Data Privacy | Data Collection and Usage. The Company and any Subsidiaries or Affiliates, including the Employer, may collect, process and use certain personal information about you, including, but not limited to, your name, home address and telephone number, email address, date of birth, social security, social insurance, passport or other identification number, salary, nationality, job title, any shares of Stock or directorships held in the Company or any of its Subsidiaries or Affiliates, details of all awards or any other entitlement to shares of Stock or equivalent benefits awarded, canceled, exercised, vested, unvested or outstanding in your favor (“Data”), for the purposes of implementing, administering and managing the Plan. The legal basis, where required, for the processing of Data by the Company and the third-party service providers described below is the necessity of the data processing for the Company to perform its contractual obligations under this Agreement and the Company’s legitimate business interest of managing the Plan and generally administering the Awards. Plan Administration Service Providers. The Company transfers Data to Fidelity Stock Plan Services, LLC (“Fidelity”), an independent service provider based in the United States, which assists the Company with the implementation, administration and management of the Plan. You acknowledge and understand that Fidelity will open an account for you to receive and trade shares of Stock acquired under the Plan and that you will be asked to agree on separate terms and data processing practices with Fidelity, with such agreement being a condition to the ability to participate in the Plan. The legal basis for the transfer of Data by the Company to Fidelity is your consent. As a result, in the absence of appropriate safeguards such as standard data protection clauses, the processing of your Data in the United States or, as the case may be, other countries, may not be subject to substantive data processing principles or supervision by data protection authorities. In addition, you may not have enforceable rights regarding the processing of Data in such countries. The Company provides appropriate safeguards for protecting Data that it receives in the United States through its adherence to data transfer agreements entered into between the Company and its Subsidiaries and Affiliates within the EU and other non-U.S. jurisdictions. International Data Transfers. The Company and its service providers are based in the United States. Your country or jurisdiction may have different data privacy laws and protections than the United States. The Company’s legal basis, where required, for the transfer of Data is your consent. Data Retention. The Company will hold and use Data only as long as is necessary to implement, administer and manage your participation in the Plan, or as required to comply with legal or regulatory obligations, including under tax and securities laws. |