10. Data Privacy. The Company and the Participant’s employer hereby notify the Participant of the following in relation to the Participant’s personal data and the collection, processing and transfer of such data in relation to the Award and Participant’s participation in the Plan:
(a) the collection, processing and transfer of the Participant’s personal data is necessary for the Company’s administration of the Plan and the Participant’s participation in the Plan, and the Participant’s denial and/or objection to the collection, processing and transfer of personal data may affect the Participant’s ability to participate in the Plan. As such, the Participant voluntarily acknowledges, consents and agrees (where required under applicable law) to the collection, use, processing and transfer of personal data as described herein.
(b) The Company and the Participant’s employer hold certain personal information about the Participant, including (but not limited to) the Participant’s name, home address and telephone number, date of birth, social security number or other employee identification number, salary, nationality, job title, any interests or directorships held in the Company, details of all awards or any other entitlements awarded, canceled, purchased, vested, exercised, unvested or outstanding in Participant’s favor for the purpose of managing and administering the Plan (collectively, the “Data”). The Data may be provided by the Participant or collected, where lawful, from third parties, and the Company and the Participant’s employer will process the Data for the exclusive purpose of implementing, administering and managing the Participant’s participation in the Plan. Processing of the Data will take place through electronic and non-electronic means according to logics and procedures strictly correlated to the purposes for which the Data is collected and with confidentiality and security provisions as set forth by applicable laws and regulations in the Participant’s country of residence. Data processing operations will be performed in a manner that minimizes the use of personal and identification data when such operations are unnecessary for the processing purposes sought. The Data will be accessible within the Company’s organization only by those persons requiring access for purposes of the implementation, administration and operation of the Plan and for the Participant’s participation in the Plan.
(c) The Company and the Participant’s employer will transfer Data as necessary for the purpose of implementation, administration and management of the Participant’s participation in the Plan, and the Company and/or the Participant’s employer may each further transfer Data to any third parties assisting the Company in the implementation, administration and management of the Plan. These recipients may be located in the European Economic Area, the United States or elsewhere throughout the world. The Participant hereby authorizes (where required under applicable law) the recipients to receive, possess, use, retain and transfer the Data, in electronic or other form, for purposes of implementing, administering and managing the Participant’s participation in the Plan, including any requisite transfer of such Data as may be required for the administration of the Plan. The Participant may, at any time, exercise the Participant’s rights provided under applicable personal data protection laws (if any), which may include the right to (i) obtain confirmation as to the existence of the Data, (ii) verify the content, origin and accuracy of the Data, (iii) request the integration, update, amendment, deletion, or blockage (for breach of applicable laws) of the Data, and (iv) oppose, for legal reasons, the collection, processing or transfer of the Data that is not necessary or required for the implementation, administration and/or operation of the Plan and the Participant’s participation in the Plan. The Participant may seek to exercise these rights by contacting the Participant’s local human resources manager.
-3-