Common use of Data Privacy Notice Clause in Contracts

Data Privacy Notice. This provision replaces Section 4 of the Additional Terms For All Non-U.S. Optionees in this Appendix: The Optionee understands that the Company and the Employer as a data processor of the Company may hold certain personal information about the Optionee, including, but not limited to, the Optionee’s name, home address and telephone number, date of birth, social insurance or other identification number, salary, nationality, job title, any shares of stock or directorships held in the Company or any subsidiary or affiliate, details of all options or any other entitlement to shares of stock awarded, canceled, exercised, vested, unvested or outstanding in the Optionee’s favor, and that the Company and the Employer will process said data and other data lawfully received from third parties (collectively, “Personal Data”) for the exclusive purpose of managing and administering the Plan and complying with applicable laws, regulations and legislation. The Optionee also understands that providing the Company with Personal Data is mandatory for compliance with laws and is necessary for the performance of the Plan and that the Optionee’s denial to provide Personal Data would make it impossible for the Company to perform its contractual obligations and may affect the Optionee’s ability to participate in the Plan. The Optionee understands that Personal Data will not be publicized, but it may be accessible by the Employer as a data processor of the Company and within the Employer’s organization by its internal and external personnel in charge of processing. Furthermore, Personal Data may be transferred to banks, other financial institutions or brokers involved in the management and administration of the Plan. The Optionee understands that Personal Data may also be transferred to the independent registered public accounting firm engaged by the Company, and also to the legitimate addressees under applicable laws. The Optionee further understands that the Company and its subsidiaries or affiliates will transfer Personal Data amongst themselves as necessary for the purpose of implementation, administration and management of the Optionee’s participation in the Plan, and that the Company and its subsidiaries or affiliates may each further transfer Personal Data to third parties assisting the Company in the implementation, administration and management of the Plan, including any requisite transfer of Personal Data to a broker or other third party with whom the Optionee may elect to deposit any shares acquired under the Plan or any proceeds from the sale of such shares. Such recipients may receive, possess, use, retain and transfer Personal Data in electronic or other form, for the purposes of implementing, administering and managing the Optionee’s participation in the Plan. The Optionee understands that these recipients may be acting as controllers, processors or persons in charge of processing, as the case may be, according to applicable privacy laws, and that they may be located in or outside the European Economic Area, such as in the United States or elsewhere, including countries that do not provide an adequate level of data protection as intended under Italian privacy law. Should the Company exercise its discretion in suspending all necessary legal obligations connected with the management and administration of the Plan, it will delete Personal Data as soon as it has accomplished all the necessary legal obligations connected with the management and administration of the Plan. The Optionee understands that Personal Data processing related to the purposes specified above shall take place under automated or non-automated conditions, anonymously when possible, that comply with the purposes for which Personal Data is collected and with confidentiality and security provisions as set forth by applicable laws and regulations, with specific reference to Legislative Decree no. 196/2003. The processing activity, including communication, the transfer of Personal Data abroad, including outside of the European Economic Area, as specified herein and pursuant to applicable laws and regulations, does not require the Optionee’s consent thereto as the processing is necessary to performance of law and contractual obligations related to implementation, administration and management of the Plan. The Optionee understands that, pursuant to Section 7 of the Legislative Decree no. 196/2003, he or she has the right at any moment to, including, but not limited to, obtain confirmation that Personal Data exists or not, access, verify its content, origin and accuracy, delete, update, integrate, correct, block or stop, for legitimate reason, the Personal Data processing. To exercise privacy rights the Optionee should address the Data Controller as defined in the employee privacy policy. Furthermore, the Optionee is aware that Personal Data will not be used for direct marketing purposes. In addition, Personal Data provided can be reviewed and questions or complaints can be addressed by contacting the Optionee’s human resources department. Plan Document Acknowledgment. By accepting the Option, the Optionee acknowledges that he or she has received a copy of the Plan, the Agreement and this Appendix and has reviewed the Plan, the Agreement and this Appendix in their entirety and fully accepts all provisions thereof. The Optionee further acknowledges that he or she has read and specifically and expressly approves (a) the following provisions of Exhibit A to the Agreement: (i) Section 9: No Right to Employment or Service; (ii) Section 15: Governing Law; Attorneys’ Fees; and (iii) Section 18: Appendix; (b) the following provisions of the Additional Terms For All Non-U.S. Optionees in this Appendix: (i) Section 2: Responsibility for Taxes; (ii) Section 3: Nature of Grant; and (iii) Section 5: Language; and (c) the Data Privacy Notice section set forth immediately above in this Appendix.

Data Privacy Notice. This The following provision replaces in its entirety Section 4 6 of the Additional Terms For All Non-U.S. Optionees and Conditions for Non‑U.S. Participants: Pursuant to Section 13 of Legislative decree 196/2003 (the "Privacy Code"), the Company informs Participant of the following in this Appendix: The Optionee relation to the collection, use and transfer, in electronic or other form, of Participant's personal data by and among, as applicable, the Employer and the Company exclusively for the purpose of implementing, administering, and managing Participant's participation in the Plan. Participant understands that the Company and the Employer as a data processor of the Company may hold certain personal information about the OptioneeParticipant, including, but not limited to, the Optionee’s Participant's name, home address and telephone number, date of birth, social insurance number or other identification numbernumber or code, salary, nationality, job title, e-mail address, designated beneficiary, any shares of stock Shares or directorships held in the Company or any subsidiary or affiliateCompany, details of all options awards or any other entitlement to shares of stock Shares awarded, canceled, exercised, vested, unvested or outstanding in Participant's favor ("Data"). Said Data will be processed by the Optionee’s favorCompany exclusively for the purpose of implementing, administering and managing the Plan. For example, Participant understands that the Data may be transferred to any third parties assisting in the implementation, administration and management of the Plan, that these recipients may be located in Participant's country or elsewhere, and that the Company recipient's country may have different data privacy laws and the Employer will process said data and other data lawfully received from third parties (collectively, “Personal Data”) for the exclusive purpose of managing and administering the Plan and complying with applicable laws, regulations and legislationprotections than Participant's country. The Optionee also understands Participant is aware that providing the Company with Personal the Data is mandatory for compliance with laws and is necessary for the performance implementation, administration and management of Participant's participation in the Plan and that the Optionee’s denial Participant's refusal to provide Personal such Data would make it impossible for the Company to perform its contractual obligations under the Plan and may affect the Optionee’s Participant's ability to participate in the Plan. According to Art. 3 of the Privacy Code (data minimization principle), the information systems and software are configured by minimizing the use of personal and identification data which are not necessary to meet the purposes for which Data have been collected. Participant is aware that Participant Data shall be accessible within the Company only by the persons who need to access it because of their duties and position in relation to the implementation, management and administration of Participant's participation in the Plan in their capacity as persons specifically charged with data processing operations by the Representative of the Controller as below specified and by the Data Processor, if appointed. The Optionee Controller of personal data processing is Xxxxx Xxxxxxxx at X.xx Xxxx Xxxx, 27 Casalecchio di Reno (Bo), Italy. Participant understands that Personal Data will not be publicized, but it may be accessible by the Employer as a data processor of the Company and within the Employer’s organization by its internal and external personnel in charge of processing. Furthermore, Personal Data may be transferred to banks, Xxxxxxx Xxxxx or such other financial institutions or brokers involved in the management and administration of the Plan. The Optionee understands that Personal Data may also be transferred to the independent registered public accounting firm engaged by the Company, and also to the legitimate addressees under applicable laws. The Optionee further understands that the Company and its subsidiaries or affiliates will transfer Personal Data amongst themselves as necessary for the purpose of implementation, administration and management of the Optionee’s participation in the Plan, and that the Company and its subsidiaries or affiliates may each further transfer Personal Data to third parties assisting the Company in the implementation, administration and management of the Plan, including any Participant's requisite transfer of Personal such Data as may be required to a broker or other third party with whom the Optionee Participant may elect to deposit any shares Shares acquired pursuant to Participant's participation in the Plan. The Data also may be communicated to other companies of the Company, to professionals, independent consultants and business partners of the Company, and to whomever is the legitimate addressee of communications as provided by applicable laws and regulations. The Data will under the Plan or any proceeds from the sale of such sharesno circumstances be further disseminated. Such recipients Furthermore, these recipients, who may receive, possess, use, retain and transfer Personal such Data in electronic as data Controller or other formProcessor, as applicable, for the purposes of implementingabove mentioned purposes, administering and managing the Optionee’s participation in the Plan. The Optionee understands that these recipients may be acting as controllers, processors or persons in charge of processing, as the case may be, according to applicable privacy laws, and that they may be located in or outside the European Economic Areaany country, such as in the United States or elsewhere, including countries that do not provide an adequate level of data protection as intended under Italian privacy law. Should the Company exercise its discretion in suspending all necessary legal obligations connected with the management and administration also outside of the PlanEuropean Union and the recipient's country may have different data privacy laws and protections than Participant's country. The processing activity, it will delete Personal including any communication, of the transfer of Data abroad, out of the European Union, as soon herein specified and pursuant to applicable laws and regulations, does not require Participant's consent thereto as it has accomplished all the processing is necessary legal to the performance of contractual obligations connected with related to the implementation, administration and management and administration of the Plan. The Optionee Participant understands that Personal Data processing related relating to the purposes specified above shall take place under automated automatised or non-automated conditions, anonymously when possible, automatised conditions that comply with the purposes for which Personal Data is are collected and with confidentiality and security provisions as set forth by applicable laws and regulations, with specific but not limited reference to Legislative Decree noAnnex B to the Privacy Code (Technical Specifications Concerning Minimum Security Measures). 196/2003. The processing activity, including communication, Participant understands that his or her Data will be held only as long as is required by the transfer of Personal Data abroad, including outside of the European Economic Area, as specified herein and pursuant to applicable laws and regulations, does not require the Optionee’s consent thereto as the processing law or is necessary to performance of law implement, administer and contractual obligations related to implementation, administration and management of manage Participant's participation in the Plan. The Optionee Participant understands that, pursuant to Section Art. 7 of the Legislative Decree no. D.lgd 196/2003, he or she Participant has the right at any moment to, including, but not limited to, obtain confirmation that Personal Data exists or notat any moment, to access, verify its content, origin and accuracy, delete, update, integrate, correct, block or stoprequest the rectification of Participant's Data and cease, for legitimate reasonreasons, the Personal Data date processing. To exercise privacy rights the Optionee should address the Data Controller as defined in the employee privacy policy. Furthermore, the Optionee Participant is aware that Personal his or her Data will not be used for direct marketing purposes. In addition, Personal the Data provided can be reviewed and questions or complaints can be addressed by contacting the Optionee’s human resources departmentRepresentative of the Controller as above specified. Plan Document Acknowledgment. By accepting the Option, the Optionee Participant acknowledges that he or she has received a copy of the Plan, the Agreement and this Appendix and has reviewed the Plan, the Agreement and this Appendix in their entirety and fully accepts all provisions thereof. The Optionee further acknowledges that he her or she has read and specifically and expressly approves (a) approve the following provisions of Exhibit A to the Agreement: (i) Section 9: No Right to Employment or Service; (ii) Section 15: Governing Law; Attorneys’ Fees; and (iii) Section 18: Appendix; (b) the following provisions sections of the Additional Plan and the Terms For All Non-U.S. Optionees in this Appendix: (i) Section 2: Responsibility and Conditions for Taxes; (ii) Section 3: Nature of Grant; and (iii) Section 5: Language; and (c) Non‑U.S. Participants, as well as the Data Privacy Notice section set forth immediately above in this Appendix.above. Notifications

Data Privacy Notice. This provision replaces Section 4 Participant hereby acknowledges that the collection, use and transfer, in electronic or other form, of Participant’s personal data as described in this Agreement and any other Restricted Stock grant materials by the Corporation (and its Subsidiaries) is necessary for the purpose of implementing, administering and managing Participant’s participation in the Plan. The Participant authorizes, agrees and unambiguously consents to the transmission by the Corporation (and its Subsidiaries) of any personal data information related to this Award for legitimate business purposes (including, without limitation, the administration of the Additional Terms For All Non-U.S. Optionees in this Appendix: The Optionee Plan). This authorization and consent is freely given by the Participant. Participant understands that the Company Corporation and the Employer as a data processor of the Company its Subsidiaries may hold certain personal information about the OptioneeParticipant, including, but not limited to, the OptioneeParticipant’s name, home address and telephone number, email address, date of birth, social insurance insurance, passport or other identification number (e.g., resident registration number), salary, nationality, job title, any shares of stock or directorships held in the Company or any subsidiary or affiliate, details of all options Restricted Stock or any other entitlement to shares of stock Common Stock awarded, canceled, exercised, vested, unvested or outstanding in the OptioneeParticipant’s favor, and that the Company and the Employer will process said data and other data lawfully received from third parties favor (collectively, “Personal Data”) for the exclusive purpose of managing and administering the Plan and complying with applicable laws), regulations and legislation. The Optionee also understands that providing the Company with Personal Data is mandatory for compliance with laws and is necessary for the performance of the Plan and that the Optionee’s denial to provide Personal Data would make it impossible for the Company to perform its contractual obligations and may affect the Optionee’s ability to participate in the Plan. The Optionee understands that Personal Data will not be publicized, but it may be accessible by the Employer as a data processor of the Company and within the Employer’s organization by its internal and external personnel in charge of processing. Furthermore, Personal Data may be transferred to banks, other financial institutions or brokers involved in the management and administration of the Plan. The Optionee understands that Personal Data may also be transferred to the independent registered public accounting firm engaged by the Company, and also to the legitimate addressees under applicable laws. The Optionee further understands that the Company and its subsidiaries or affiliates will transfer Personal Data amongst themselves as necessary for the purpose of implementationimplementing, administration administering and management of managing the Optionee’s participation Plan. Participant understands that Data will be transferred to Xxxxxxx Lynch, Pierce, Xxxxxx & Xxxxx Inc., and its related companies (“Xxxxxxx Xxxxx”) or any stock plan service provider as may be selected by the Corporation in the Planfuture, and that the Company and its subsidiaries or affiliates may each further transfer Personal Data to third parties which is assisting the Company in Corporation with the implementation, administration and management of the Plan. Participant understands that the recipients of the Data may be located in the United States or elsewhere, including and that the recipients’ country of operation (e.g., the United States) may have different data privacy laws and protections than Participant’s country. Participant understands that if he or she resides outside the United States, he or she may request a list with the names and addresses of any requisite transfer potential recipients of Personal the Data to a broker by contacting his or her local human resources representative. The Corporation, Xxxxxxx Xxxxx, any stock plan service provider selected by the Corporation and any other third party possible recipients which may assist the Corporation (presently or in the future) with whom the Optionee may elect to deposit any shares acquired under implementing, administering and managing the Plan or any proceeds from the sale of such shares. Such recipients may receive, possess, use, retain and transfer Personal Data the Data, in electronic or other form, for the purposes sole purpose of implementing, administering and managing the Optionee’s his or her participation in the Plan. The Optionee Participant understands that these recipients may Data will be acting held only as controllers, processors or persons in charge of processing, long as the case may be, according to applicable privacy laws, and that they may be located in or outside the European Economic Area, such as in the United States or elsewhere, including countries that do not provide an adequate level of data protection as intended under Italian privacy law. Should the Company exercise its discretion in suspending all necessary legal obligations connected with the management and administration of the Plan, it will delete Personal Data as soon as it has accomplished all the necessary legal obligations connected with the management and administration of the Plan. The Optionee understands that Personal Data processing related to the purposes specified above shall take place under automated or non-automated conditions, anonymously when possible, that comply with the purposes for which Personal Data is collected and with confidentiality and security provisions as set forth by applicable laws and regulations, with specific reference to Legislative Decree no. 196/2003. The processing activity, including communication, the transfer of Personal Data abroad, including outside of the European Economic Area, as specified herein and pursuant to applicable laws and regulations, does not require the Optionee’s consent thereto as the processing is necessary to performance of law implement, administer and contractual obligations related to implementation, administration and management of the Plan. The Optionee understands that, pursuant to Section 7 of the Legislative Decree no. 196/2003, he or she has the right at any moment to, including, but not limited to, obtain confirmation that Personal Data exists or not, access, verify its content, origin and accuracy, delete, update, integrate, correct, block or stop, for legitimate reason, the Personal Data processing. To exercise privacy rights the Optionee should address the Data Controller as defined manage Participant’s participation in the employee privacy policyPlan plus any required period thereafter for purposes of complying with data retention policies and procedures. FurthermoreParticipant understands that based on where s/he resides, s/he may have additional rights with respect to personal data collected, used or transferred in connection with this Agreement or any other Restricted Stock grant materials by the Optionee is aware that Personal Data will not be used for direct marketing purposes. In additionCorporation (and its Subsidiaries), Personal Data provided can be reviewed and questions Participant may contact in writing his or complaints can be addressed by contacting the Optionee’s her local human resources department. Plan Document Acknowledgment. By accepting the Option, the Optionee acknowledges that he or she has received a copy of the Plan, the Agreement and this Appendix and has reviewed the Plan, the Agreement and this Appendix in their entirety and fully accepts all provisions thereof. The Optionee further acknowledges that he or she has read and specifically and expressly approves (a) the following provisions of Exhibit A to the Agreement: (i) Section 9: No Right to Employment or Service; (ii) Section 15: Governing Law; Attorneys’ Fees; and (iii) Section 18: Appendix; (b) the following provisions of the Additional Terms For All Non-U.S. Optionees in this Appendix: (i) Section 2: Responsibility for Taxes; (ii) Section 3: Nature of Grant; and (iii) Section 5: Language; and (c) the Data Privacy Notice section set forth immediately above in this Appendixrepresentative.

Data Privacy Notice. This provision section replaces Section 4 22 of the Additional Terms For All Non-U.S. Optionees in this AppendixAgreement: The Optionee understands You understand that the Company and the Employer as a data processor are the privacy representatives of the Company in Italy and may hold certain personal information about the Optioneeyou, including, but not limited to, the Optionee’s your name, home address and telephone number, date of birth, social insurance or other identification number, salary, nationality, job title, any shares of stock Shares or directorships held in the Company or any subsidiary or affiliatesubsidiaries, details of all options Performance Share Units or any other entitlement to shares of stock Shares awarded, canceled, exercised, vested, unvested or outstanding in the Optionee’s your favor, and that the Company and the Employer will process said data and other data lawfully received from third parties (collectively, “Personal Data”) for the exclusive purpose of managing and administering the Plan and complying with applicable laws, regulations and Community legislation. The Optionee You also understands understand that providing the Company with Personal Data is mandatory for compliance with laws and is necessary for the performance of the Plan and that the Optionee’s your denial to provide Personal Data would make it impossible for the Company to perform its contractual obligations and may affect the Optionee’s your ability to participate in the Plan. The Optionee understands You understand that Personal Data will not be publicized, but it may be accessible by the Employer as a data processor the privacy representative of the Company and within the Employer’s organization by its internal and external personnel in charge of processing, and by Xxxxxx Xxxxxxx Xxxxx Xxxxxx or any other data processor appointed by the Company. The updated list of processors and of the subjects to which Data are communicated will remain available upon request from the Employer. Furthermore, Personal Data may be transferred to banks, other financial institutions or brokers involved in the management and administration of the Plan. The Optionee understands You understand that Personal Data may also be transferred to the independent registered public accounting firm engaged by the Company, and also to the legitimate addressees under applicable laws. The Optionee You further understands understand that the Company and its subsidiaries or affiliates will transfer Personal Data amongst themselves as necessary for the purpose of implementation, administration and management of the Optionee’s your participation in the Plan, and that the Company and its subsidiaries or affiliates may each further transfer Personal Data to third parties assisting the Company in the implementation, administration and management of the Plan, including any requisite transfer of Personal Data to a broker Xxxxxx Xxxxxxx Xxxxx Xxxxxx or other third party with whom the Optionee you may elect to deposit any shares Shares acquired under the Plan or any proceeds from the sale of such sharesShares. Such recipients may receive, possess, use, retain and transfer Personal Data in electronic or other form, for the purposes of implementing, administering and managing the Optionee’s your participation in the Plan. The Optionee understands You understand that these recipients may be acting as controllers, processors or persons in charge of processing, as the case may be, according to applicable privacy laws, and that they may be located in or outside the European Economic Area, such as in the United States or elsewhere, including in countries that do not provide an adequate level of data protection as intended under Italian privacy law. Should the Company exercise its discretion in suspending all necessary legal obligations connected with the management and administration of the Plan, it will delete Personal Data as soon as it has accomplished all the necessary legal obligations connected with the management and administration of the Plan. The Optionee understands You understand that Personal Data processing related to the purposes specified above shall take place under automated or non-automated conditions, anonymously when possible, that comply with the purposes for which Personal Data is collected and with confidentiality and security provisions as set forth by applicable laws and regulations, with specific reference to Legislative Decree no. 196/2003. The processing activity, including communication, the transfer of Personal Data abroad, including outside of the European Economic Area, as specified herein and pursuant to applicable laws and regulations, does not require the Optionee’s your consent thereto as the processing is necessary to performance of law and contractual obligations related to implementation, administration and management of the Plan. The Optionee understands You understand that, pursuant to Section section 7 of the Legislative Decree no. 196/2003, he or she has you have the right at any moment to, including, but not limited to, obtain confirmation that Personal Data exists or not, access, verify its contentcontents, origin and accuracy, delete, update, integrate, correct, block or stop, for legitimate reason, the Personal Data processing. To exercise privacy rights rights, you should contact the Optionee should address the Data Controller as defined in the employee privacy policyEmployer. Furthermore, the Optionee is you are aware that Personal Data will not be used for direct marketing purposes. In addition, Personal Data provided can be reviewed and questions or complaints can be addressed by contacting the Optionee’s your human resources department. Plan Document Acknowledgment. By accepting the Option, the Optionee acknowledges that he or she has received a copy of the Plan, the Agreement and this Appendix and has reviewed the Plan, the Agreement and this Appendix in their entirety and fully accepts all provisions thereof. The Optionee further acknowledges that he or she has read and specifically and expressly approves (a) the following provisions of Exhibit A to the Agreement: (i) Section 9: No Right to Employment or Service; (ii) Section 15: Governing Law; Attorneys’ Fees; and (iii) Section 18: Appendix; (b) the following provisions of the Additional Terms For All Non-U.S. Optionees in this Appendix: (i) Section 2: Responsibility for Taxes; (ii) Section 3: Nature of Grant; and (iii) Section 5: Language; and (c) the Data Privacy Notice section set forth immediately above in this Appendix.

Data Privacy Notice. This provision section replaces Section 4 16 of the Additional Terms For All Non-U.S. Optionees in this AppendixAgreement: The Optionee understands You understand that the Company and the Employer as a data processor are the privacy representatives of the Company in Italy and may hold certain personal information about the Optioneeyou, including, but not limited to, the Optionee’s your name, home address and telephone number, date of birth, social insurance or other identification number, salary, nationality, job title, any shares of stock Common Stock or directorships held in the Company or any subsidiary or affiliatesubsidiaries, details of all options MSUs or any other entitlement to shares of stock Common Stock awarded, canceled, exercised, vested, unvested or outstanding in the Optionee’s your favor, and that the Company and the Employer will process said data and other data lawfully received from third parties (collectively, “Personal Data”) for the exclusive purpose of managing and administering the Plan and complying with applicable laws, regulations and Community legislation. The Optionee You also understands understand that providing the Company with Personal Data is mandatory for compliance with laws and is necessary for the performance of the Plan and that the Optionee’s your denial to provide Personal Data would make it impossible for the Company to perform its contractual obligations and may affect the Optionee’s your ability to participate in the Plan. The Optionee understands You understand that Personal Data will not be publicized, but it may be accessible by the Employer as a data processor the privacy representative of the Company and within the Employer’s organization by its internal and external personnel in charge of processing, and by Xxxxxx Xxxxxxx Xxxxx Xxxxxx or any other data processor appointed by the Company. The updated list of processors and of the subjects to which Data are communicated will remain available upon request from the Employer. Furthermore, Personal Data may be transferred to banks, other financial institutions or brokers involved in the management and administration of the Plan. The Optionee understands You understand that Personal Data may also be transferred to the independent registered public accounting firm engaged by the Company, and also to the legitimate addressees under applicable laws. The Optionee You further understands understand that the Company and its subsidiaries or affiliates will transfer Personal Data amongst themselves as necessary for the purpose of implementation, administration and management of the Optionee’s your participation in the Plan, and that the Company and its subsidiaries or affiliates may each further transfer Personal Data to third parties assisting the Company in the implementation, administration and management of the Plan, including any requisite transfer of Personal Data to a broker Xxxxxx Xxxxxxx Xxxxx Xxxxxx or other third party with whom the Optionee you may elect to deposit any shares of Common Stock acquired under the Plan or any proceeds from the sale of such sharesCommon Stock. Such recipients may receive, possess, use, retain and transfer Personal Data in electronic or other form, for the purposes of implementing, administering and managing the Optionee’s your participation in the Plan. The Optionee understands You understand that these recipients may be acting as controllers, processors or persons in charge of processing, as the case may be, according to applicable privacy laws, and that they may be located in or outside the European Economic Area, such as in the United States or elsewhere, including in countries that do not provide an adequate level of data protection as intended under Italian privacy law. Should the Company exercise its discretion in suspending all necessary legal obligations connected with the management and administration of the Plan, it will delete Personal Data as soon as it has accomplished all the necessary legal obligations connected with the management and administration of the Plan. The Optionee understands You understand that Personal Data processing related to the purposes specified above shall take place under automated or non-automated conditions, anonymously when possible, that comply with the purposes for which Personal Data is collected and with confidentiality and security provisions as set forth by applicable laws and regulations, with specific reference to Legislative Decree no. 196/2003. The processing activity, including communication, the transfer of Personal Data abroad, including outside of the European Economic Area, as specified herein and pursuant to applicable laws and regulations, does not require the Optionee’s your consent thereto as the processing is necessary to performance of law and contractual obligations related to implementation, administration and management of the Plan. The Optionee understands You understand that, pursuant to Section section 7 of the Legislative Decree no. 196/2003, he or she has you have the right at any moment to, including, but not limited to, obtain confirmation that Personal Data exists or not, access, verify its contentcontents, origin and accuracy, delete, update, integrate, correct, block or stop, for legitimate reason, the Personal Data processing. To exercise privacy rights rights, you should contact the Optionee should address the Data Controller as defined in the employee privacy policyEmployer. Furthermore, the Optionee is you are aware that Personal Data will not be used for direct marketing purposes. In addition, Personal Data provided can be reviewed and questions or complaints can be addressed by contacting the Optionee’s your human resources department. Plan Document Acknowledgment. By accepting the Option, the Optionee acknowledges that he or she has received a copy of the Plan, the Agreement and this Appendix and has reviewed the Plan, the Agreement and this Appendix in their entirety and fully accepts all provisions thereof. The Optionee further acknowledges that he or she has read and specifically and expressly approves (a) the following provisions of Exhibit A to the Agreement: (i) Section 9: No Right to Employment or Service; (ii) Section 15: Governing Law; Attorneys’ Fees; and (iii) Section 18: Appendix; (b) the following provisions of the Additional Terms For All Non-U.S. Optionees in this Appendix: (i) Section 2: Responsibility for Taxes; (ii) Section 3: Nature of Grant; and (iii) Section 5: Language; and (c) the Data Privacy Notice section set forth immediately above in this Appendix.

Data Privacy Notice. This provision section replaces Section 4 Paragraph 7 of the Additional Terms For All Non-U.S. Optionees in this AppendixAgreement: The Optionee understands You understand that the Company and the Employer as a data processor are the privacy representative of the Company in Italy and may hold certain personal information about the Optioneeyou, including, but not limited to, the Optionee’s your name, home address and telephone number, date of birth, social insurance or other identification number, salary, nationality, job title, any shares of stock Stock or directorships held in the Company or any subsidiary Subsidiaries or affiliateaffiliates, details of all options Performance Units or any other entitlement to shares of stock Stock awarded, canceled, exercised, vested, unvested or outstanding in the Optionee’s your favor, and that the Company and the Employer will process said data and other data lawfully received from third parties (collectively, “Personal Data”) for the exclusive purpose of managing and administering the Plan and complying with applicable laws, regulations and Community legislation. The Optionee You also understands understand that providing the Company with Personal Data is mandatory for compliance with laws and is necessary for the performance of the Plan and that the Optionee’s your denial to provide Personal Data would make it impossible for the Company to perform its contractual obligations and may affect the Optionee’s your ability to participate in the Plan. The Optionee understands You understand that Personal Data will not be publicized, but it may be accessible by the Employer as a data processor the privacy representative of the Company and within the Employer’s organization by its internal and external personnel in charge of processing, and by Xxxxx Xxxxxx or any other data processor appointed by the Company. The updated list of processors and of the subjects to which Data are communicated will remain available upon request from the Employer. Furthermore, Personal Data may be transferred to banks, other financial institutions or brokers involved in the management and administration of the Plan. The Optionee understands You understand that Personal Data also may also be transferred to the independent registered public accounting firm engaged by the Company, and also to the legitimate addressees under applicable laws. The Optionee You further understands understand that the Company and its subsidiaries Subsidiaries or affiliates will transfer Personal Data amongst themselves as necessary for the purpose of implementation, administration and management of the Optionee’s your participation in the Plan, and that the Company and its subsidiaries Subsidiaries or affiliates may each further transfer Personal Data to third parties assisting the Company in the implementation, administration and management of the Plan, including any requisite transfer of Personal Data to a broker Xxxxx Xxxxxx or other third party with whom the Optionee you may elect to deposit any shares acquired under the Plan or any proceeds from the sale of such sharesparticipation in the Plan. Such recipients may receive, possess, use, retain and transfer Personal Data in electronic or other form, for the purposes of implementing, administering and managing the Optionee’s your participation in the Plan. The Optionee understands You understand that these recipients may be acting as controllers, processors or persons in charge of processing, as the case may be, according to applicable privacy laws, and that they may be located in or outside the European Economic Area, such as in the United States or elsewhere, including in countries that do not provide an adequate level of data protection as intended under Italian privacy law. Should the Company exercise its discretion in suspending all necessary legal obligations connected with the management and administration of the Plan, it will delete Personal Data as soon as it has accomplished all the necessary legal obligations connected with the management and administration of the Plan. The Optionee understands US/INTERNATIONAL EMPLOYEE (EXHIBIT B) You understand that Personal Data processing related to the purposes specified above shall take place under automated or non-automated conditions, anonymously when possible, that comply with the purposes for which Personal Data is collected and with confidentiality and security provisions as set forth by applicable laws and regulations, with specific reference to Legislative Decree no. 196/2003. The processing activity, including communication, the transfer of Personal Data abroad, including outside of the European Economic Area, as specified herein and pursuant to applicable laws and regulations, does not require the Optionee’s your consent thereto as the processing is necessary to performance of law and contractual obligations related to implementation, administration and management of the Plan. The Optionee understands You understand that, pursuant to Section section 7 of the Legislative Decree no. 196/2003, he or she has you have the right at any moment to, including, but not limited to, obtain confirmation that Personal Data exists or not, access, verify its contentcontents, origin and accuracy, delete, update, integrate, correct, block blocked or stop, for legitimate reason, the Personal Data processing. To exercise privacy rights rights, you should contact the Optionee should address the Data Controller as defined in the employee privacy policyEmployer. Furthermore, the Optionee is you are aware that Personal Data will not be used for direct marketing purposes. In addition, Personal Data provided can be reviewed and questions or complaints can be addressed by contacting the Optionee’s your human resources department. Plan Document Acknowledgment. By accepting the Option, the Optionee acknowledges that he or she has received a copy of the Plan, the Agreement and this Appendix and has reviewed the Plan, the Agreement and this Appendix in their entirety and fully accepts all provisions thereof. The Optionee further acknowledges that he or she has read and specifically and expressly approves (a) the following provisions of Exhibit A to the Agreement: (i) Section 9: No Right to Employment or Service; (ii) Section 15: Governing Law; Attorneys’ Fees; and (iii) Section 18: Appendix; (b) the following provisions of the Additional Terms For All Non-U.S. Optionees in this Appendix: (i) Section 2: Responsibility for Taxes; (ii) Section 3: Nature of Grant; and (iii) Section 5: Language; and (c) the Data Privacy Notice section set forth immediately above in this Appendix.

Data Privacy Notice. This The following provision replaces Section 4 in its entirety paragraph 10 of the Additional Terms For All Non-U.S. Optionees in this AppendixAgreement: The Optionee Participant understands that the Company and the Employer as a data processor of the Company Mondelēz Group may hold and process certain personal information about the OptioneeParticipant, including, but not limited to, the OptioneeParticipant’s name, home address, email address and telephone number, date of birth, social insurance (to the extent permitted under Italian law), passport or other identification number, salary, nationality, job title, any shares of stock Common Stock or directorships held in the Company or any subsidiary or affiliateMondelēz Group, details of all options LTI Grants or any other entitlement to shares of stock Common Stock granted, awarded, canceled, exercised, vested, unvested or outstanding in the OptioneeParticipant’s favor, and that the Company and the Employer will process said data and other data lawfully received from third parties (collectively, “Personal Data”) for the exclusive purpose of implementing, managing and administering the Plan and complying with applicable laws, regulations and legislation(“Data”). The Optionee Participant also understands that providing the Company with Personal Data is mandatory for compliance with laws and is necessary for the performance of the Plan and that the OptioneeParticipant’s denial refusal to provide Personal such Data would make it impossible for the Company to perform its contractual obligations and may affect the OptioneeParticipant’s ability to participate in the Plan. The Optionee Controller of personal data processing is Mondelēz International, Inc., with registered offices at Xxxxx Xxxxxxx Xxxxx, Xxxxxxxxx, Xxxxxxxx 00000, Xxxxxx Xxxxxx of America, and, pursuant to Legislative Decree no. 196/2003, its representative in Italy is, Mondelēz Italia S.r.L. Xxx Xxxxxxx, 0, Xxxxxx, Xxxxx 00000. The Participant understands that Personal Data will not be publicized, but it may be accessible by the Employer as a data processor of the Company and within the Employer’s organization by its internal and external personnel in charge of processing. Furthermore, Personal Data may be transferred to banks, other financial institutions or brokers involved in the management and administration of the Plan. The Optionee Participant understands that Personal Data may also be transferred to the Company’s stock plan service provider, UBS Financial Services, Inc. or such other administrator that may be engaged by the Company in the future. The Participant understands that Data may also be transferred to the Company’s independent registered public accounting firm, PricewaterhouseCoopers LLP, KPMG LLP or such other public accounting firm that may be engaged by the Company, and also to Company in the legitimate addressees under applicable lawsfuture. The Optionee Participant further understands that the Company and its subsidiaries or affiliates Mondelēz Group will transfer Personal Data amongst among themselves as necessary for the purpose of implementationimplementing, administration administering and management of managing the OptioneeParticipant’s participation in the Plan, and that the Company and its subsidiaries or affiliates Mondelēz Group may each further transfer Personal Data to third parties assisting the Company in the implementation, administration and management of the Plan, including any requisite transfer of Personal Data to a broker or other third party with whom the Optionee Participant may elect to deposit any shares of Common Stock acquired under at vesting of the Plan or any proceeds from the sale of such sharesLTI Grant. Such recipients may receive, possess, use, retain and transfer Personal Data in electronic or other form, for the purposes of implementing, administering and managing the OptioneeParticipant’s participation in the Plan. The Optionee Participant understands that these recipients may be acting as controllers, processors or persons in charge of processing, as the case may be, according to applicable privacy laws, and that they may be located in or outside the European Economic Area, such as in the United States or elsewhere, including countries that do not provide an adequate level of data protection as intended under Italian privacy law. Should the Company exercise its discretion in suspending all necessary legal obligations connected with the management and administration of the Plan, it will delete Personal Data as soon as it has accomplished completed all the necessary legal obligations connected with the management and administration of the Plan. The Optionee Participant understands that Personal Data Data-processing related to the purposes specified above shall take place under automated or non-automated conditions, anonymously when possible, that comply with the purposes for which Personal Data is collected and with confidentiality and security provisions provisions, as set forth by applicable laws and regulations, with specific reference to Legislative Decree no. 196/2003. The processing activity, including communication, the transfer of Personal Data abroad, including outside of the European Economic Area, as herein specified herein and pursuant to applicable laws and regulations, does not require the OptioneeParticipant’s consent thereto as the processing is necessary to performance of law and contractual obligations related to implementation, administration and management of the Plan, which represents the legal basis for the processing. The Optionee Participant understands that, pursuant to Section 7 of the Legislative Decree no. 196/2003, he or she the Participant has the right at any moment to, including, including but not limited to, obtain confirmation that Personal Data exists or not, access, verify its content, origin and accuracy, delete, update, integrate, correct, block correct or stopterminate, for legitimate reason, the Personal Data processing. To exercise privacy rights The Participant also understands that they have the Optionee should address right to data portability and to lodge a complaint with the Data Controller as defined in the employee privacy policyItalian supervisory authority. Furthermore, the Optionee Participant is aware that Personal Data will not be used for direct marketing purposes. In addition, Personal Data provided can be reviewed and questions or complaints can be addressed by contacting the OptioneeParticipant’s local human resources department. Plan Document Acknowledgment. By accepting the Option, the Optionee acknowledges that he or she has received a copy of the Plan, the Agreement and this Appendix and has reviewed the Plan, the Agreement and this Appendix in their entirety and fully accepts all provisions thereof. The Optionee further acknowledges that he or she has read and specifically and expressly approves (a) the following provisions of Exhibit A to the Agreement: (i) Section 9: No Right to Employment or Service; (ii) Section 15: Governing Law; Attorneys’ Fees; and (iii) Section 18: Appendix; (b) the following provisions of the Additional Terms For All Non-U.S. Optionees in this Appendix: (i) Section 2: Responsibility for Taxes; (ii) Section 3: Nature of Grant; and (iii) Section 5: Language; and (c) the Data Privacy Notice section set forth immediately above in this Appendixrepresentative.

Data Privacy Notice. This provision section replaces Section 4 16 of the Additional Terms For All Non-U.S. Optionees in this AppendixAgreement: The Optionee understands You understand that the Company and the Employer as a data processor are the privacy representatives of the Company in Italy and may hold certain personal information about the Optioneeyou, including, but not limited to, the Optionee’s your name, home address and telephone number, date of birth, social insurance or other identification number, salary, nationality, job title, any shares of stock Common Stock or directorships held in the Company or any subsidiary or affiliatesubsidiaries, details of all options RSUs or any other entitlement to shares of stock Common Stock awarded, canceled, exercised, vested, unvested or outstanding in the Optionee’s your favor, and that the Company and the Employer will process said data and other data lawfully received from third parties (collectively, “Personal Data”) for the exclusive purpose of managing and administering the Plan and complying with applicable laws, regulations and Community legislation. The Optionee You also understands understand that providing the Company with Personal Data is mandatory for compliance with laws and is necessary for the performance of the Plan and that the Optionee’s your denial to provide Personal Data would make it impossible for the Company to perform its contractual obligations and may affect the Optionee’s your ability to participate in the Plan. The Optionee understands You understand that Personal Data will not be publicized, but it may be accessible by the Employer as a data processor the privacy representative of the Company and within the Employer’s organization by its internal and external personnel in charge of processing, and by Morgan Stanley Smith Barney or any other xxxx pxxxxxxxx xxxxixxxx xy the Company. The updated list of processors and of the subjects to which Data are communicated will remain available upon request from the Employer. Furthermore, Personal Data may be transferred to banks, other financial institutions or brokers involved in the management and administration of the Plan. The Optionee understands You understand that Personal Data may also be transferred to the independent registered public accounting firm engaged by the Company, and also to the legitimate addressees under applicable laws. The Optionee You further understands understand that the Company and its subsidiaries or affiliates will transfer Personal Data amongst themselves as necessary for the purpose of implementation, administration and management of the Optionee’s your participation in the Plan, and that the Company and its subsidiaries or affiliates may each further transfer Personal Data to third parties assisting the Company in the implementation, administration and management of the Plan, including any requisite transfer of Personal Data to a broker Morgan Stanley Smith Barney or other third party with whom the Optionee may thixx xxxtx xxxx xxxx xox xxx elect to deposit any shares of Common Stock acquired under the Plan or any proceeds from the sale of such sharesCommon Stock. Such recipients may receive, possess, use, retain and transfer Personal Data in electronic or other form, for the purposes of implementing, administering and managing the Optionee’s your participation in the Plan. The Optionee understands You understand that these recipients may be acting as controllers, processors or persons in charge of processing, as the case may be, according to applicable privacy laws, and that they may be located in or outside the European Economic Area, such as in the United States or elsewhere, including in countries that do not provide an adequate level of data protection as intended under Italian privacy law. Should the Company exercise its discretion in suspending all necessary legal obligations connected with the management and administration of the Plan, it will delete Personal Data as soon as it has accomplished all the necessary legal obligations connected with the management and administration of the Plan. The Optionee understands You understand that Personal Data processing related to the purposes specified above shall take place under automated or non-automated conditions, anonymously when possible, that comply with the purposes for which Personal Data is collected and with confidentiality and security provisions as set forth by applicable laws and regulations, with specific reference to Legislative Decree no. 196/2003. The processing activity, including communication, the transfer of Personal Data abroad, including outside of the European Economic Area, as specified herein and pursuant to applicable laws and regulations, does not require the Optionee’s your consent thereto as the processing is necessary to performance of law and contractual obligations related to implementation, administration and management of the Plan. The Optionee understands You understand that, pursuant to Section section 7 of the Legislative Decree no. 196/2003, he or she has you have the right at any moment to, including, but not limited to, obtain confirmation that Personal Data exists or not, access, verify its contentcontents, origin and accuracy, delete, update, integrate, correct, block or stop, for legitimate reason, the Personal Data processing. To exercise privacy rights rights, you should contact the Optionee should address the Data Controller as defined in the employee privacy policyEmployer. Furthermore, the Optionee is you are aware that Personal Data will not be used for direct marketing purposes. In addition, Personal Data provided can be reviewed and questions or complaints can be addressed by contacting the Optionee’s your human resources department. Plan Document Acknowledgment. By accepting the Option, the Optionee acknowledges that he or she has received a copy of the Plan, the Agreement and this Appendix and has reviewed the Plan, the Agreement and this Appendix in their entirety and fully accepts all provisions thereof. The Optionee further acknowledges that he or she has read and specifically and expressly approves (a) the following provisions of Exhibit A to the Agreement: (i) Section 9: No Right to Employment or Service; (ii) Section 15: Governing Law; Attorneys’ Fees; and (iii) Section 18: Appendix; (b) the following provisions of the Additional Terms For All Non-U.S. Optionees in this Appendix: (i) Section 2: Responsibility for Taxes; (ii) Section 3: Nature of Grant; and (iii) Section 5: Language; and (c) the Data Privacy Notice section set forth immediately above in this Appendix.

Data Privacy Notice. This provision replaces Section 4 of the Additional Terms For All Non-U.S. Optionees in this Appendix: The Optionee understands that the Company and the Employer Employer, as a data processor of the Company Company, may hold certain personal information about the Optionee, including, but not limited to, the Optionee’s name, home address and telephone number, date of birth, social insurance or other identification number, salary, nationality, job title, any shares of stock or directorships held in the Company or any subsidiary or affiliate, details of all options or any other entitlement to shares of stock awarded, canceled, exercised, vested, unvested or outstanding in the Optionee’s favor, and that the Company and the Employer will process said data and other data lawfully received from third parties (collectively, “Personal Data”) for the exclusive purpose of managing and administering the Plan and complying with applicable laws, regulations and legislation. The Optionee also understands that providing the Company with Personal Data is mandatory for compliance with laws and is necessary for the performance of the Plan and that the Optionee’s denial to provide Personal Data would make it impossible for the Company to perform its contractual obligations and may affect the Optionee’s ability to participate in the Plan. The Optionee understands that Personal Data will not be publicized, but it may be accessible by the Employer as a data processor of the Company and within the Employer’s organization by its 6557803-v18\GESDMS internal and external personnel in charge of processing. Furthermore, Personal Data may be transferred to banks, other financial institutions or brokers involved in the management and administration of the Plan. The Optionee understands that Personal Data may also be transferred to the independent registered public accounting firm engaged by the Company, and also to the legitimate addressees under applicable laws. The Optionee further understands that the Company and its subsidiaries or affiliates will transfer Personal Data amongst themselves as necessary for the purpose of implementation, administration and management of the Optionee’s participation in the Plan, and that the Company and its subsidiaries or affiliates may each further transfer Personal Data to third parties assisting the Company in the implementation, administration and management of the Plan, including any requisite transfer of Personal Data to a broker or other third party with whom the Optionee may elect to deposit any shares acquired under the Plan or any proceeds from the sale of such shares. Such recipients may receive, possess, use, retain and transfer Personal Data in electronic or other form, for the purposes of implementing, administering and managing the Optionee’s participation in the Plan. The Optionee understands that these recipients may be acting as controllers, processors or persons in charge of processing, as the case may be, according to applicable privacy laws, and that they may be located in or outside the European Economic Area, such as in the United States or elsewhere, including countries that do not provide an adequate level of data protection as intended under Italian privacy law. Should the Company exercise its discretion in suspending all necessary legal obligations connected with the management and administration of the Plan, it will delete Personal Data as soon as it has accomplished all the necessary legal obligations connected with the management and administration of the Plan. The Optionee understands that Personal Data processing related to the purposes specified above shall take place under automated or non-automated conditions, anonymously when possible, that comply with the purposes for which Personal Data is collected and with confidentiality and security provisions as set forth by applicable laws and regulations, with specific reference to Legislative Decree no. 196/2003. The processing activity, including communication, the transfer of Personal Data abroad, including outside of the European Economic Area, as specified herein and pursuant to applicable laws and regulations, does not require the Optionee’s consent thereto as the processing is necessary to performance of law and contractual obligations related to implementation, administration and management of the Plan. The Optionee understands that, pursuant to Section 7 of the Legislative Decree no. 196/2003, he or she has the right at any moment to, including, but not limited to, obtain confirmation that Personal Data exists or not, access, verify its content, origin and accuracy, delete, update, integrate, correct, block or stop, for legitimate reason, the Personal Data processing. To exercise privacy rights the Optionee should address the Data Controller as defined in the employee privacy policy. Furthermore, the Optionee is aware that Personal Data will not be used for direct marketing purposes. In addition, Personal Data provided can be reviewed and questions or complaints can be addressed by contacting the Optionee’s human resources department. 6557803-v18\GESDMS Plan Document Acknowledgment. By accepting the Option, the Optionee acknowledges that he or she has received a copy of the Plan, the Agreement and this Appendix and has reviewed the Plan, the Agreement and this Appendix in their entirety and fully accepts all provisions thereof. The Optionee further acknowledges that he or she has read and specifically and expressly approves (a) the following provisions of Exhibit A to the Agreement: (i) Section 9: No Right to Employment or Service; (ii) Section 15: Governing Law; Attorneys’ Fees; and (iii) Section 18: Appendix; (b) the following provisions of the Additional Terms For All Non-U.S. Optionees in this Appendix: (i) Section 2: Responsibility for Taxes; (ii) Section 3: Nature of Grant; and (iii) Section 5: Language; and (c) the Data Privacy Notice section set forth immediately above in this Appendix.

Data Privacy Notice. This The following provision replaces in its entirety Section 4 6 of the Additional Terms For All Non-U.S. Optionees and Conditions for Non‑U.S. Participants: Pursuant to Section 13 of Legislative decree 196/2003 (the "Privacy Code"), the Company informs Participant of the following in this Appendix: The Optionee relation to the collection, use and transfer, in electronic or other form, of Participant’s personal data by and among, as applicable, the Employer and the Company exclusively for the purpose of implementing, administering, and managing Participant’s participation in the Plan. Participant understands that the Company and the Employer as a data processor of the Company may hold certain personal information about the OptioneeParticipant, including, but not limited to, the OptioneeParticipant’s name, home address and telephone number, date of birth, social insurance number or other identification numbernumber or code, salary, nationality, job title, e-mail address, designated beneficiary, any shares of stock Shares or directorships held in the Company or any subsidiary or affiliateCompany, details of all options awards or any other entitlement to shares of stock Shares awarded, canceled, exercised, vested, unvested or outstanding in Participant’s favor ("Data"). Said Data will be processed by the OptioneeCompany exclusively for the purpose of implementing, administering and managing the Plan. For example, Participant understands that the Data may be transferred to any third parties assisting in the implementation, administration and management of the Plan, that these recipients may be located in Participant’s favorcountry or elsewhere, and that the Company recipient’s country may have different data privacy laws and the Employer will process said data and other data lawfully received from third parties (collectively, “Personal Data”) for the exclusive purpose of managing and administering the Plan and complying with applicable laws, regulations and legislationprotections than Participant’s country. The Optionee also understands Participant is aware that providing the Company with Personal the Data is mandatory for compliance with laws and is necessary for the performance implementation, administration and management of Participant’s participation in the Plan and that the OptioneeParticipant’s denial refusal to provide Personal such Data would make it impossible for the Company to perform its contractual obligations under the Plan and may affect the OptioneeParticipant’s ability to participate in the Plan. According to Art. 3 of the Privacy Code (data minimization principle), the information systems and software are configured by minimizing the use of personal and identification data which are not necessary to meet the purposes for which Data have been collected. Participant is aware that Participant Data shall be accessible within the Company only by the persons who need to access it because of their duties and position in relation to the implementation, management and administration of Participant’s participation in the Plan in their capacity as persons specifically charged with data processing operations by the Representative of the Controller as below specified and by the Data Processor, if appointed. The Optionee Controller of personal data processing is Xxxxx Xxxxxxxx at X.xx Xxxx Xxxx, 27 Casalecchio di Reno (Bo), Italy. Participant understands that Personal Data will not be publicized, but it may be accessible by the Employer as a data processor of the Company and within the Employer’s organization by its internal and external personnel in charge of processing. Furthermore, Personal Data may be transferred to banks, Xxxxxxx Xxxxx or such other financial institutions or brokers involved in the management and administration of the Plan. The Optionee understands that Personal Data may also be transferred to the independent registered public accounting firm engaged by the Company, and also to the legitimate addressees under applicable laws. The Optionee further understands that the Company and its subsidiaries or affiliates will transfer Personal Data amongst themselves as necessary for the purpose of implementation, administration and management of the Optionee’s participation in the Plan, and that the Company and its subsidiaries or affiliates may each further transfer Personal Data to third parties assisting the Company in the implementation, administration and management of the Plan, including any Participant’s requisite transfer of Personal such Data as may be required to a broker or other third party with whom the Optionee Participant may elect to deposit any shares Shares acquired pursuant to Participant’s participation in the Plan. The Data also may be communicated to other companies of the Company, to professionals, independent consultants and business partners of the Company, and to whomever is the legitimate addressee of communications as provided by applicable laws and regulations. The Data will under the Plan or any proceeds from the sale of such sharesno circumstances be further disseminated. Such recipients Furthermore, these recipients, who may receive, possess, use, retain and transfer Personal such Data in electronic as data Controller or other formProcessor, as applicable, for the purposes of implementingabove mentioned purposes, administering and managing the Optionee’s participation in the Plan. The Optionee understands that these recipients may be acting as controllers, processors or persons in charge of processing, as the case may be, according to applicable privacy laws, and that they may be located in or outside the European Economic Areaany country, such as in the United States or elsewhere, including countries that do not provide an adequate level of data protection as intended under Italian privacy law. Should the Company exercise its discretion in suspending all necessary legal obligations connected with the management and administration also outside of the PlanEuropean Union and the recipient’s country may have different data privacy laws and protections than Participant’s country. The processing activity, it will delete Personal including any communication, of the transfer of Data abroad, out of the European Union, as soon herein specified and pursuant to applicable laws and regulations, does not require Participant’s consent thereto as it has accomplished all the processing is necessary legal to the performance of contractual obligations connected with related to the implementation, administration and management and administration of the Plan. The Optionee Participant understands that Personal Data processing related relating to the purposes specified above shall take place under automated automatised or non-automated conditions, anonymously when possible, automatised conditions that comply with the purposes for which Personal Data is are collected and with confidentiality and security provisions as set forth by applicable laws and regulations, with specific but not limited reference to Legislative Decree noAnnex B to the Privacy Code (Technical Specifications Concerning Minimum Security Measures). 196/2003. The processing activity, including communication, Participant understands that his or her Data will be held only as long as is required by the transfer of Personal Data abroad, including outside of the European Economic Area, as specified herein and pursuant to applicable laws and regulations, does not require the Optionee’s consent thereto as the processing law or is necessary to performance of law implement, administer and contractual obligations related to implementation, administration and management of manage Participant’s participation in the Plan. The Optionee Participant understands that, pursuant to Section Art. 7 of the Legislative Decree no. D.lgd 196/2003, he or she Participant has the right at any moment to, including, but not limited to, obtain confirmation that Personal Data exists or notat any moment, to access, verify its content, origin and accuracy, delete, update, integrate, correct, block or stoprequest the rectification of Participant’s Data and cease, for legitimate reasonreasons, the Personal Data date processing. To exercise privacy rights the Optionee should address the Data Controller as defined in the employee privacy policy. Furthermore, the Optionee Participant is aware that Personal his or her Data will not be used for direct marketing purposes. In addition, Personal the Data provided can be reviewed and questions or complaints can be addressed by contacting the Optionee’s human resources departmentRepresentative of the Controller as above specified. Plan Document Acknowledgment. By accepting the Option, the Optionee Participant acknowledges that he or she has received a copy of the Plan, the Agreement and this Appendix and has reviewed the Plan, the Agreement and this Appendix in their entirety and fully accepts all provisions thereof. The Optionee further acknowledges that he her or she has read and specifically and expressly approves (a) approve the following provisions of Exhibit A to the Agreement: (i) Section 9: No Right to Employment or Service; (ii) Section 15: Governing Law; Attorneys’ Fees; and (iii) Section 18: Appendix; (b) the following provisions sections of the Additional Plan and the Terms For All Non-U.S. Optionees in this Appendix: (i) Section 2: Responsibility and Conditions for Taxes; (ii) Section 3: Nature of Grant; and (iii) Section 5: Language; and (c) Non‑U.S. Participants, as well as the Data Privacy Notice section set forth immediately above in this Appendix.above. Notifications

Data Privacy Notice. This provision replaces Section 4 of the Additional Terms For for All Non-U.S. Optionees in this Appendix: The Optionee understands that the Company and the Employer Employer, as a data processor of the Company Company, may hold certain personal information about the Optionee, including, but not limited to, the Optionee’s name, home address and telephone number, date of birth, social insurance or other identification number, salary, nationality, job title, any shares of stock or directorships held in the Company or any subsidiary or affiliate, details of all options or any other entitlement to shares of stock awarded, canceled, exercised, vested, unvested or outstanding in the Optionee’s favor, and that the Company and the Employer will process said data and other data lawfully received from third parties (collectively, “Personal Data”) for the exclusive purpose of managing and administering the Plan and complying with applicable laws, regulations and legislation. The Optionee also understands that providing the Company with Personal Data is mandatory for compliance with laws and is necessary for the performance of the Plan and that the Optionee’s denial to provide Personal Data would make it impossible for the Company to perform its contractual obligations and may affect the Optionee’s ability to participate in the Plan. The Optionee understands that Personal Data will not be publicized, but it may be accessible by the Employer as a data processor of the Company and within the Employer’s organization by its internal and external personnel in charge of processing. Furthermore, Personal Data may be transferred to banks, other financial institutions or brokers involved in the management and administration of the Plan. The Optionee understands that Personal Data may also be transferred to the independent registered public accounting firm engaged by the Company, and also to the legitimate addressees under applicable laws. The Optionee further understands that the Company and its subsidiaries or affiliates will transfer Personal Data amongst themselves as necessary for the purpose of implementation, administration and management of the Optionee’s participation in the Plan, and that the Company and its subsidiaries or affiliates may each further transfer Personal Data to third parties assisting the Company in the implementation, administration and management of the Plan, including any requisite transfer of Personal Data to a broker or other third party with whom the Optionee may elect to deposit any shares acquired under the Plan or any proceeds from the sale of such shares. Such recipients may receive, possess, use, retain and transfer Personal Data in electronic or other form, for the purposes of implementing, administering and managing the Optionee’s participation in the Plan. The Optionee understands that these recipients may be acting as controllers, processors or persons in charge of processing, as the case may be, according to applicable privacy laws, and that they may be located in or outside the European Economic Area, such as in the United States or elsewhere, including countries that do not provide an adequate level of data protection as intended under Italian privacy law. Should the Company exercise its discretion in suspending all necessary legal obligations connected with the management and administration of the Plan, it will delete Personal Data as soon as it has accomplished all the necessary legal obligations connected with the management and administration of the Plan. The Optionee understands that Personal Data processing related to the purposes specified above shall take place under automated or non-automated conditions, anonymously when possible, that comply with the purposes for which Personal Data is collected and with confidentiality and security provisions as set forth by applicable laws and regulations, with specific reference to Legislative Decree no. 196/2003. The processing activity, including communication, the transfer of Personal Data abroad, including outside of the European Economic Area, as specified herein and pursuant to applicable laws and regulations, does not require the Optionee’s consent thereto as the processing is necessary to performance of law and contractual obligations related to implementation, administration and management of the Plan. The Optionee understands that, pursuant to Section 7 of the Legislative Decree no. 196/2003, he or she has the right at any moment to, including, but not limited to, obtain confirmation that Personal Data exists or not, access, verify its content, origin and accuracy, delete, update, integrate, correct, block or stop, for legitimate reason, the Personal Data processing. To exercise privacy rights the Optionee should address the Data Controller as defined in the employee privacy policy. Furthermore, the Optionee is aware that Personal Data will not be used for direct marketing purposes. In addition, Personal Data provided can be reviewed and questions or complaints can be addressed by contacting the Optionee’s human resources department. Plan Document Acknowledgment. By accepting the Option, the Optionee acknowledges that he or she has received a copy of the Plan, the Agreement and this Appendix and has reviewed the Plan, the Agreement and this Appendix in their entirety and fully accepts all provisions thereof. The Optionee further acknowledges that he or she has read and specifically and expressly approves (a) the following provisions of Exhibit A to the Agreement: (i) Section 9: No Right to Employment or Service; (ii) Section 15: Governing Law; Attorneys’ Fees; and (iii) Section 18: Appendix; (b) the following provisions of the Additional Terms For for All Non-U.S. Optionees in this Appendix: (i) Section 2: Responsibility for Taxes; (ii) Section 3: Nature of Grant; and (iii) Section 5: Language; and (c) the Data Privacy Notice section set forth immediately above in this Appendix.