Obligations of the Depositary the Depositary’s Agents, the Registrar and the Company. The Company does not assume any obligation or shall be subject to any liability under this Deposit Agreement or any Receipt to holders of Receipts other than from acts or omissions arising out of conduct constituting gross negligence or willful misconduct in the performance of such duties as are specifically set forth in this Deposit Agreement. Neither the Depositary nor any Depositary’s Agent nor any Transfer Agent or Registrar assumes any obligation or shall be subject to any liability under this Deposit Agreement to holders of Receipts, the Company or any other person or entity other than for its gross negligence or willful misconduct (which gross negligence or willful misconduct must be determined by a final, non-appealable order, judgment, decree or ruling of a court of competent jurisdiction). Notwithstanding anything to the contrary contained herein, neither the Depositary, nor any Depositary’s Agent nor any Transfer Agent or Registrar shall be liable for any special, indirect, incidental, consequential, punitive or exemplary damages, including but not limited to, lost profits, even if such person or entity alleged to be liable has knowledge of the possibility of such damages. Any liability of the Depositary and any Registrar or Transfer Agent under this Deposit Agreement will be limited to the amount of annual fees paid by the Company to the Depositary or any Registrar or Transfer Agent. None of the Depositary, any Depositary’s Agent, any Registrar or Transfer Agent or the Company shall be under any obligation to appear in, prosecute or defend any action, suit or other proceeding with respect to the deposited Preferred Stock, Depositary Shares or Receipts that in its opinion may involve it in expense or liability, unless indemnity satisfactory to it against all expense and liability be furnished as often as may be required. None of the Depositary, any Depositary’s Agent, any Registrar or Transfer Agent or the Company shall be liable for any action or any failure to act by it in reliance upon the advice of legal counsel or accountants, or information provided by any person presenting Preferred Stock for deposit or any holder of a Receipt. The Depositary, any Depositary’s Agent, any Registrar or Transfer Agent and the Company may each rely and shall each be protected in acting upon any written notice, request, direction or other document believed by it to be genuine and to have been signed or presented by the proper party or parties. In the event the Depositary shall receive conflicting claims, requests or instructions from any holders of Receipts, on the one hand, and the Company, on the other hand, the Depositary shall be entitled to act on such claims, requests or instructions received from the Company, and shall incur no liability and shall be entitled to the full indemnification set forth in Section 5.05 in connection with any action so taken. The Depositary shall not be responsible for any failure to carry out any instruction to vote any of the deposited Preferred Stock or for the manner or effect of any such vote made, as long as any such action or non-action does not result from bad faith, gross negligence or willful misconduct of the Depositary (which bad faith, gross negligence or willful misconduct must be determined by a final, non-appealable order, judgment, decree or ruling of a court of competent jurisdiction). The Depositary undertakes, and any Registrar or Transfer Agent shall be required to undertake, to perform such duties and only such duties as are specifically set forth in this Deposit Agreement, and no implied covenants or obligations shall be read into this Agreement against the Depositary or any Registrar or Transfer Agent. The Depositary, its parent, affiliate, or subsidiaries, any Depositary’s Agent, and any Registrar or Transfer Agent may own, buy, sell or deal in any class of securities of the Company and its affiliates and in Receipts or Depositary Shares or become pecuniarily interested in any transaction in which the Company or its affiliates may be interested or contract with or lend money to or otherwise act as fully or as freely as if it were not the Depositary or the Depositary’s Agent hereunder. The Depositary may also act as transfer agent or registrar of any of the securities of the Company and its affiliates or act in any other capacity for the Company or its affiliates. It is intended that neither the Depositary nor any Depositary’s Agent shall be deemed to be an “issuer” of the securities under the federal securities laws or applicable state securities laws, it being expressly understood and agreed that the Depositary and any Depositary’s Agent are acting only in a ministerial capacity as Depositary for the deposited Preferred Stock; provided, however, that the Depositary agrees to comply with all information reporting and withholding requirements applicable to it under law or this Deposit Agreement in its capacity as Depositary. Neither the Depositary (or its officers, directors, employees, agents or affiliates) nor any Depositary’s Agent makes any representation or has any responsibility as to the validity of the registration statement pursuant to which the Depositary Shares are registered under the Securities Act, the deposited Preferred Stock, the Depositary Shares, the Receipts (except its countersignature thereon) or any instruments referred to therein or herein, or as to the correctness of any statement made therein or herein; provided, however, that the Depositary is responsible for its representations in this Deposit Agreement. The Company agrees that it will register the deposited Preferred Stock and the Depositary Shares in accordance with the applicable federal securities laws. In the event the Depositary, the Depositary’s Agent or any Registrar or Transfer Agent believes any ambiguity or uncertainty exists in any notice, instruction, direction, request or other communication, paper or document received by it pursuant to this Deposit Agreement, the Depositary, the Depositary’s Agent, Transfer Agent or Registrar shall promptly notify the Company of the details of such alleged ambiguity or uncertainty, and may, in its sole discretion, refrain from taking any action, and the Depositary, the Depositary’s Agent, Transfer Agent or Registrar shall be fully protected and shall incur no liability to any person from refraining from taking such action, absent bad faith, gross negligence or willful misconduct (which bad faith, gross negligence or willful misconduct must be determined by a final, non-appealable order, judgment, decree or ruling of a court of competent jurisdiction), unless and until (i) the rights of all parties have been fully and finally adjudicated by a court of appropriate jurisdiction or (ii) the Depositary, the Depositary’s Agent, Transfer Agent or Registrar receives written instructions with respect to such matter signed by the Company that eliminates such ambiguity or uncertainty to the satisfaction of the Depositary, the Depositary’s Agent, Transfer Agent or Registrar. Whenever in the performance of its duties under this Deposit Agreement, the Depositary, the Depositary’s Agent, Transfer Agent or Registrar shall deem it necessary or desirable that any fact or matter be proved or established by the Company prior to taking, suffering or omitting to take any action hereunder, such fact or matter (unless other evidence in respect thereof be herein specifically prescribed) may be deemed to be conclusively provided and established by a certificate signed by any one of the Chief Executive Officer, any Vice Chairman, the Chief Financial Officer, any Chief Operating Officer, any Executive Vice President, the Corporate Treasurer, any Managing Director, any Vice President, the Corporate Secretary, any Assistant Corporate Secretary or any Attorney-in-Fact of the Company and delivered to the Depositary, the Depositary’s Agent, Transfer Agent or Registrar; and such certificate shall be full and complete authorization and protection to the Depositary, the Depositary’s Agent, Transfer Agent or Registrar and the Depositary, the Depositary’s Agent, Transfer Agent or Registrar shall incur no liability for or in respect of any action taken, suffered or omitted by it under the provisions of this Deposit Agreement in reliance upon such certificate. The Depositary, the Depositary’s Agent, Transfer Agent or Registrar shall not be liable for or by reason of any of the statements of fact or recitals contained in this Deposit Agreement or in the Receipts (except its countersignature thereof) or be required to verify the same, but all such statements and recitals are and shall be deemed to have been made by the Company only. The Depositary, the Depositary’s Agent, Transfer Agent or Registrar will not be under any duty or responsibility to ensure compliance with any applicable federal or state securities laws in connection with the issuance, transfer or exchange of the Receipts, Preferred Stock or Depositary Shares. Notwithstanding anything herein to the contrary, no amendment to the Certificate of Designations shall affect the rights, duties, obligations or immunities of the Depositary, Transfer Agent, the Depositary’s Agent or Registrar hereunder. The Depositary, Transfer Agent and any Registrar hereunder:
(i) shall have no duties or obligations other than those specifically set forth herein (and no implied duties or obligations), or as may subsequently be agreed to in writing by the parties;
(ii) shall have no obligation to make payment hereunder unless the Company shall have provided the necessary federal or other immediately available funds or securities or property, as the case may be, to pay in full amounts due and payable with respect thereto;
(iii) shall not be obligated to take any legal or other action hereunder; if, however, the Depositary determines to take any legal or other action hereunder, and, where the taking of such action might in the Depositary’s judgment subject or expose it to any expense or liability, the Depositary shall not be required to act unless it shall have been furnished with an indemnity satisfactory to it;
(iv) may rely on and shall be authorized and protected in acting or failing to act upon any certificate, instrument, opinion, notice, letter, facsimile transmission or other document or security delivered to the Depositary and believed by the Depositary to be genuine and to have been signed by the proper party or parties, and shall have no responsibility for determining the accuracy thereof;
(v) may rely on and shall be authorized and protected in acting or failing to act upon the written, telephonic, electronic and oral instructions, with respect to any matter relating to the Depositary’s actions as depositary covered by this Deposit Agreement (or supplementing or qualifying any such actions) of officers of the Company;
(vi) may consult counsel satisfactory to it, and the advice of such counsel shall be full and complete authorization and protection in respect of any action taken, suffered or omitted by the Depositary hereunder in accordance with the advice of such counsel;
(vii) shall not be called upon at any time to advise any person with respect to the Depositary Shares or Receipts;
(viii) shall not be liable or responsible for any recital herein, contained in any documents relating hereto or the Depositary Shares or Receipts; and
(ix) shall not be liable in any respect on account of the identity, authority or rights of the parties (other than with respect to the Depositary) executing or delivering or purporting to execute or deliver this Deposit Agreement or any documents or papers deposited or called for under this Deposit Agreement. The obligations of the Company set forth in this Section 5.03 shall survive the replacement, removal or resignation of any Depositary, Registrar, Transfer Agent or Depositary’s Agent or termination of this Deposit Agreement.
Obligations of the data exporter The data exporter agrees and warrants:
(a) that the processing, including the transfer itself, of the personal data has been and will continue to be carried out in accordance with the relevant provisions of the applicable data protection law (and, where applicable, has been notified to the relevant authorities of the Member State where the data exporter is established) and does not violate the relevant provisions of that State;
(b) that it has instructed and throughout the duration of the personal data processing services will instruct the data importer to process the personal data transferred only on the data exporter's behalf and in accordance with the applicable data protection law and the Clauses;
(c) that the data importer will provide sufficient guarantees in respect of the technical and organisational security measures specified in Appendix 2 to this contract;
(d) that after assessment of the requirements of the applicable data protection law, the security measures are appropriate to protect personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access, in particular where the processing involves the transmission of data over a network, and against all other unlawful forms of processing, and that these measures ensure a level of security appropriate to the risks presented by the processing and the nature of the data to be protected having regard to the state of the art and the cost of their implementation;
(e) that it will ensure compliance with the security measures;
(f) that, if the transfer involves special categories of data, the data subject has been informed or will be informed before, or as soon as possible after, the transfer that its data could be transmitted to a third country not providing adequate protection within the meaning of Directive 95/46/EC;
(g) to forward any notification received from the data importer or any subprocessor pursuant to Clause 5(b) and Clause 8(3) to the data protection supervisory authority if the data exporter decides to continue the transfer or to lift the suspension;
(h) to make available to the data subjects upon request a copy of the Clauses, with the exception of Appendix 2, and a summary description of the security measures, as well as a copy of any contract for subprocessing services which has to be made in accordance with the Clauses, unless the Clauses or the contract contain commercial information, in which case it may remove such commercial information;
(i) that, in the event of subprocessing, the processing activity is carried out in accordance with Clause 11 by a subprocessor providing at least the same level of protection for the personal data and the rights of data subject as the data importer under the Clauses; and
(j) that it will ensure compliance with Clause 4(a) to (i). The data importer agrees and warrants:
(a) to process the personal data only on behalf of the data exporter and in compliance with its instructions and the Clauses; if it cannot provide such compliance for whatever reasons, it agrees to inform promptly the data exporter of its inability to comply, in which case the data exporter is entitled to suspend the transfer of data and/or terminate the contract;
(b) that it has no reason to believe that the legislation applicable to it prevents it from fulfilling the instructions received from the data exporter and its obligations under the contract and that in the event of a change in this legislation which is likely to have a substantial adverse effect on the warranties and obligations provided by the Clauses, it will promptly notify the change to the data exporter as soon as it is aware, in which case the data exporter is entitled to suspend the transfer of data and/or terminate the contract;
(c) that it has implemented the technical and organisational security measures specified in Appendix 2 before processing the personal data transferred;
(d) that it will promptly notify the data exporter about:
(i) any legally binding request for disclosure of the personal data by a law enforcement authority unless otherwise prohibited, such as a prohibition under criminal law to preserve the confidentiality of a law enforcement investigation,
(ii) any accidental or unauthorised access, and
(iii) any request received directly from the data subjects without responding to that request, unless it has been otherwise authorised to do so;
(e) to deal promptly and properly with all inquiries from the data exporter relating to its processing of the personal data subject to the transfer and to abide by the advice of the supervisory authority with regard to the processing of the data transferred;
(f) at the request of the data exporter to submit its data processing facilities for audit of the processing activities covered by the Clauses which shall be carried out by the data exporter or an inspection body composed of independent members and in possession of the required professional qualifications bound by a duty of confidentiality, selected by the data exporter, where applicable, in agreement with the supervisory authority;
(g) to make available to the data subject upon request a copy of the Clauses, or any existing contract for subprocessing, unless the Clauses or contract contain commercial information, in which case it may remove such commercial information, with the exception of Appendix 2 which shall be replaced by a summary description of the security measures in those cases where the data subject is unable to obtain a copy from the data exporter;
(h) that, in the event of subprocessing, it has previously informed the data exporter and obtained its prior written consent;
(i) that the processing services by the subprocessor will be carried out in accordance with Clause 11;
(j) to send promptly a copy of any subprocessor agreement it concludes under the Clauses to the data exporter.
