(q) neither the Company, the Service Recipient, nor any other Related Company will be liable for any foreign exchange rate fluctuation between your local currency and the United States Dollar that may affect (i) the value of the Option or of any amounts due to you pursuant to the exercise of the Option or the subsequent sale of any Shares acquired upon exercise, or (ii) payments for Tax-Related Items.
17. Data Privacy Information.
(a) Compliance with Applicable Data Protection Laws. In administering the Plan, the Company will comply with any applicable laws that govern or otherwise apply to personal data processed in connection with the Plan, including the General Data Protection Regulation (Regulation (EU) No 2016/679) (the “GDPR”) and the Irish Data Protection Act 2018 (the “DPA”), in each case as amended, supplemented or replaced from time to time.
(b) Data Collection and Usage. The Company and the Service Recipient collect, process and use certain personal information about you, including, but not limited to, your name, home address, telephone number, email address, date of birth, social insurance number, passport or other identification numbers, salary, nationality, job title, any Ordinary Shares or directorships held in the Company, details of all Awards granted under the Plan, or any other entitlement to Ordinary Shares awarded, cancelled, exercised, vested, unvested, or outstanding in your favor (“Data”), for the legitimate purpose of implementing, administering, and managing the Plan. Where required, the legal basis for the collection and processing of Data is set out in the applicable privacy notice.
(c) Stock Plan Administration and Stock Plan Administrator. You understand that the Company may transfer Data to a third-party stock plan administrator/broker (“Stock Plan Administrator”), which assists the Company, presently or in the future, with the implementation, administration and management of the Plan.
(d) International Data Transfers. Neither the Company nor the Stock Plan Administrator will transfer any personal data outside the European Economic Area other than in accordance with the GDPR, including by implementing an appropriate safeguarding mechanism and conducting a transfer risk assessment (if required).
(e) Data Retention. The Company will hold and use Data only as long as is necessary to implement, administer, and manage your participation in the Plan, or as required to comply with legal or regulatory obligations, including under tax, exchange control, securities, and labor laws. This may mean Data is retained until after your employment or other service relationship ends, plus any additional time periods necessary for compliance with the law, exercise, or defense of legal rights, archiving, back-up, and deletion purposes.
(f) Voluntariness and Consequences of Participation. Participation in the Plan is voluntary and you understand that you may request to stop the transfer and processing of the Data for purposes of your participation in the Plan and that your employment or other service relationship with the Company or the Service Recipient will not be affected. The only consequence of refusing or withdrawing consent is that the Company would not be able to allow you to participate in the Plan. You understand that the Data will still be processed in relation to your employment or other service relationship for record-keeping purposes.
(g) Data Subject Rights. You may have a number of rights under data privacy laws in your jurisdiction. Depending on where you are based, such rights may include the right to (i) request access to or copies of Data that the Company processes, (ii) rectify incorrect Data, (iii) delete Data, (iv) restrict the processing of Data, (v) restrict the portability of Data, (vi) lodge complaints with competent authorities in your jurisdiction, and/or (vii) receive a list with the names and addresses of any potential recipients of Data. To receive clarifications regarding these rights or to exercise these rights, you can contact the Company’s Human Resources Department or, if appointed, the Company’s data privacy officer.
8