applicable laws and regulations in the Grantee’s country of residence. Data processing operations will be performed minimizing the use of personal and identification data when such operations are unnecessary for the processing purposes sought. Data will be accessible within the Company’s organization only by those persons requiring access for purposes of the implementation, administration and operation of the Plan and for the Grantee’s participation in the Plan. The Company and the Employer will transfer Data amongst themselves as necessary for the purpose of implementation, administration and management of the Grantee’s participation in the Plan, and the Company and the Employer may each further transfer Data to any third parties assisting the Company in the implementation, administration and management of the Plan. These recipients may be located in the European Economic Area, or elsewhere throughout the world, such as the United States. The Grantee hereby authorizes (where required under applicable law) them to receive, possess, use, retain and transfer the Data, in electronic or other form, for purposes of implementing, administering and managing the Grantee’s participation in the Plan, including any requisite transfer of such Data as may be required for the administration of the Plan and/or the subsequent holding of Shares on the Grantee’s behalf to a broker or other third party with whom the Grantee may elect to deposit any Shares acquired pursuant to the Plan. The Grantee may, at any time, exercise his or her rights provided under applicable personal data protection laws, which may include the right to (a) obtain confirmation as to the existence of the Data, (b) verify the content, origin and accuracy of the Data, (c) request the integration, update, amendment, deletion, or blockage (for breach of applicable laws) of the Data, and (d) to oppose, for legal reasons, the collection, processing or transfer of the Data which is not necessary or required for the implementation, administration and/or operation of the Plan and the Grantee’s participation in the Plan. The Grantee may seek to exercise these rights by contacting the Grantee’s local human resources manager.. 

Consent to Collection, Processing and Transfer of Personal Data. Pursuant to applicable personal data protection laws, the Company and Rockstar hereby notifies notify the Grantee Participant of the following in relation to the GranteeParticipant’s personal data and the collection, processing and transfer of such data in relation to the Company’s grant of this Award and the Grantee’s participation in the PlanRestricted Units. The collection, processing and transfer of the GranteeParticipant’s personal data is are necessary for the Company’s administration of the Plan and the Grantee’s participation in the PlanRestricted Units. The GranteeParticipant’s denial and/or objection to the collection, processing and transfer of personal data may affect the GranteeParticipant’s participation in ability to receive the PlanRestricted Units. As such, the Grantee Participant voluntarily acknowledges and consents (where required under applicable law) to the collection, use, processing and transfer of personal data as described in this paragraphherein. The Company and the Employer Rockstar hold certain personal information about the GranteeParticipant, including the Participant’s name, home address and telephone number, date of birth, social security number or other employee identification number, salary, nationality, job title, any Shares or directorships held in the Company, details of all Awards options or any other entitlement to Shares awarded, canceled, purchased, vested, unvested or outstanding in Grantee’s Participants’ favor, for the purpose of managing and administering the Plan (“Data”). The Data may be provided by the Grantee Participant or collected, where lawful, from third parties, and the Company will process the Data for the exclusive purpose of implementing, administering and managing the GranteeParticipant’s participation in the Planaward of Restricted Units. The Data processing will take place through electronic and non-electronic means according to logics and procedures strictly correlated to the purposes for which Data are collected and with confidentiality and security provisions as set forth by applicable laws and regulations in the GranteeParticipant’s country of residence. Data processing operations will be performed minimizing the use of personal and identification data when such operations are unnecessary for the processing purposes sought. Data will be accessible within the Company’s organization only by those persons requiring access for purposes of administering the implementation, administration and operation of the Plan and for the GranteeParticipant’s participation in the PlanRestricted Units. The Company and the Employer Rockstar will transfer Data amongst themselves as necessary for the purpose of implementation, administration and management of the GranteeParticipant’s participation in the PlanRestricted Units, and the Company and the Employer Rockstar may each further transfer Data to any third parties assisting the Company in the implementation, administration and management of the PlanRestricted Units. These recipients may be located in the European Economic Area, or elsewhere throughout the world, such as the United States. The Grantee Participant hereby authorizes (where required under applicable law) them to receive, possess, use, retain and transfer the Data, in electronic or other form, for purposes of implementing, administering and managing the GranteeParticipant’s participation in the Plan, including any requisite transfer of such Data as may be required for the administration of the Plan and/or the subsequent holding of Shares on the Grantee’s behalf to a broker or other third party with whom the Grantee may elect to deposit any Shares acquired pursuant to the PlanRestricted Units. The Grantee Participant may, at any time, exercise his or her the Participant’s rights provided under applicable personal data protection laws, which may include the right to (a) obtain confirmation as to the existence of the Data, (b) verify the content, origin and accuracy of the Data, (c) request the integration, update, amendment, deletion, or blockage (for breach of applicable laws) of the Data, and (d) to oppose, for legal reasons, the collection, processing or transfer of the Data which is not necessary or required for the implementation, administration and/or operation of the Plan and the Grantee’s participation in the PlanRestricted Units. The Grantee Participant may seek to exercise these rights by contacting the GranteeParticipant’s local human resources managerHR manager or the Company’s Stock Plan Administration Department.

Consent to Collection, Processing and Transfer of Personal Data. Pursuant to applicable personal data protection laws, the Company hereby notifies the Grantee Participant of the following in relation to the GranteeParticipant’s personal data and the collection, processing and transfer of such data in relation to the Company’s grant of this Award and the GranteeParticipant’s participation in the Plan. The collection, processing and transfer of the GranteeParticipant’s personal data is necessary for the Company’s administration of the Plan and the GranteeParticipant’s participation in the Plan. The Grantee, and the Participant’s denial and/or objection to the collection, processing and transfer of personal data may affect the GranteeParticipant’s participation in the Plan. As such, the Grantee Participant voluntarily acknowledges and consents (where required under applicable law) to the collection, use, processing and transfer of personal data as described in this paragraph. The Company Company, the Advisors and the Employer Participant’s employer hold certain personal information about the GranteeParticipant, including the Participant’s name, home address and telephone number, date of birth, social security number or other employee identification number, salary, nationality, job title, any Shares shares of Stock or directorships held in the Company, details of all Awards options or any other entitlement to Shares shares of Stock awarded, canceled, purchased, vested, unvested or outstanding in Granteethe Participant’s favor, for the purpose of managing and administering the Plan (“Data”). The Data may be provided by the Grantee Participant or collected, where lawful, from third parties, and the Company will process the Data for the exclusive purpose of implementing, administering and managing the GranteeParticipant’s participation in the Plan. The Data processing will take place through electronic and non-electronic means according to logics and procedures strictly correlated to the purposes for which Data are collected and with confidentiality and security provisions as set forth by applicable laws and regulations in the GranteeParticipant’s country of residence. Data processing operations will be performed minimizing the use of personal and identification data when such operations are unnecessary for the processing purposes sought. Data will be accessible within the Company’s organization only by those persons requiring access for purposes of the implementation, administration and operation of the Plan and for the GranteeParticipant’s participation in the Plan. The Company and and/or the Employer Advisors will transfer Data amongst themselves as necessary for the purpose of implementation, administration and management of the GranteeParticipant’s participation in the Plan, and the Company and and/or any of the Employer Advisors may each further transfer Data to any third parties assisting the Company in the implementation, administration and management of the Plan. These recipients may be located in the European Economic Area, or elsewhere throughout the world, such as the United States. The Grantee Participant hereby authorizes (where required under applicable law) them to receive, possess, use, retain and transfer the Data, in electronic or other form, for purposes of implementing, administering and managing the GranteeParticipant’s participation in the Plan, including any requisite transfer of such Data as may be required for the administration of the Plan and/or the subsequent holding of Shares shares of Stock on the GranteeParticipant’s behalf to a broker or other third party with whom the Grantee Participant may elect to deposit any Shares shares of Stock acquired pursuant to the Plan. The Grantee Participant may, at any time, exercise his or her rights provided under applicable personal data protection laws, which may include the right to (a) obtain confirmation as to the existence of the Data, (b) verify the content, origin and accuracy of the Data, (c) request the integration, update, amendment, deletion, or blockage (for breach of applicable laws) of the Data, and (d) to oppose, for legal reasons, the collection, processing or transfer of the Data which is not necessary or required for the implementation, administration and/or operation of the Plan and the GranteeParticipant’s participation in the Plan. The Grantee Participant may seek to exercise these rights by contacting the GranteeCompany’s local human resources managerHuman Resources Department.

Consent to Collection, Processing and Transfer of Personal Data. Pursuant to applicable personal data protection laws, the Company and the Service Recipient hereby notifies notify the Grantee Participant of the following in relation to the GranteeParticipant’s personal data and the collection, processing and transfer of such data in relation to the Company’s grant of this Award the Restricted Stock Units and the GranteeParticipant’s participation in the Plan. The collection, processing and transfer of the GranteeParticipant’s personal data is are necessary for the Company’s administration of the Plan and the GranteeParticipant’s participation in the Plan. The GranteeParticipant’s denial and/or objection to the collection, processing and transfer of personal data may affect the GranteeParticipant’s participation in the Plan. As such, the Grantee Participant voluntarily acknowledges and consents (where required under applicable law) to the collection, use, processing and transfer of personal data as described in this paragraphherein. The Company and the Employer Service Recipient hold certain personal information about the GranteeParticipant, including the Participant’s name, home address and telephone number, date of birth, social security number or other employee identification number, salary, nationality, job title, any Shares or directorships held in the Company, details of all Awards options or any other entitlement to Shares awarded, canceled, purchased, vested, unvested or outstanding in Grantee’s Participants’ favor, for the purpose of managing and administering the Plan (“Data”). The Data may be provided by the Grantee Participant or collected, where lawful, from third parties, and the Company will process the Data for the exclusive purpose of implementing, administering and managing the GranteeParticipant’s participation in the Plan. The Data processing will take place through electronic and non-electronic means according to logics and procedures strictly correlated to the purposes for which Data are collected and with confidentiality and security provisions as set forth by applicable laws and regulations in the Grantee’s country of residenceregulations. Data processing operations will be performed minimizing the use of personal and identification data when such operations are unnecessary for the processing purposes sought. Data will be accessible within the Company’s organization only by those persons requiring access for purposes of the implementation, administration and operation of the Plan and for the GranteeParticipant’s participation in the Plan. The Company and the Employer Service Recipient will transfer Data amongst themselves as necessary for the purpose of implementation, administration and management of the GranteeParticipant’s participation in the Plan, and the Company and the Employer Service Recipient may each further transfer Data to any third parties assisting the Company in the implementation, administration and management of the Plan. These recipients may be located in the European Economic Area, or elsewhere throughout the world, such as the United States. The Grantee Participant hereby authorizes (where required under applicable law) them to receive, possess, use, retain and transfer the Data, in electronic or other form, for purposes of implementing, administering and managing the GranteeParticipant’s participation in the Plan, including any requisite transfer of such Data as may be required for the administration of the Plan and/or the subsequent holding of Shares on the GranteeParticipant’s behalf to a broker or other third party with whom the Grantee Participant may elect to deposit any Shares acquired pursuant to the Plan. The Grantee may, at any time, exercise his or her rights provided under applicable personal data protection laws, which may include the right to (a) obtain confirmation as to the existence of the Data, (b) verify the content, origin and accuracy of the Data, (c) request the integration, update, amendment, deletion, or blockage (for breach of applicable laws) of the Data, and (d) to oppose, for legal reasons, the collection, processing or transfer of the Data which is not necessary or required for the implementation, administration and/or operation of the Plan and the Grantee’s participation in the Plan. The Grantee may seek to exercise these rights by contacting the Grantee’s local human resources manager.

Consent to Collection, Processing and Transfer of Personal Data. Pursuant to applicable personal data protection laws, the Company hereby notifies the Grantee Optionee of the following in relation to the GranteeOptionee’s personal data and the collection, processing and transfer of such data in relation to the Company’s grant of this Award and the GranteeOptionee’s participation in the Plan. The collection, processing and transfer of the GranteeOptionee’s personal data is necessary for the Company’s administration of the Plan and the GranteeOptionee’s participation in the Plan. The GranteeOptionee’s denial and/or objection to the collection, processing and transfer of personal data may affect the GranteeOptionee’s participation in the Plan. As such, the Grantee Optionee voluntarily acknowledges and consents (where required under applicable law) to the collection, use, processing and transfer of personal data as described in this paragraph. The Company and the Employer hold certain personal information about the GranteeOptionee, including name, home address and telephone number, date of birth, social security number or other employee identification number, salary, nationality, job title, any Shares or directorships held in the Company, details of all Awards Options or any other entitlement to Shares awarded, canceled, purchased, vested, unvested or outstanding in GranteeOptionee’s favor, for the purpose of managing and administering the Plan (“Data”). The Data may be provided by the Grantee Optionee or collected, where lawful, from third parties, and the Company will process the Data for the exclusive purpose of implementing, administering and managing the GranteeOptionee’s participation in the Plan. The Data processing will take place through electronic and non-electronic means according to logics and procedures strictly correlated to the purposes for which Data are collected and with confidentiality and security provisions as set forth by applicable laws and regulations in the GranteeOptionee’s country of residence. Data processing operations will be performed minimizing the use of personal and identification data when such operations are unnecessary for the processing purposes sought. Data will be accessible within the Company’s organization only by those persons requiring access for purposes of the implementation, administration and operation of the Plan and for the GranteeOptionee’s participation in the Plan. The Company and the Employer will transfer Data amongst themselves as necessary for the purpose of implementation, administration and management of the GranteeOptionee’s participation in the Plan, and the Company and the Employer may each further transfer Data to any third parties assisting the Company in the implementation, administration and management of the Plan. These recipients may be located in the European Economic Area, or elsewhere throughout the world, such as the United States. The Grantee Optionee hereby authorizes (where required under applicable law) them to receive, possess, use, retain and transfer the Data, in electronic or other form, for purposes of implementing, administering and managing the GranteeOptionee’s participation in the Plan, including any requisite transfer of such Data as may be required for the administration of the Plan and/or the subsequent holding of Shares on the GranteeOptionee’s behalf to a broker or other third party with whom the Grantee Optionee may elect to deposit any Shares acquired pursuant to the Plan. The Grantee Optionee may, at any time, exercise his or her rights provided under applicable personal data protection laws, which may include the right to (a) obtain confirmation as to the existence of the Data, (b) verify the content, origin and accuracy of the Data, (c) request the integration, update, amendment, deletion, or blockage (for breach of applicable laws) of the Data, and (d) to oppose, for legal reasons, the collection, processing or transfer of the Data which is not necessary or required for the implementation, administration and/or operation of the Plan and the GranteeOptionee’s participation in the Plan. The Grantee Optionee may seek to exercise these rights by contacting the GranteeOptionee’s local human resources manager.

Consent to Collection, Processing and Transfer of Personal Data. (a) Pursuant to applicable personal data protection laws, the Company and the Employer (if different) hereby notifies notify the Grantee Optionee of the following in relation to the GranteeOptionee’s personal data and the collection, processing and transfer of such data in relation to the Company’s grant of this Award Option and the GranteeOptionee’s participation in the Plan. The collection, processing and transfer of the GranteeOptionee’s personal data is are necessary for the Company’s administration of the Plan and the GranteeOptionee’s participation in the Plan. The GranteeOptionee’s denial and/or objection to the collection, processing and transfer of personal data may affect the GranteeOptionee’s participation in the Plan. As such, the Grantee The Optionee voluntarily acknowledges and consents (where required under applicable law) to the collection, use, processing and transfer of personal data as described in this paragraph. herein. (b) The Company and the Employer (if different) hold certain personal information about the GranteeOptionee, including the Optionee’s name, home address and telephone number, date of birth, social security number or other employee identification number, salary, nationality, job title, any Shares or directorships held in the Company, details of all Awards awards or any other entitlement to Shares awarded, canceled, purchased, vested, unvested or outstanding in Granteethe Optionee’s favor, for the purpose of managing and administering the Plan (“Data”). The Data may be provided by the Grantee Optionee or collected, where lawful, from third parties, and the Company and Employer (if different) will process the Data for the exclusive purpose of implementing, administering and managing the GranteeOptionee’s participation in the Plan. The Data processing will take place through electronic and non-electronic means according to logics and procedures strictly correlated to the purposes for which Data are collected and with confidentiality and security provisions as set forth by applicable laws and regulations in the GranteeNon-Qualified Stock Option Agreement 9 Optionee’s country of residence. Data processing operations will be performed minimizing the use of personal and identification data when such operations are unnecessary for the processing purposes sought. Data will be accessible within the Company’s organization only by those persons requiring access for purposes of the implementation, administration and operation of the Plan and for the GranteeOptionee’s participation in the Plan. . (c) The Company and the Employer (if different) will transfer Data amongst themselves as necessary for the purpose of implementation, administration and management of the GranteeOptionee’s participation in the Plan, and the Company and the Employer may each further transfer Data to any third parties assisting the Company in the implementation, administration and management of the Plan. These recipients may be located in the European Economic Area, or elsewhere throughout the world, such as the United States. The Grantee Optionee hereby authorizes (where required under applicable law) them to receive, possess, use, retain and transfer the Data, in electronic or other form, for purposes of implementing, administering and managing the GranteeOptionee’s participation in the Plan, including any requisite transfer of such Data as may be required for the administration of the Plan and/or the subsequent holding of Shares on the GranteeOptionee’s behalf to a broker or other third party with whom the Grantee Optionee may elect to deposit any Shares acquired pursuant to the Plan. . (d) The Grantee Optionee may, at any time, exercise his or her rights provided under applicable personal data protection laws, which may include the right to (ai) obtain confirmation as to the existence of the Data, (bii) verify the content, origin and accuracy of the Data, (ciii) request the integration, update, amendment, deletion, or blockage (for breach of applicable laws) of the Data, and (div) to oppose, for legal reasons, the collection, processing or transfer of the Data which is not necessary or required for the implementation, administration and/or operation of the Plan and the GranteeOptionee’s participation in the Plan. The Grantee Optionee may seek to exercise these rights by contacting the GranteeCompany’s local human resources managerCorporate Secretary’s Department.

Consent to Collection, Processing and Transfer of Personal Data. (a) Pursuant to applicable personal data protection laws, the Company and the Employer (if different) hereby notifies notify the Grantee Optionee of the following in relation to the GranteeOptionee’s personal data and the collection, processing and transfer of such data in relation to the Company’s grant of this Award Option and the GranteeOptionee’s participation in the Plan. The collection, processing and transfer of the GranteeOptionee’s personal data is are necessary for the Company’s administration of the Plan and the GranteeOptionee’s participation in the Plan. The GranteeOptionee’s denial and/or objection to the collection, processing and transfer of personal data may affect the GranteeOptionee’s participation in the Plan. As such, the Grantee The Optionee voluntarily acknowledges and consents (where required under applicable law) to the collection, use, processing and transfer of personal data as described in this paragraph. herein. (b) The Company and the Employer (if different) hold certain personal information about the GranteeOptionee, including the Optionee’s name, home address and telephone number, date of birth, social security number or other employee identification number, salary, nationality, job title, any Shares or directorships held in the Company, details of all Awards awards or any other entitlement to Shares awarded, canceled, purchased, vested, unvested or outstanding in Granteethe Optionee’s favor, for the purpose of managing and administering the Plan (“Data”). The Data may be provided by the Grantee Optionee or collected, where lawful, from third parties, and the Company and Employer (if different) will process the Data for the exclusive purpose of implementing, administering and managing the GranteeOptionee’s participation in the Plan. The Data processing will take place through electronic and non-electronic means according to logics and procedures strictly correlated to the purposes for which Data are collected and with confidentiality and security provisions as set forth by applicable laws and regulations in the GranteeOptionee’s country of residence. Data processing operations will be performed minimizing the use of personal and identification data when such operations are unnecessary for the processing purposes sought. Data will be accessible within the Company’s organization only by those persons requiring access for purposes of the implementation, administration and operation of the Plan and for the GranteeOptionee’s participation in the Plan. CEO Stock Option Agreement 5 (c) The Company and the Employer (if different) will transfer Data amongst themselves as necessary for the purpose of implementation, administration and management of the GranteeOptionee’s participation in the Plan, and the Company and the Employer may each further transfer Data to any third parties assisting the Company in the implementation, administration and management of the Plan. These recipients may be located in the European Economic Area, or elsewhere throughout the world, such as the United States. The Grantee Optionee hereby authorizes (where required under applicable law) them to receive, possess, use, retain and transfer the Data, in electronic or other form, for purposes of implementing, administering and managing the GranteeOptionee’s participation in the Plan, including any requisite transfer of such Data as may be required for the administration of the Plan and/or the subsequent holding of Shares on the GranteeOptionee’s behalf to a broker or other third party with whom the Grantee Optionee may elect to deposit any Shares acquired pursuant to the Plan. . (d) The Grantee Optionee may, at any time, exercise his or her rights provided under applicable personal data protection laws, which may include the right to (ai) obtain confirmation as to the existence of the Data, (bii) verify the content, origin and accuracy of the Data, (ciii) request the integration, update, amendment, deletion, or blockage (for breach of applicable laws) of the Data, and (div) to oppose, for legal reasons, the collection, processing or transfer of the Data which is not necessary or required for the implementation, administration and/or operation of the Plan and the GranteeOptionee’s participation in the Plan. The Grantee Optionee may seek to exercise these rights by contacting the GranteeCompany’s local human resources managerCorporate Secretary’s Department.

Consent to Collection, Processing and Transfer of Personal Data. Pursuant to applicable personal data protection laws, the Company hereby notifies the Grantee of the following in relation to the Grantee’s personal data and the collection, processing and transfer of such data in relation to the Company’s grant of this Award and the Grantee’s participation in the Plan. The collection, processing and transfer of the Grantee’s personal data is are necessary for the Company’s administration of the Plan and the Grantee’s participation in the Plan. The Grantee’s denial and/or objection to the collection, processing and transfer of personal data may affect the Grantee’s participation in the Plan. As such, the Grantee voluntarily explicitly and unambiguously acknowledges and consents (where required under applicable law) to the collection, use, processing and transfer of personal data as described in this paragraphAgreement and any other Award grant materials by and among, as applicable, the Company, its Subsidiaries and/or the Grantee's employer for the purpose of implementing, administering and managing the Grantee's participation in the Plan. The Company and the Employer Grantee’s employer hold certain personal information about the Grantee, including name, home address, email address and telephone number, date of birth, social security number, passport number or other employee identification number, salary, nationality, job title, any Shares or directorships held in the Company, details of all Awards or any other entitlement to Shares awarded, canceled, purchased, vested, unvested or outstanding in Grantee’s favor, for the purpose of managing and administering the Plan (“Data”). The Data may be provided by the Grantee or collected, where lawful, from third parties, and the Company will process the Data for the exclusive purpose of implementing, administering and managing the Grantee’s participation in the Plan. The Data processing will take place through electronic and non-electronic means according to logics and procedures strictly correlated to the purposes for which Data are collected and with confidentiality and security provisions as set forth by applicable laws and regulations in the Grantee’s country of residence. Data processing operations will be performed minimizing the use of personal and identification data when such operations are unnecessary for the processing purposes sought. Data will be accessible within the Company’s organization only by those persons requiring access for purposes of the implementation, administration and operation of the Plan and for the Grantee’s participation in the Plan. The Company and the Employer Grantee’s employer will transfer Data amongst themselves as necessary for the purpose of implementation, administration and management of the Grantee’s participation in the Plan, and the Company and the Employer Grantee’s employer may each further transfer Data to any third parties assisting the Company in the implementation, administration and management of the Plan. These recipients may be located in the European Economic Area, or elsewhere throughout the world, such as the United States. The Grantee hereby authorizes (where required under applicable law) them to receive, possess, use, retain and transfer the Data, in electronic or other form, for purposes of implementing, administering and managing the Grantee’s participation in the Plan, including any requisite transfer of such Data as may be required for the administration of the Plan and/or the subsequent holding of Shares on the Grantee’s behalf to a broker or other third party with whom the Grantee may elect to deposit any Shares acquired pursuant to the Plan. The Grantee may, at any time, exercise his or her rights provided under applicable personal data protection laws, which may include the right to (a) obtain confirmation as to the existence of the Data, (b) verify the content, origin and accuracy of the Data, (c) request the integration, update, amendment, deletion, or blockage (for breach of applicable laws) of the Data, and (d) to oppose, for legal reasons, the collection, processing or transfer of the Data which is not necessary or required for the implementation, administration and/or operation of the Plan and the Grantee’s participation in the Plan. The Grantee may seek to exercise these rights by contacting the Grantee’s local human resources manager. Finally, upon request of the Company or the Grantee’s employer, the Grantee agrees to provide an executed data privacy consent form (or any other agreements or consents that may be required by the Company and/or the Grantee’s employer) that the Company and/or the Grantee’s employer may deem necessary to obtain from the Grantee for the purpose of administering the Grantee’s participation in the Plan in compliance with the data privacy laws in the Grantee’s country, either now or in the future. The Grantee understands and agrees that the Grantee will not be able to participate in the Plan if the Grantee fails to provide any such consent or agreement requested by the Company and/or the Grantee’s employer.

Consent to Collection, Processing and Transfer of Personal Data. Pursuant to applicable personal data protection laws, the Company hereby notifies the Grantee you of the following in relation to the Grantee’s your personal data and the collection, processing and transfer of such data in relation to the Company’s grant of this Award the Stock Units and the Grantee’s your participation in the Plan. The collection, processing and transfer of the Grantee’s your personal data is necessary for the Company’s administration of the Plan and the Grantee’s your participation in the Plan. The Grantee’s Your denial and/or objection to the collection, processing and transfer of personal data may affect the Grantee’s your participation in the Plan. As such, the Grantee you voluntarily acknowledges acknowledge and consents consent (where required under applicable law) to the collection, use, processing and transfer of personal data as described in this paragraphherein. The Company and the Employer hold holds certain personal information about the Granteeyou, including your name, home address and telephone number, date of birth, social security number or other employee identification number, e-mail address, salary, nationality, job title, any Shares or directorships held in the Company, details of all Awards or any other entitlement to Shares awarded, canceled, purchased, vested, unvested or outstanding in Grantee’s your favor, for the purpose of managing and administering the Plan (“Data”). The Data may be provided by the Grantee you or collected, where lawful, from third parties, and the Company will process the Data for the sole and exclusive purpose of implementing, administering and managing the Grantee’s your participation in the Plan. The Data processing will take place through electronic and non-electronic means according to logics and procedures strictly correlated to the purposes for which Data are collected and with confidentiality and security provisions as set forth by applicable laws and regulations in the Grantee’s your country of residence. Data processing operations will be performed minimizing the use of personal and identification data when such operations are unnecessary for the processing purposes sought. Data will be accessible within the Company’s organization only by those persons requiring access for purposes of the implementation, administration and operation of the Plan and for the Grantee’s your participation in the Plan. The Company and the Employer will transfer Data amongst themselves internally as necessary for the purpose of implementation, administration and management of the Grantee’s your participation in the Plan, and the Company and the Employer may each further transfer Data to any third parties assisting the Company in the implementation, administration and management of the Plan, including (but not limited to) Bank of America Xxxxxxx Xxxxx. These recipients may be located in the European Economic Area, or elsewhere throughout the world, such as the United States. The Grantee You hereby authorizes authorize (where required under applicable law) them these third parties to receive, possess, use, retain and transfer the Data, in electronic or other form, for purposes of implementing, administering and managing the Grantee’s your participation in the Plan, including any requisite transfer of such Data as may be required for the administration of the Plan and/or the subsequent holding of Shares on the Grantee’s your behalf to a broker or other third party with whom the Grantee you may elect to deposit any Shares acquired pursuant to the Plan. The Grantee You may, at any time, exercise his or her their rights provided under applicable personal data protection laws, which may include the right to (a) obtain confirmation as to the existence of the Data, (b) verify the content, origin and accuracy of the Data, (c) request the integration, update, amendment, deletion, or blockage (for breach of applicable laws) of the Data, and (d) to oppose, for legal reasons, the collection, processing or transfer of the Data which is not necessary or required for the implementation, administration and/or operation of the Plan and the Grantee’s your participation in the Plan. The Grantee You may seek to exercise these rights by contacting the Grantee’s local human resources managerCompany's Financial Planning Department.

Consent to Collection, Processing and Transfer of Personal Data. Pursuant to applicable personal data protection laws, the Company hereby notifies the Grantee of the following in relation to the Grantee’s personal data and the collection, processing and transfer of such data in relation to the Company’s grant of this Award and the Grantee’s participation in the Plan. The collection, processing and transfer of the Grantee’s personal data is are necessary for the Company’s administration of the Plan and the Grantee’s participation in the Plan. The Grantee’s denial and/or objection to the collection, processing and transfer of personal data may affect the Grantee’s participation in the Plan. As such, the Grantee voluntarily explicitly and unambiguously acknowledges and consents (where required under applicable law) to the collection, use, processing and transfer of personal data as described in this paragraphAgreement and any other Award grant materials by and among, as applicable, the Company, its Subsidiaries and/or the Grantee's employer for the purpose of implementing, administering and managing the Grantee's participation in the Plan. The Company and the Employer Grantee’s employer hold certain personal information about the Grantee, including name, home address, email address and telephone number, date of birth, social security number, passport number or other employee identification number, salary, nationality, job title, any Shares or directorships held in the Company, details of all Awards or any other entitlement to Shares awarded, canceled, purchased, vested, unvested or outstanding in Grantee’s favor, for the purpose of managing and administering the Plan (“Data”). The Data may be provided by the Grantee or collected, where lawful, from third parties, and the Company will process the Data for the exclusive purpose of implementing, administering and managing the Grantee’s participation in the Plan. The Data processing will take place through electronic and non-electronic means according to logics and procedures strictly correlated to the purposes for which Data are collected and with confidentiality and security provisions as set forth by applicable laws and regulations in the Grantee’s country of residence. Data processing operations will be performed minimizing the use of personal and identification data when such operations are unnecessary for the processing purposes sought. Data will be accessible within the Company’s organization only by those persons requiring access for purposes of the implementation, administration and operation of the Plan and for the Grantee’s participation in the Plan. The Company and the Employer Grantee’s employer will transfer Data amongst themselves as necessary for the purpose of implementation, administration and management of the Grantee’s participation in the Plan, and the Company and the Employer Grantee’s employer may each further transfer Data to any third parties assisting the Company in the implementation, administration and management of the Plan. These recipients may be located in the European Economic Area, or elsewhere throughout the world, such as the United States. The Grantee hereby authorizes (where required under applicable law) them to receive, possess, use, retain and transfer the Data, in electronic or other form, for purposes of implementing, administering and managing the Grantee’s participation in the Plan, including any requisite transfer of such Data as may be required for the administration of the Plan and/or the subsequent holding of Shares on the Grantee’s behalf to a broker or other third party with whom the Grantee may elect to deposit any Shares acquired pursuant to the Plan. The Grantee may, at any time, exercise his or her rights provided under applicable personal data protection laws, which may include the right to (a) obtain confirmation as to the existence of the Data, (b) verify the content, origin and accuracy of the Data, (c) request the integration, update, amendment, deletion, or blockage (for breach of applicable laws) of the Data, and (d) to oppose, for legal reasons, the collection, processing or transfer of the Data which is not necessary or required for the implementation, administration and/or operation of the Plan and the Grantee’s participation in the Plan. The Grantee may seek to exercise these rights by contacting the Grantee’s local human resources manager.

Consent to Collection, Processing and Transfer of Personal Data. (a) Pursuant to applicable personal data protection laws, the Company and the Employer (if different) hereby notifies notify the Grantee Optionee of the following in relation to the Grantee’s Optionee's personal data and the collection, processing and transfer of such data in relation to the Company’s grant of this Award Option and the Grantee’s Optionee's participation in the Plan. The collection, processing and transfer of the Grantee’s Optionee's personal data is are necessary for the Company’s administration of the Plan and the Grantee’s Optionee's participation in the Plan. The Grantee’s Optionee's denial and/or objection to the collection, processing and transfer of personal data may affect the Grantee’s Optionee's participation in the Plan. As such, the Grantee The Optionee voluntarily acknowledges and consents (where required under applicable law) to the collection, use, processing and transfer of personal data as described in this paragraph. herein. (b) The Company and the Employer (if different) hold certain personal information about the GranteeOptionee, including the Optionee's name, home address and telephone number, date of birth, social security number or other employee identification number, salary, nationality, job title, any Shares or directorships held in the Company, details of all Awards awards or any other 2013/ISO entitlement to Shares awarded, canceled, purchased, vested, unvested or outstanding in Grantee’s the Optionee's favor, for the purpose of managing and administering the Plan (“Data”). The Data may be provided by the Grantee Optionee or collected, where lawful, from third parties, and the Company and Employer (if different) will process the Data for the exclusive purpose of implementing, administering and managing the Grantee’s Optionee's participation in the Plan. The Data processing will take place through electronic and non-electronic means according to logics and procedures strictly correlated to the purposes for which Data are collected and with confidentiality and security provisions as set forth by applicable laws and regulations in the Grantee’s Optionee's country of residence. Data processing operations will be performed minimizing the use of personal and identification data when such operations are unnecessary for the processing purposes sought. Data will be accessible within the Company’s organization only by those persons requiring access for purposes of the implementation, administration and operation of the Plan and for the Grantee’s Optionee's participation in the Plan. . (c) The Company and the Employer (if different) will transfer Data amongst themselves as necessary for the purpose of implementation, administration and management of the Grantee’s Optionee's participation in the Plan, and the Company and the Employer may each further transfer Data to any third parties assisting the Company in the implementation, administration and management of the Plan. These recipients may be located in the European Economic Area, or elsewhere throughout the world, such as the United States. The Grantee Optionee hereby authorizes (where required under applicable law) them to receive, possess, use, retain and transfer the Data, in electronic or other form, for purposes of implementing, administering and managing the Grantee’s Optionee's participation in the Plan, including any requisite transfer of such Data as may be required for the administration of the Plan and/or the subsequent holding of Shares on the Grantee’s Optionee's behalf to a broker or other third party with whom the Grantee Optionee may elect to deposit any Shares acquired pursuant to the Plan. . (d) The Grantee Optionee may, at any time, exercise his or her rights provided under applicable personal data protection laws, which may include the right to (ai) obtain confirmation as to the existence of the Data, (bii) verify the content, origin and accuracy of the Data, (ciii) request the integration, update, amendment, deletion, or blockage (for breach of applicable laws) of the Data, and (div) to oppose, for legal reasons, the collection, processing or transfer of the Data which is not necessary or required for the implementation, administration and/or operation of the Plan and the Grantee’s Optionee's participation in the Plan. The Grantee Optionee may seek to exercise these rights by contacting the GranteeCompany’s local human resources managerCorporate Secretary’s Department.

Consent to Collection, Processing and Transfer of Personal Data. Pursuant to applicable personal data protection laws, the Company hereby notifies the Grantee of the following in relation to the Grantee’s personal data and the collection, processing and transfer of such data in relation to the Company’s grant of this Award and the Grantee’s participation in the Plan. The collection, processing and transfer of the Grantee’s personal data is necessary for the Company’s administration of the Plan and the Grantee’s participation in the Plan. The Grantee’s denial and/or objection to the collection, processing and transfer of personal data may affect the Grantee’s participation in the Plan. As such, the Grantee voluntarily explicitly and unambiguously acknowledges and consents (where required under applicable law) to the collection, use, processing and transfer of personal data as described in this paragraphAgreement and any other Award grant materials by and among, as applicable, the Company, its Subsidiaries and/or the Grantee's employer for the purpose of implementing, administering and managing the Grantee's participation in the Plan. The Company and the Employer Grantee’s employer hold certain personal information about the Grantee, including name, home address, email address and telephone number, date of birth, social security number, passport number or other employee identification number, salary, nationality, job title, any Shares or directorships held in the Company, details of all Awards or any other entitlement to Shares awarded, canceled, purchased, vested, unvested or outstanding in Grantee’s favor, for the purpose of managing and administering the Plan (“Data”). The Data may be provided by the Grantee or collected, where lawful, from third parties, and the Company will process the Data for the exclusive purpose of implementing, administering and managing the Grantee’s participation in the Plan. The Data processing will take place through electronic and non-non- electronic means according to logics and procedures strictly correlated to the purposes for which Data are collected and with confidentiality and security provisions as set forth by applicable laws and regulations in the Grantee’s country of residence. Data processing operations will be performed minimizing the use of personal and identification data when such operations are unnecessary for the processing purposes sought. Data will be accessible within the Company’s organization only by those persons requiring access for purposes of the implementation, administration and operation of the Plan and for the Grantee’s participation in the Plan. The Company and the Employer Grantee’s employer will transfer Data amongst themselves as necessary for the purpose of implementation, administration and management of the Grantee’s participation in the Plan, and the Company and the Employer Grantee’s employer may each further transfer Data to any third parties assisting the Company in the implementation, administration and management of the Plan. These recipients may be located in the European Economic Area, or elsewhere throughout the world, such as the United States. The Grantee hereby authorizes (where required under applicable law) them to receive, possess, use, retain and transfer the Data, in electronic or other form, for purposes of implementing, administering and managing the Grantee’s participation in the Plan, including any requisite transfer of such Data as may be required for the administration of the Plan and/or the subsequent holding of Shares on the Grantee’s behalf to a broker or other third party with whom the Grantee may elect to deposit any Shares acquired pursuant to the Plan. The Grantee may, at any time, exercise his or her rights provided under applicable personal data protection laws, which may include the right to (a) obtain confirmation as to the existence of the Data, (b) verify the content, origin and accuracy of the Data, (c) request the integration, update, amendment, deletion, or blockage (for breach of applicable laws) of the Data, and (d) to oppose, for legal reasons, the collection, processing or transfer of the Data which is not necessary or required for the implementation, administration and/or operation of the Plan and the Grantee’s participation in the Plan. The Grantee may seek to exercise these rights by contacting the Grantee’s local human resources manager. Finally, upon request of the Company or the Grantee’s employer, the Grantee agrees to provide an executed data privacy consent form (or any other agreements or consents that may be required by the Company and/or the Grantee’s employer) that the Company and/or the Grantee’s employer may deem necessary to obtain from the Grantee for the purpose of administering the Grantee’s participation in the Plan in compliance with the data privacy laws in the Grantee’s country, either now or in the future. The Grantee understands and agrees that the Grantee will not be able to participate in the Plan if the Grantee fails to provide any such consent or agreement requested by the Company and/or the Grantee’s employer.

Consent to Collection, Processing and Transfer of Personal Data. (a) Pursuant to applicable personal data protection laws, the Company and the Employer (if different) hereby notifies notify the Grantee Participant of the following in relation to the Grantee’s Participant's personal data and the collection, processing and transfer of such data in relation to the Company’s grant of this Award and the Grantee’s Participant's participation in the Plan. The collection, processing and transfer of the Grantee’s Participant's personal data is are necessary for the Company’s administration of the Plan and the Grantee’s Participant's participation in the Plan. The Grantee’s Participant's denial and/or objection to the collection, processing and transfer of personal data may affect the Grantee’s Participant's participation in the Plan. As such, the Grantee The Participant voluntarily acknowledges and consents (where required under applicable law) to the collection, use, processing and transfer of personal data as described in this paragraph. herein. (b) The Company and the Employer (if different) hold certain personal information about the GranteeParticipant, including the Participant's name, home address and telephone number, date of birth, social security number or other employee identification number, salary, nationality, job title, any Shares or directorships held in the Company, details of all Awards awards or any other entitlement to Shares awarded, canceled, purchased, vested, unvested or outstanding in Grantee’s the Participant's favor, for the purpose of managing and administering the Plan (“Data”). The Data may be provided by the Grantee Participant or collected, where lawful, from third parties, and the Company and Employer (if different) will process the Data for the exclusive purpose of implementing, administering and managing the Grantee’s Participant's participation in the Plan. The Data processing will take place through electronic and non-electronic means according to logics and procedures strictly correlated to the purposes for which Data are collected and with confidentiality and security provisions as set forth by applicable laws and regulations in the Grantee’s Participant's country of residence. Data processing operations will be performed minimizing the use of personal and identification data when such operations are unnecessary for the processing purposes sought. Data will be accessible within the Company’s organization only by those persons requiring access for purposes of the implementation, administration and operation of the Plan and for the Grantee’s Participant's participation in the Plan. . (c) The Company and the Employer (if different) will transfer Data amongst themselves as necessary for the purpose of implementation, administration and management of the Grantee’s Participant's participation in the Plan, and the Company and the Employer may each further transfer Data to any third parties assisting the Company in the implementation, administration and management of the Plan. These recipients may be located in the European Economic Area, or elsewhere throughout the world, such as the United States. The Grantee Participant hereby authorizes (where required under applicable law) them to receive, possess, use, retain and transfer the Data, in electronic or other form, for purposes of implementing, administering and managing the Grantee’s Participant's participation in the Plan, including any requisite transfer of such Data as may be required for the administration of the Plan and/or the subsequent holding of Shares on the Grantee’s Participant's behalf to a broker or other third party with whom the Grantee Participant may elect to deposit any Shares acquired pursuant to the Plan. . (d) The Grantee Participant may, at any time, exercise his or her rights provided under applicable personal data protection laws, which may include the right to (ai) obtain confirmation as to the existence of the Data, (bii) verify the content, origin and accuracy of the Data, (ciii) request the integration, update, amendment, deletion, or blockage (for breach of applicable laws) of the Data, and (div) to oppose, for legal reasons, the collection, processing or transfer of the Data which is not necessary or required for the implementation, administration and/or operation of the Plan and the Grantee’s Participant's participation in the Plan. The Grantee Participant may seek to exercise these rights by contacting the GranteeCompany’s local human resources managerCorporate Secretary’s Department.

Consent to Collection, Processing and Transfer of Personal Data. Pursuant to applicable personal data protection laws, the Company hereby notifies the Grantee Employee of the following in relation to the GranteeEmployee’s personal data and the collection, processing and transfer of such data in relation to the Company’s grant of this Award the Stock Units and the GranteeEmployee’s participation in the Plan. The collection, processing and transfer of the GranteeEmployee’s personal data is necessary for the Company’s administration of the Plan and the GranteeEmployee’s participation in the Plan. The GranteeEmployee’s denial and/or objection to the collection, processing and transfer of personal data may affect the GranteeEmployee’s participation in the Plan. As such, the Grantee Employee voluntarily acknowledges and consents (where required under applicable law) to the collection, use, processing and transfer of personal data as described in this paragraphherein. The Company and the Employer hold holds certain personal information about the GranteeEmployee, including the Employee’s name, home address and telephone number, date of birth, social security number or other employee identification number, salary, nationality, job title, any Shares or directorships held in the Company, details of all Awards options or any other entitlement to Shares awarded, canceled, purchased, vested, unvested or outstanding in Granteethe Employee’s favor, for the purpose of managing and administering the Plan (“Data”). The Data may be provided by the Grantee Employee or collected, where lawful, from third parties, and the Company will process the Data for the sole and exclusive purpose of implementing, administering and managing the GranteeEmployee’s participation in the Plan. The Data processing will take place through electronic and non-electronic means according to logics and procedures strictly correlated to the purposes for which Data are collected and with confidentiality and security provisions as set forth by applicable laws and regulations in the GranteeEmployee’s country of residence. Data processing operations will be performed minimizing the use of personal and identification data when such operations are unnecessary for the processing purposes sought. Data will be accessible within the Company’s organization only by those persons requiring access for purposes of the implementation, administration and operation of the Plan and for the GranteeEmployee’s participation in the Plan. The Company and the Employer will transfer Data amongst themselves internally as necessary for the purpose of implementation, administration and management of the GranteeEmployee’s participation in the Plan, and the Company and the Employer may each further transfer Data to any third parties assisting the Company in the implementation, administration and management of the Plan, including (but not limited to) Bank of America Xxxxxxx Xxxxx. These recipients may be located in the European Economic Area, or elsewhere throughout the world, such as the United States. The Grantee Employee hereby authorizes (where required under applicable law) them to receive, possess, use, retain and transfer the Data, in electronic or other form, for purposes of implementing, administering and managing the GranteeEmployee’s participation in the Plan, including any requisite transfer of such Data as may be required for the administration of the Plan and/or the subsequent holding of Shares on the GranteeEmployee’s behalf to a broker or other third party with whom the Grantee Employee may elect to deposit any Shares acquired pursuant to the Plan. The Grantee Employee may, at any time, exercise his or her their rights provided under applicable personal data protection laws, which may include the right to (a) obtain confirmation as to the existence of the Data, (b) verify the content, origin and accuracy of the Data, (c) request the integration, update, amendment, deletion, or blockage (for breach of applicable laws) of the Data, and (d) to oppose, for legal reasons, the collection, processing or transfer of the Data which is not necessary or required for the implementation, administration and/or operation of the Plan and the GranteeEmployee’s participation in the Plan. The Grantee Employee may seek to exercise these rights by contacting the Grantee’s local human resources managerCompany's Financial Planning Department.

Consent to Collection, Processing and Transfer of Personal Data. Pursuant to applicable personal data protection laws, the Company and the Employer hereby notifies notify the Grantee Participant of the following in relation to the GranteeParticipant’s personal data and the collection, processing and transfer of such data in relation to the Company’s grant of this Award the Restricted Stock Units and the GranteeParticipant’s participation in the Plan. The collection, processing and transfer of the GranteeParticipant’s personal data is are necessary for the Company’s administration of the Plan and the GranteeParticipant’s participation in the Plan. The GranteeParticipant’s denial and/or objection to the collection, processing and transfer of personal data may affect the GranteeParticipant’s participation in the Plan. As such, the Grantee Participant voluntarily acknowledges and consents (where required under applicable law) to the collection, use, processing and transfer of personal data as described in this paragraphherein. The Company and the Employer hold certain personal information about the GranteeParticipant, including the Participant’s name, home address and telephone number, date of birth, social security number or other employee identification number, salary, nationality, job title, any Shares or directorships held in the Company, details of all Awards options or any other entitlement to Shares awarded, canceled, purchased, vested, unvested or outstanding in Grantee’s Participants’ favor, for the purpose of managing and administering the Plan (“Data”). The Data may be provided by the Grantee Participant or collected, where lawful, from third parties, and the Company will process the Data for the exclusive purpose of implementing, administering and managing the GranteeParticipant’s participation in the Plan. The Data processing will take place through electronic and non-electronic means according to logics and procedures strictly correlated to the purposes for which Data are collected and with confidentiality and security provisions as set forth by applicable laws and regulations in the Grantee’s country of residenceregulations. Data processing operations will be performed minimizing the use of personal and identification data when such operations are unnecessary for the processing purposes sought. Data will be accessible within the Company’s organization only by those persons requiring access for purposes of the implementation, administration and operation of the Plan and for the GranteeParticipant’s participation in the Plan. The Company and the Employer will transfer Data amongst themselves as necessary for the purpose of implementation, administration and management of the GranteeParticipant’s participation in the Plan, and the Company and the Employer may each further transfer Data to any third parties assisting the Company in the implementation, administration and management of the Plan. These recipients may be located in the European Economic Area, or elsewhere throughout the world, such as the United States. The Grantee Participant hereby authorizes (where required under applicable law) them to receive, possess, use, retain and transfer the Data, in electronic or other form, for purposes of implementing, administering and managing the GranteeParticipant’s participation in the Plan, including any requisite transfer of such Data as may be required for the administration of the Plan and/or the subsequent holding of Shares on the GranteeParticipant’s behalf to a broker or other third party with whom the Grantee Participant may elect to deposit any Shares acquired pursuant to the Plan. The Grantee may, at any time, exercise his or her rights provided under applicable personal data protection laws, which may include the right to (a) obtain confirmation as to the existence of the Data, (b) verify the content, origin and accuracy of the Data, (c) request the integration, update, amendment, deletion, or blockage (for breach of applicable laws) of the Data, and (d) to oppose, for legal reasons, the collection, processing or transfer of the Data which is not necessary or required for the implementation, administration and/or operation of the Plan and the Grantee’s participation in the Plan. The Grantee may seek to exercise these rights by contacting the Grantee’s local human resources manager.

Consent to Collection, Processing and Transfer of Personal Data. (a) Pursuant to applicable personal data protection laws, the Company and the Employer (if different) hereby notifies notify the Grantee Optionee of the following in relation to the GranteeOptionee’s personal data and the collection, processing and transfer of such data in relation to the Company’s grant of this Award Option and the GranteeOptionee’s participation in the Plan. The collection, processing and transfer of the GranteeOptionee’s personal data is are necessary for the Company’s administration of the Plan and the GranteeOptionee’s participation in the Plan. The GranteeOptionee’s denial and/or objection to the collection, processing and transfer of personal data may affect the GranteeOptionee’s participation in the Plan. As such, the Grantee The Optionee voluntarily acknowledges and consents (where required under applicable law) to the collection, use, processing and transfer of personal data as described in this paragraph. herein. (b) The Company and the Employer (if different) hold certain personal information about the GranteeOptionee, including the Optionee’s name, home address and telephone number, date of birth, social security number or other employee identification number, salary, nationality, job title, any Shares or directorships held in the Company, details of all Awards awards or any other entitlement to Shares awarded, canceled, purchased, vested, unvested or outstanding in Granteethe Optionee’s favor, for the purpose of managing and administering the Plan (“Data”). The Data may be provided by the Grantee Optionee or collected, where lawful, from third parties, and the Company and Employer (if different) will process the Data for the exclusive purpose of implementing, administering and managing the GranteeOptionee’s participation in the Plan. The Data processing will take place through electronic and non-electronic means according to logics and procedures strictly correlated to the purposes for which Data are collected and with confidentiality and security provisions as set forth by applicable laws and regulations in the GranteeIncentive Stock Option Agreement 2014 9 Optionee’s country of residence. Data processing operations will be performed minimizing the use of personal and identification data when such operations are unnecessary for the processing purposes sought. Data will be accessible within the Company’s organization only by those persons requiring access for purposes of the implementation, administration and operation of the Plan and for the GranteeOptionee’s participation in the Plan. . (c) The Company and the Employer (if different) will transfer Data amongst themselves as necessary for the purpose of implementation, administration and management of the GranteeOptionee’s participation in the Plan, and the Company and the Employer may each further transfer Data to any third parties assisting the Company in the implementation, administration and management of the Plan. These recipients may be located in the European Economic Area, or elsewhere throughout the world, such as the United States. The Grantee Optionee hereby authorizes (where required under applicable law) them to receive, possess, use, retain and transfer the Data, in electronic or other form, for purposes of implementing, administering and managing the GranteeOptionee’s participation in the Plan, including any requisite transfer of such Data as may be required for the administration of the Plan and/or the subsequent holding of Shares on the GranteeOptionee’s behalf to a broker or other third party with whom the Grantee Optionee may elect to deposit any Shares acquired pursuant to the Plan. . (d) The Grantee Optionee may, at any time, exercise his or her rights provided under applicable personal data protection laws, which may include the right to (ai) obtain confirmation as to the existence of the Data, (bii) verify the content, origin and accuracy of the Data, (ciii) request the integration, update, amendment, deletion, or blockage (for breach of applicable laws) of the Data, and (div) to oppose, for legal reasons, the collection, processing or transfer of the Data which is not necessary or required for the implementation, administration and/or operation of the Plan and the GranteeOptionee’s participation in the Plan. The Grantee Optionee may seek to exercise these rights by contacting the GranteeCompany’s local human resources managerCorporate Secretary’s Department.

Consent to Collection, Processing and Transfer of Personal Data. (a) Pursuant to applicable personal data protection laws, the Company and the Employer (if different) hereby notifies notify the Grantee Participant of the following in relation to the Grantee’s Participant's personal data and the collection, processing and transfer of such data in relation to the Company’s grant of this Award and the Grantee’s Participant's participation in the Plan. The collection, processing and transfer of the Grantee’s Participant's personal data is are necessary for the Company’s administration of the Plan and the Grantee’s Participant's participation in the Plan. The Grantee’s Participant's denial and/or objection to the collection, processing and transfer of personal data may affect the Grantee’s Participant's participation in the Plan. As such, the Grantee The Participant voluntarily acknowledges and consents (where required under applicable law) to the collection, use, processing and transfer of personal data as described in this paragraph. herein. (b) The Company and the Employer (if different) hold certain personal information about the GranteeParticipant, including the Participant's name, home address and telephone number, date of birth, social security number or other employee identification number, salary, nationality, job title, any Shares or directorships held in the Company, details of all Awards awards or any other entitlement to Shares awarded, canceled, purchased, vested, unvested or outstanding in Grantee’s the Participant's favor, for the purpose of managing and administering the Plan (“Data”). The Data may be provided by the Grantee Participant or collected, where lawful, from third parties, and the Company and Employer (if different) will process the Data for the exclusive purpose of implementing, administering and managing the Grantee’s Participant's participation in the Plan. The Data processing will take place through electronic and non-electronic means according to logics and procedures strictly correlated to the purposes for which Data are collected and with confidentiality and security provisions as set forth by applicable laws and regulations in the Grantee’s Participant's country of residence. Data processing operations will be performed minimizing the use of personal and identification data when such operations are unnecessary for the processing purposes sought. Data will be accessible within the Company’s organization only by those persons requiring access for purposes of the implementation, administration and operation of the Plan and for the Grantee’s Participant's participation in the Plan. . (c) The Company and the Employer (if different) will transfer Data amongst themselves as necessary for the purpose of implementation, administration and management of the Grantee’s Participant's participation in the Plan, and the Company and the Employer may each further transfer Data to any third parties assisting the Company in the implementation, administration and management of the Plan. These recipients may be located in the European Economic Area, or elsewhere throughout the world, such as the United States. The Grantee Participant hereby authorizes (where required under applicable law) them to receive, possess, use, retain and transfer the Data, in electronic or other form, for purposes of implementing, administering and managing the Grantee’s Participant's participation in the Plan, including any requisite transfer of such Data as may be required for the administration of the Plan and/or the subsequent holding of Shares on the Grantee’s Participant's behalf to a broker or other third party with whom the Grantee Participant may elect to deposit any Shares acquired pursuant to the Plan. . (e) The Grantee Participant may, at any time, exercise his or her rights provided under applicable personal data protection laws, which may include the right to (ai) obtain confirmation as to the existence of the Data, (bii) verify the content, origin and accuracy of the Data, (ciii) request the integration, update, amendment, deletion, or blockage (for breach of applicable laws) of the Data, and (div) to oppose, for legal reasons, the collection, processing or transfer of the Data which is not necessary or required for the implementation, administration and/or operation of the Plan and the Grantee’s Participant's participation in the Plan. The Grantee Participant may seek to exercise these rights by contacting the GranteeCompany’s local human resources managerCorporate Secretary’s Department.

Consent to Collection, Processing and Transfer of Personal Data. (a) Pursuant to applicable personal data protection laws, the Company and the Employer (if different) hereby notifies notify the Grantee Participant of the following in relation to the GranteeParticipant’s personal data and the collection, processing and transfer of such data in relation to the Company’s grant of this Award and the GranteeParticipant’s participation in the Plan. The collection, processing and transfer of the GranteeParticipant’s personal data is are necessary for the Company’s administration of the Plan and the GranteeParticipant’s participation in the Plan. The GranteeParticipant’s denial and/or objection to the collection, processing and transfer of personal data may affect the GranteeParticipant’s participation in the Plan. As such, the Grantee The Participant voluntarily acknowledges and consents (where required under applicable law) to the collection, use, processing and transfer of personal data as described in this paragraph. herein. (b) The Company and the Employer (if different) hold certain personal information about the GranteeParticipant, including the Participant’s name, home address and telephone number, date of birth, social security number or other employee identification number, salary, nationality, job title, any Shares or directorships held in the Company, details of all Awards awards or any other entitlement to Shares awarded, canceled, purchased, vested, unvested or outstanding in Granteethe Participant’s favor, for the purpose of managing and administering the Plan (“Data”). The Data may be provided by the Grantee Participant or collected, where lawful, from third parties, and the Company and Employer (if different) will process the Data for the exclusive purpose of implementing, administering and managing the GranteeParticipant’s participation in the Plan. The Data processing will take place through electronic and non-electronic means according to logics and procedures strictly correlated to the purposes for which Data are collected and with confidentiality and security provisions as set forth by applicable laws and regulations in the GranteeParticipant’s country of residence. Data processing operations will be performed minimizing the use of personal and identification data when such operations are unnecessary for the processing purposes sought. Data will be accessible within the Company’s organization only by those persons requiring access for purposes of the implementation, administration and operation of the Plan and for the GranteeParticipant’s participation in the Plan. The Company and the Employer will transfer Data amongst themselves as necessary for the purpose of implementation, administration and management of the Grantee’s participation in the Plan, and the Company and the Employer may each further transfer Data to any third parties assisting the Company in the implementation, administration and management of the Plan. These recipients may be located in the European Economic Area, or elsewhere throughout the world, such as the United States. The Grantee hereby authorizes (where required under applicable law) them to receive, possess, use, retain and transfer the Data, in electronic or other form, for purposes of implementing, administering and managing the Grantee’s participation in the Plan, including any requisite transfer of such Data as may be required for the administration of the Plan and/or the subsequent holding of Shares on the Grantee’s behalf to a broker or other third party with whom the Grantee may elect to deposit any Shares acquired pursuant to the Plan. The Grantee may, at any time, exercise his or her rights provided under applicable personal data protection laws, which may include the right to (a) obtain confirmation as to the existence of the Data, (b) verify the content, origin and accuracy of the Data, (c) request the integration, update, amendment, deletion, or blockage (for breach of applicable laws) of the Data, and (d) to oppose, for legal reasons, the collection, processing or transfer of the Data which is not necessary or required for the implementation, administration and/or operation of the Plan and the Grantee’s participation in the Plan. The Grantee may seek to exercise these rights by contacting the Grantee’s local human resources manager.

Consent to Collection, Processing and Transfer of Personal Data. Pursuant to applicable personal data protection laws, the The Company hereby notifies the Grantee of the following in relation to the Grantee’s personal data and the collection, processing and transfer of such data in relation to the Company’s grant of this the Award and the Grantee’s participation in the Plan, pursuant to applicable personal data protection laws. The collection, processing and transfer of the Grantee’s personal data is necessary for the Company’s administration of the Plan and the Grantee’s participation in the Plan. The , and Grantee’s denial and/or objection to the collection, processing and transfer of personal data may affect the Grantee’s participation ability to participate in the Plan. As such, the Grantee voluntarily acknowledges acknowledges, consents and consents agrees (where required under applicable law) to the collection, use, processing and transfer of personal data as described in this paragraphherein. The Company and the Employer hold holds certain personal information about the Grantee, including (but not limited to) Grantee’s name, home address and telephone number, date of birth, social security number or other employee identification number, salary, nationality, job title, any Shares shares of Common Stock or directorships held in the Company, details of all Awards or any other entitlement to Shares shares of Common Stock awarded, canceled, purchased, vested, unvested or outstanding in Grantee’s favor, for the purpose of managing and administering the Plan (“Data”). The Data may be provided by the Grantee or collected, where lawful, from third parties, and the Company will process the Data for the exclusive purpose of implementing, administering and managing the Grantee’s participation in the Plan. The Data data processing will take place through electronic and non-electronic means according to logics and procedures strictly correlated to the purposes for which the Data are is collected and with confidentiality and security provisions as set forth by applicable laws and regulations in the Grantee’s country of residence. Data processing operations will be performed minimizing the use of personal and identification data when such operations are unnecessary for the processing purposes sought. The Data will be accessible within the Company’s organization only by those persons requiring access for purposes of the implementation, administration and operation of the Plan and for the Grantee’s participation in the Plan. The Company and the Employer will transfer Data amongst themselves as necessary for the purpose of implementation, administration and management of the Grantee’s participation in the Plan, and the Company and the Employer may each further transfer Data to any third parties assisting the Company in the implementation, administration and management of the Plan. These recipients may be located in the European Economic Area, the United States or elsewhere throughout the world, such as the United States. The Grantee hereby authorizes (where required under applicable law) them the recipients to receive, possess, use, retain and transfer the Data, in electronic or other form, for purposes of implementing, administering and managing the Grantee’s participation in the Plan, including any requisite transfer of such Data as may be required for the administration of the Plan and/or the subsequent holding of Shares shares of Common Stock on the Grantee’s behalf to a broker or other third party with whom the Grantee may elect to deposit any Shares shares of Common Stock acquired pursuant to the Plan. The Grantee may, at any time, exercise his or her Grantee’s rights provided under applicable personal data protection laws, which may include the right to (a) obtain confirmation as to the existence of the Data, (b) verify the content, origin and accuracy of the Data, (c) request the integration, update, amendment, deletion, or blockage (for breach of applicable laws) of the Data, and (d) to oppose, for legal reasons, the collection, processing or transfer of the Data which is not necessary or required for the implementation, administration and/or operation of the Plan and the Grantee’s participation in the Plan. The Grantee may seek to exercise these rights by contacting the Grantee’s local human resources HR manager.

Consent to Collection, Processing and Transfer of Personal Data. Pursuant to applicable personal data protection laws, the Company hereby notifies the Grantee of the following in relation to the Grantee’s personal data and the collection, processing and transfer of such data in relation to the Company’s grant of this Award and the Grantee’s participation in the Plan. The collection, processing and transfer of the Grantee’s personal data is necessary for the Company’s administration of the Plan and the Grantee’s participation in the Plan. The Grantee’s denial and/or objection to the collection, processing and transfer of personal data may affect the Grantee’s participation in the Plan. As such, the Grantee voluntarily explicitly and unambiguously acknowledges and consents (where required under applicable law) to the collection, use, processing and transfer of personal data as described in this paragraphAgreement and any other Award grant materials by and among, as applicable, the Company, its Subsidiaries and/or the Grantee's employer for the purpose of implementing, administering and managing the Grantee's participation in the Plan. The Company and the Employer Grantee’s employer hold certain personal information about the Grantee, including name, home address, email address and telephone number, date of birth, social security number, passport number or other employee identification number, salary, nationality, job title, any Shares or directorships held in the Company, details of all Awards or any other entitlement to Shares awarded, canceled, purchased, vested, unvested or outstanding in Grantee’s favor, for the purpose of managing and administering the Plan (“Data”). The Data may be provided by the Grantee or collected, where lawful, from third parties, and the Company will process the Data for the exclusive purpose of implementing, administering and managing the Grantee’s participation in the Plan. The Data processing will take place through electronic and non-electronic means according to logics and procedures strictly correlated to the purposes for which Data are collected and with confidentiality and security provisions as set forth by applicable laws and regulations in the Grantee’s country of residence. Data processing operations will be performed minimizing the use of personal and identification data when such operations are unnecessary for the processing purposes sought. Data will be accessible within the Company’s organization only by those persons requiring access for purposes of the implementation, administration and operation of the Plan and for the Grantee’s participation in the Plan. The Company and the Employer Grantee’s employer will transfer Data amongst themselves as necessary for the purpose of implementation, administration and management of the Grantee’s participation in the Plan, and the Company and the Employer Grantee’s employer may each further transfer Data to any third parties assisting the Company in the implementation, administration and management of the Plan. These recipients may be located in the European Economic Area, or elsewhere throughout the world, such as the United States. The Grantee hereby authorizes (where required under applicable law) them to receive, possess, use, retain and transfer the Data, in electronic or other form, for purposes of implementing, administering and managing the Grantee’s participation in the Plan, including any requisite transfer of such Data as may be required for the administration of the Plan and/or the subsequent holding of Shares on the Grantee’s behalf to a broker or other third party with whom the Grantee may elect to deposit any Shares acquired pursuant to the Plan. The Grantee may, at any time, exercise his or her rights provided under applicable personal data protection laws, which may include the right to (a) obtain confirmation as to the existence of the Data, (b) verify the content, origin and accuracy of the Data, (c) request the integration, update, amendment, deletion, or blockage (for breach of applicable laws) of the Data, and (d) to oppose, for legal reasons, the collection, processing or transfer of the Data which is not necessary or required for the implementation, administration and/or operation of the Plan and the Grantee’s participation in the Plan. The Grantee may seek to exercise these rights by contacting the Grantee’s local human resources manager.

Consent to Collection, Processing and Transfer of Personal Data. (a) Pursuant to applicable personal data protection laws, the Company and the Employer (if different) hereby notifies notify the Grantee Participant of the following in relation to the GranteeParticipant’s personal data and the collection, processing and transfer of such data in relation to the Company’s grant of this Award and the GranteeParticipant’s participation in the Plan. The collection, processing and transfer of the GranteeParticipant’s personal data is are necessary for the Company’s administration of the Plan and the GranteeParticipant’s participation in the Plan. The GranteeParticipant’s denial and/or objection to the collection, processing and transfer of personal data may affect the GranteeParticipant’s participation in the Plan. As such, the Grantee The Participant voluntarily acknowledges and consents (where required under applicable law) to the collection, use, processing and transfer of personal data as described in this paragraph. herein. (b) The Company and the Employer (if different) hold certain personal information about the GranteeParticipant, including the Participant’s name, home address and telephone number, date of birth, social security number or other employee identification number, salary, nationality, job title, any Shares or directorships held in the Company, details of all Awards awards or any other entitlement to Shares awarded, canceled, purchased, vested, unvested or outstanding in Granteethe Participant’s favor, for the purpose of managing and administering the Plan (“Data”). The Data may be provided by the Grantee Participant or collected, where lawful, from third parties, and the Company and Employer (if different) will process the Data for the exclusive purpose of implementing, administering and managing the GranteeParticipant’s participation in the Plan. The Data processing will take place through electronic and non-electronic means according to logics and procedures strictly correlated to the purposes for which Data are collected and with confidentiality and security provisions as set forth by applicable laws and regulations in the GranteeParticipant’s country of residence. Data processing operations will be performed minimizing the use of personal and identification data when such operations are unnecessary for the processing purposes sought. Data will be accessible within the Company’s organization only by those persons requiring access for purposes of the implementation, administration and operation of the Plan and for the GranteeParticipant’s participation in the Plan. . (c) The Company and the Employer (if different) will transfer Data amongst themselves as necessary for the purpose of implementation, administration and management of the GranteeParticipant’s participation in the Plan, and the Company and the Employer may each further transfer Data to any third parties assisting the Company in the implementation, administration and management of the Plan. These recipients may be located in the European Economic Area, or elsewhere throughout the world, such as the United States. The Grantee Participant hereby authorizes (where required under applicable law) them to receive, possess, use, retain and transfer the Data, in electronic or other form, for purposes of implementing, administering and managing the GranteeParticipant’s participation in the Plan, including any requisite transfer of such Data as may be required for the administration of the Plan and/or the subsequent holding of Shares on the GranteeParticipant’s behalf to a broker or other third party with whom the Grantee Participant may elect to deposit any Shares acquired pursuant to the Plan. RSU Award Agreement with Net Income Hurdle 11 (d) The Grantee Participant may, at any time, exercise his or her rights provided under applicable personal data protection laws, which may include the right to (ai) obtain confirmation as to the existence of the Data, (bii) verify the content, origin and accuracy of the Data, (ciii) request the integration, update, amendment, deletion, or blockage (for breach of applicable laws) of the Data, and (div) to oppose, for legal reasons, the collection, processing or transfer of the Data which is not necessary or required for the implementation, administration and/or operation of the Plan and the GranteeParticipant’s participation in the Plan. The Grantee Participant may seek to exercise these rights by contacting the GranteeCompany’s local human resources managerCorporate Secretary’s Department.