In order to facilitate Participant’s participation in the Plan and the administration of the Option, it will be necessary for contractual and legal purposes for the Company (or its Affiliates or payroll administrators) to collect, hold and process certain personal information about Participant (including, without limitation, Participant’s name, home address, telephone number, date of birth, nationality, social insurance or other identification number and job title and details of the Option and other options awarded, cancelled, exercised, vested, unvested or outstanding and Shares held by Participant). Participant consents explicitly and unambiguously to the Company (or its Affiliates or payroll administrators) collecting, holding and processing Participant’s personal data and transferring this data (in electronic or other form) by and among, as applicable, Participant’s employer, the Company and its Affiliates and other third parties (collectively, the “Data Recipients”) insofar as is reasonably necessary to implement, administer and manage the Plan and the Option. Participant authorizes the Data Recipients to receive, possess, use, retain and transfer the data for the purposes of implementing, administering and managing the Plan and the Option. Participant understands that the data will be transferred to E*TRADE, or such other broker or third party as may be selected by the Company in the future which is assisting the Company with the implementation, administration and management of the Plan. Participant understands that the Data Recipients may be located in the United States or elsewhere, and that the recipient’s country may have a lower standard of data privacy laws and protections than Participant’s country.

Data Protection. By signing below, the Grantee consents that the Company may process the Grantee’s personal data, including name, Social Security number, address and number of shares of the Stock Award (“Data”), exclusively for the purpose of performing this Agreement, in particular in connection with the Stock Award awarded to the Grantee. For this purpose, the Data may also be disclosed to and processed by companies outside the Company, e.g., banks involved.

Data Protection. By participating in the Plan the Participant consents to the holding and processing of personal data provided by the Participant to the Company for all purposes relating to the operation of the Plan. These include, but are not limited to:

Data Protection. Depending on the Services Service Provider performs, MDBI may be required to access, collect, retain, disclose or otherwise process individually identifiable health information or information identifying or, in combination with other information, identifiable to a living individual (“Personal Data”). For purposes of this Agreement, “Processing” (and its conjugates, including, without limitation, “Process”) means any operation or set of operations that is performed upon Personal Data, including, without limitation, any collection, recording, retention, organization, storage, adaptation, alteration, retrieval, consultation, blocking erasure use, disclosure, access, transfer, or destruction, whether or not by electronic means. In that event, MDBI agrees to collect and process Personal Data solely as described in this Agreement and not use such Personal Data further for any other purpose or in any other manner except where such further use is required by applicable law, regulation or governmental authority. Further, MDBI agrees to abide by all applicable data protection and privacy laws while performing the Services, and shall afford Personal Data all the protections applicable to Confidential Information as set forth in this Agreement. MDBI shall maintain appropriate safeguards to ensure the confidentiality and security of the Personal Data and shall inform Company within three (3) days about any unauthorized or unintentional access to or disclosure of Personal Data (“Security Breach”), including the timing and nature of the Security Breach, and provide all reasonable assistance to remedy the Security Breach. Where applicable data protection laws require the parties to enter into additional agreements or undertakings, including international data transfer agreements, MDBI shall undertake to ensure that all necessary agreements are implemented and in place. In the event of a Security Breach, MDBI shall also

Data Protection. By signing below, the Grantee consents that the Company may process the Grantee’s personal data, including name, Social Security number, address and number of TBRSUs (“Data”), exclusively for the purpose of performing this Agreement, in particular in connection with the TBRSUs awarded to the Grantee. For this purpose, the Data may also be disclosed to and processed by companies outside the Company, e.g., banks involved.

Data Protection. By participating in the Plan, each Participant consents to the collection, processing, transmission and storage by the Company, its Subsidiaries and any third party administrators of any data of a professional or personal nature for the purposes of administering the Plan and in

All personal information which the Company holds about the Contractor is protected by data protection laws. The Company will collect and process personal data relating to employees in accordance with the privacy notice which is attached at [Schedule 3].

Data Protection. By signing below, the Grantee consents that the Company may process the Grantee’s personal data, including name, Social Security number, address and number of TBRSUs (“Data”), exclusively for the purpose of performing this Agreement, in particular in connection with the TBRSUs awarded to the Grantee. For this purpose, the Data may also be disclosed to and processed by companies outside the Company, e.g., banks involved.

If the Participant would like to participate in the Plan, the Participant will need to review the information provided in this Section 9 and, declare with its signature under this agreement consent to processing of Participant’s personal data for such processing activities requiring consent.

The Assignee hereby acknowledges and agrees that the Local Entity can collect, use, process, transfer (onshore or offshore) and/or disclose personal data relating to the Assignee (hereinafter, the “Personal Data”) to ensure compliance with this Agreement and its legal obligations. The Local Entity will, from time to time, ask the Assignee to review and update any Personal Data it holds.