Data Privacy | The Company and the Participant's employer hereby notify the Participant of the following in relation to the Participant's personal data and the collection, use, processing and transfer of such data in relation to the grant of the Performance Cash Award and the Participant's participation in the Plan pursuant to applicable personal data protection laws. The collection, use, processing and transfer of the Participant's personal data is necessary for the Company's administration of the Plan and the Participant's participation in the Plan, and the Participant's denial and/or objection to the collection, processing and transfer of personal data may affect the Participant's ability to participate in the Plan. As such, the Participant voluntarily acknowledges, consents and agrees (where required under applicable law) to the collection, use, processing and transfer of personal data as described herein. The Company and the Participant's employer hold certain personal information about the Participant, including (but not limited to) the Participant's name, home address, email address, and telephone number, date of birth, social security number, passport number or other employee identification number, salary, nationality, job title, any Shares or directorships held in the Company, details of all Performance Cash Awards or any other entitlement to Shares awarded, canceled, purchased, vested, unvested or outstanding in the Participant's favor for the purpose of managing and administering the Plan (“Data”). Data may be provided by the Participant or collected, where lawful, from third parties, and the Company and the Participant's employer will process Data for the exclusive purpose of implementing, administering and managing the Participant's participation in the Plan. Data processing will take place through electronic and non-electronic means according to logics and procedures strictly correlated to the purposes for which Data is collected and with confidentiality and security provisions as set forth by applicable laws and regulations in the Participant's country of residence. Data processing operations will be performed minimizing the use of personal and identification data when such operations are unnecessary for the processing purposes sought. Data will be accessible within the Company’s organization only by those persons requiring access for purposes of the implementation, administration and operation of the Plan and for the Participant's participation in the Plan. The Company and the Participant's employer will transfer Data as necessary for the purpose of implementation, administration and management of the Participant's participation in the Plan, and the Company and the Participant's employer may each further transfer Data to any third parties assisting the Company in the implementation, administration and management of the Plan, including but not limited to [UBS Group AG/UBS Group SA/UBS Group Inc. ("UBS")] or any successor or other third party that the Company or [UBS] (or its successor) may engage from time to time. These recipients may be located in the European Economic Area, the United States or elsewhere throughout the world. The Participant hereby authorize (where required under applicable law) the recipients to receive, possess, use, retain and transfer Data, in electronic or other form, for purposes of implementing, administering and managing the Participant's participation in the Plan, including any requisite transfer of such Data as may be required for the administration of the Plan and/or the subsequent holding of cash on the Participant's behalf to a broker or other third party with whom the Participant may elect to deposit any cash acquired pursuant to the Plan. The Participant may, at any time, exercise the Participant's rights provided under applicable personal data protection laws, which may include the right to (a) obtain confirmation as to the existence of Data, (b) verify the content, origin and accuracy of Data, (c) request the integration, update, amendment, deletion or blockage (for breach of applicable laws) of Data and (d) oppose, for legal reasons, the collection, processing or transfer of Data that is not necessary or required for the implementation, administration and/or operation of the Plan and the Participant's participation in the Plan. The Participant may seek to exercise these rights by contacting the Participant's local HR manager. |