International Data Transfers. Participant understands that the Company and, as of the date hereof, any third parties assisting in the implementation, administration and management of the Plan are based in the United States. Participant understands and acknowledges that Participant’s country may have enacted data privacy laws that are different from the laws of the United States. For example, the European Commission has issued only a limited adequacy finding with respect to the United States that applies solely if and to the extent that companies self-certify and remain self-certified under the EU/U.S. Privacy Shield program. The Company does not currently participate in the EU/U.S. Privacy Shield Program. The Company’s legal basis for the transfer of Participant’s Personal Data is Participant’s consent.

International Data Transfers: The Company and its service providers are based in the United States. If the Participant is outside the United States, the Participant should note that his or her country has enacted data privacy laws that are different from the United States. For example, the European Commission has issued a limited adequacy finding with respect to the United States that applies only to the extent companies register for the EU-U.S. Privacy Shield program, which is open to companies subject to Federal Trade Commission jurisdiction and in which the Company does not participate in with respect to employee data. The Company’s legal basis for the transfer of the Participant’s personal data is his or her consent.

International Data Transfers. The Corporation and its service providers are based in the United States. If the Participant is outside of the United States, the Participant should note that his or her country may have enacted data privacy laws that are different from the United States. The Corporation’s legal basis for the transfer of the Participant’s personal data is the Participant’s consent.