ALL COUNTRIES OUTSIDE THE U.S.
Data Privacy Consent
(a) Data Collection and Usage. The Company and the Service Recipient collect, process and use certain personal information about you, including, but not limited to, your name, home address, telephone number, email address, date of birth, social insurance number, passport or other identification number, salary, nationality, job title, any shares of stock or directorships held in the Company, details of all RSUs granted under the Plan or any other entitlement to shares awarded, canceled, exercised, vested, unvested or outstanding in your favor (“Data”), for the legitimate purpose of implementing, administering and managing the Plan. Where required, the legal basis for the collection and processing of Data is your consent.
(b) Stock Plan Administration Service Providers. The Company transfers Data to E*TRADE Financial Services, Inc. and certain of its affiliated companies (“E*TRADE”), an independent service provider based in the U.S., which is assisting the Company with the implementation, administration and management of the Plan. Where required, the legal basis for the transfer of Data to E*TRADE is your consent. The Company may select a different service provider or additional service providers and share Data with such other provider serving in a similar manner. You may be asked to agree on separate terms and data processing practices with E*TRADE, with such agreement being a condition to the ability to participate in the Plan.
(c) International Data Transfers. The Company and its service providers, including E*TRADE, are based in the U.S. Your country or jurisdiction may have different data privacy laws and protections than the U.S. Where required, the legal basis for the transfer of Data to these recipients is your consent.
(d) Data Retention. The Company will hold and use Data only as long as is necessary to implement, administer and manage your participation in the Plan, or as required to comply with legal or regulatory obligations, including under tax, exchange control, securities and labor laws.
(e) Voluntariness and Consequences of Consent Denial or Withdrawal. Participation in the Plan is voluntary and you are providing the consents herein on a voluntary basis. You understand that you may request to stop the transfer and processing of your Data for purposes of your participation in the Plan and that your compensation from or employment relationship with the Service Recipient will not be affected. The only consequence of refusing or withdrawing consent is that the Company would not be able to allow you to participate in the Plan. You understand that your Data will still be processed in relation to your employment and for record-keeping purposes.
(h) Data Subject Rights. You may have a number of rights under data privacy laws in your jurisdiction. Depending on where you are based, such rights may include the right to (i) request access to or copies of Data the Company processes, (ii) rectify incorrect Data, (iii) delete Data, (iv) restrict the processing of Data, (v) restrict the portability of Data, (vi) lodge complaints with competent authorities in your jurisdiction, and/or (vii) receive a list with the names and addresses of any potential recipients of Data. To receive clarification regarding these rights or to exercise these rights, you can contact your local human resources representative.
(i) Additional Consents. By participating in the Plan and indicating consent via the Company’s acceptance procedure, you are declaring that you agree with the data processing practices described herein and consent to the collection, processing and use of Data by the Company and the transfer of Data to the recipients mentioned above, including recipients located in countries which do not adduce an adequate level of protection from a European (or other non-U.S.) data protection law perspective, for the purposes described above. Upon request of the Company or the Service Recipient, you agree to provide a separate executed data privacy consent form (or any other agreements or consents that may be required by the Company and/or the Service
10