Common use of Data Privacy Notice Clause in Contracts

Data Privacy Notice. This section replaces Paragraph 9 of the Agreement: You understand that the Employer, the Company and any Subsidiary may hold certain personal information about you, including, but not limited to, your name, home address and telephone number, date of birth, social insurance (to the extent permitted under Italian law) or other identification number, salary, nationality, job title, any directorships held in the Company or any Subsidiary, details of all Performance Units granted, awarded, canceled, vested, unvested or outstanding in your favor, for the exclusive purpose of implementing, managing and administering the Plan (“Data”). You also understand that providing the Company with Data is necessary for the performance of the Plan and that your refusal to provide such Data would make it impossible for the Company to perform its contractual obligations and may affect your ability to participate in the Plan. The Controller of personal data processing is KBR Inc., with registered offices at ▇▇▇ ▇▇▇▇▇▇▇▇▇ ▇▇▇▇▇▇, ▇▇▇▇▇ ▇▇▇▇, ▇▇▇▇▇▇▇, ▇▇▇▇▇ ▇▇▇▇▇, U.S.A, and, pursuant to Legislative Decree no. 196/2003, its representative in Italy is ▇▇▇▇▇▇▇ ▇▇▇▇▇ & Root Projects Limited, with registered offices at Deloitte & Touche, ▇▇▇ ▇▇▇▇▇▇▇ ▇▇, ▇▇▇▇▇, ▇▇▇▇▇. You understand that Data will not be publicized, but it may be transferred to banks, other financial institutions, or brokers involved in the management and administration of the Plan. You understand that Data may also be transferred to the Company’s stock plan service provider, ▇▇▇▇▇▇ ▇▇▇▇▇▇▇ ▇▇▇▇▇ ▇▇▇▇▇▇, or such other administrator that may be engaged by the Company in the future. You further understand that the Company and/or any Subsidiary will transfer Data among themselves as necessary for the purpose of implementing, administering and managing your participation in the Plan, and that the Company and/or any Subsidiary may each further transfer Data to third parties assisting the Company in the implementation, administration, and management of the Plan. Such recipients may receive, possess, use, retain, and transfer Data in electronic or other form, for the purposes of implementing, administering, and managing your participation in the Plan. You understand that these recipients may be located in or outside the European Economic Area, such as in the United States or elsewhere. Should the Company exercise its discretion in suspending all necessary legal obligations connected with the management and administration of the Plan, it will delete Data as soon as it has completed all the necessary legal obligations connected with the management and administration of the Plan. You understand that Data-processing related to the purposes specified above shall take place under automated or non-automated conditions, anonymously when possible, that comply with the purposes for which Data is collected and with confidentiality and security provisions, as set forth by applicable laws and regulations, with specific reference to Legislative Decree no. 196/2003. The processing activity, including communication, the transfer of Data abroad, including outside of the European Economic Area, as herein specified and pursuant to applicable laws and regulations, does not require your consent thereto as the processing is necessary to performance of contractual obligations related to implementation, administration, and management of the Plan. You understand that, pursuant to Section 7 of the Legislative Decree no. 196/2003, you have the right to, including but not limited to, access, delete, update, correct, or terminate, for legitimate reason, the Data processing. Furthermore, you are aware that Data will not be used for direct marketing purposes. In addition, Data provided can be reviewed and questions or complaints can be addressed by contacting your local human resources representative.

Data Privacy Notice. This section replaces Paragraph 9 7 of the Agreement: You understand that the Employer, the Company and any Subsidiary may hold certain personal information about you, including, but not limited to, your name, home address and telephone number, date of birth, social insurance (to the extent permitted under Italian law) or other identification number, salary, nationality, job title, any directorships held in the Company or any Subsidiary, details of all Performance Units granted, awarded, canceled, vested, unvested or outstanding in your favor, for the exclusive purpose of implementing, managing and administering the Plan (“Data”). You also understand that providing the Company with Data is necessary for the performance of the Plan and that your refusal to provide such Data would make it impossible for the Company to perform its contractual obligations and may affect your ability to participate in the Plan. The Controller of personal data processing is KBR Inc., with registered offices at ▇▇▇ ▇▇▇▇▇▇▇▇▇ ▇▇▇▇▇▇, ▇▇▇▇▇ ▇▇▇▇, ▇▇▇▇▇▇▇, ▇▇▇▇▇ ▇▇▇▇▇, U.S.A, and, pursuant to Legislative Decree no. 196/2003, its representative in Italy is ▇▇▇▇▇▇▇ ▇▇▇▇▇ & Root Projects Limited, with registered offices at Deloitte & Touche, ▇▇▇ ▇▇▇▇▇▇▇ ▇▇, ▇▇▇▇▇, ▇▇▇▇▇. You understand that Data will not be publicized, but it may be transferred to banks, other financial institutions, or brokers involved in the management and administration of the Plan. You understand that Data may also be transferred to the Company’s stock plan service provider, ▇▇▇▇▇▇ ▇▇▇▇▇▇▇ ▇▇▇▇▇ ▇▇▇▇▇▇, or such other administrator that may be engaged by the Company in the future. You further understand that the Company and/or any Subsidiary will transfer Data among themselves as necessary for the purpose of implementing, administering and managing your participation in the Plan, and that the Company and/or any Subsidiary may each further transfer Data to third parties assisting the Company in the implementation, administration, and management of the Plan. Such recipients may receive, possess, use, retain, and transfer Data in electronic or other form, for the purposes of implementing, administering, and managing your participation in the Plan. You understand that these recipients may be located in or outside the European Economic Area, such as in the United States or elsewhere. Should the Company exercise its discretion in suspending all necessary legal obligations connected with the management and administration of the Plan, it will delete Data as soon as it has completed all the necessary legal obligations connected with the management and administration of the Plan. You understand that Data-processing related to the purposes specified above shall take place under automated or non-automated conditions, anonymously when possible, that comply with the purposes for which Data is collected and with confidentiality and security provisions, as set forth by applicable laws and regulations, with specific reference to Legislative Decree no. 196/2003. The processing activity, including communication, the transfer of Data abroad, including outside of the European Economic Area, as herein specified and pursuant to applicable laws and regulations, does not require your consent thereto as the processing is necessary to performance of contractual obligations related to implementation, administration, and management of the Plan. You understand that, pursuant to Section 7 of the Legislative Decree no. 196/2003, you have the right to, including but not limited to, access, delete, update, correct, or terminate, for legitimate reason, the Data processing. Furthermore, you are aware that Data will not be used for direct marketing purposes. In addition, Data provided can be reviewed and questions or complaints can be addressed by contacting your local human resources representative.

Data Privacy Notice. This section replaces Paragraph 9 6 of the Agreement: You understand . Employee understands that the Employer, the Company and any Subsidiary may hold certain personal information about youEmployee, including, but not limited to, your Employee’s name, home address and telephone number, date of birth, social insurance (to the extent permitted under Italian law) or other identification number, salary, nationality, job title, any shares of Stock or directorships held in the Company or any Subsidiary, details of all Performance Stock Units or other entitlement to shares of Stock granted, awarded, canceled, exercised, vested, unvested or outstanding in your Employee’s favor, for the exclusive purpose of implementing, managing and administering the Plan (“Data”). You Employee also understand understands that providing the Company with Data is necessary for the performance of the Plan and that your Employee’s refusal to provide such Data would make it impossible for the Company to perform its contractual obligations and may affect your Employee’s ability to participate in the Plan. The Controller of personal data processing is KBR Inc., with registered offices at ▇▇▇ ▇▇▇▇▇▇▇▇▇ ▇▇▇▇▇▇, ▇▇▇▇▇ ▇▇▇▇, ▇▇▇▇▇▇▇, ▇▇▇▇▇ ▇▇▇▇▇, U.S.A, and, pursuant to Legislative Decree no. 196/2003, its representative in Italy is ▇▇▇▇▇▇▇ ▇▇▇▇▇ & Root Projects Limited, with registered offices at Deloitte & Touche, ▇▇▇ ▇▇▇▇▇▇▇ ▇▇, ▇▇▇▇▇, ▇▇▇▇▇. You understand Employee understands that Data will not be publicized, but it may be transferred to banks, other financial institutions, or brokers involved in the management and administration of the Plan. You understand Employee understands that Data may also be transferred to the Company’s stock plan service provider, ▇▇▇▇▇▇ ▇▇▇▇▇▇▇ ▇▇▇▇▇ ▇▇▇▇▇▇, or such other administrator that may be engaged by the Company in the future. You Employee further understand understands that the Company and/or any Subsidiary will transfer Data among themselves as necessary for the purpose of implementing, administering and managing your Employee’s participation in the Plan, and that the Company and/or any Subsidiary may each further transfer Data to third parties assisting the Company in the implementation, administration, and management of the Plan. Such recipients may receive, possess, use, retain, and transfer Data in electronic or other form, for the purposes of implementing, administering, and managing your Employee’s participation in the Plan. You understand Employee understands that these recipients may be located in or outside the European Economic Area, such as in the United States or elsewhere. Should the Company exercise its discretion in suspending all necessary legal obligations connected with the management and administration of the Plan, it will delete Data as soon as it has completed all the necessary legal obligations connected with the management and administration of the Plan. You understand Employee understands that Data-processing related to the purposes specified above shall take place under automated or non-automated conditions, anonymously when possible, that comply with the purposes for which Data is collected and with confidentiality and security provisions, as set forth by applicable laws and regulations, with specific reference to Legislative Decree no. 196/2003. The processing activity, including communication, the transfer of Data abroad, including outside of the European Economic Area, as herein specified and pursuant to applicable laws and regulations, does not require your Employee’s consent thereto as the processing is necessary to performance of contractual obligations related to implementation, administration, and management of the Plan. You understand Employee understands that, pursuant to Section 7 of the Legislative Decree no. 196/2003, you have Employee has the right to, including but not limited to, access, delete, update, correct, or terminate, for legitimate reason, the Data processing. Furthermore, you are Employee is aware that Data will not be used for direct marketing purposes. In addition, Data provided can be reviewed and questions or complaints can be addressed by contacting your Employee’s local human resources representative.

Data Privacy Notice. This section replaces Paragraph 9 paragraph 7 of the Agreement: You understand . Employee understands that the Employer, the Company and any Subsidiary may hold certain personal information about youEmployee, including, but not limited to, your Employee’s name, home address and telephone number, date of birth, social insurance (to the extent permitted under Italian law) or other identification number, salary, nationality, job title, any Stock or directorships held in the Company or any Subsidiary, details of all Performance Units Options or other entitlement to shares of Stock granted, awarded, canceled, exercised, vested, unvested or outstanding in your Employee’s favor, for the exclusive purpose of implementing, managing and administering the Plan (“Data”). You Employee also understand understands that providing the Company with Data is necessary for the performance of the Plan and that your Employee’s refusal to provide such Data would make it impossible for the Company to perform its contractual obligations and may affect your Employee’s ability to participate in the Plan. The Controller of personal data processing is KBR Inc., with registered offices at ▇▇▇ ▇▇▇▇▇▇▇▇▇ ▇▇▇▇▇▇, ▇▇▇▇▇ ▇▇▇▇, ▇▇▇▇▇▇▇, ▇▇▇▇▇ ▇▇▇▇▇, U.S.A, and, pursuant to Legislative Decree no. 196/2003, its representative in Italy is ▇▇▇▇▇▇▇ ▇▇▇▇▇ & Root Projects Limited, with registered offices at Deloitte & Touche, ▇▇▇ ▇▇▇▇▇▇▇ ▇▇, ▇▇▇▇▇, ▇▇▇▇▇. You understand Employee understands that Data will not be publicized, but it may be transferred to banks, other financial institutions, or brokers involved in the management and administration of the Plan. You understand Employee understands that Data may also be transferred to the Company’s stock plan service provider, ▇▇▇▇▇▇ ▇▇▇▇▇▇▇ ▇▇▇▇▇ ▇▇▇▇▇▇, or such other administrator that may be engaged by the Company in the future. You Employee further understand understands that the Company and/or any Subsidiary will transfer Data among themselves as necessary for the purpose of implementing, administering and managing your Employee’s participation in the Plan, and that the Company and/or any Subsidiary may each further transfer Data to third parties assisting the Company in the implementation, administration, and management of the Plan. Such recipients may receive, possess, use, retain, and transfer Data in electronic or other form, for the purposes of implementing, administering, and managing your Employee’s participation in the Plan. You understand Employee understands that these recipients may be located in or outside the European Economic Area, such as in the United States or elsewhere. Should the Company exercise its discretion in suspending all necessary legal obligations connected with the management and administration of the Plan, it will delete Data as soon as it has completed all the necessary legal obligations connected with the management and administration of the Plan. You understand Employee understands that Data-processing related to the purposes specified above shall take place under automated or non-automated conditions, anonymously when possible, that comply with the purposes for which Data is collected and with confidentiality and security provisions, as set forth by applicable laws and regulations, with specific reference to Legislative Decree no. 196/2003. The processing activity, including communication, the transfer of Data abroad, including outside of the European Economic Area, as herein specified and pursuant to applicable laws and regulations, does not require your Employee’s consent thereto as the processing is necessary to performance of contractual obligations related to implementation, administration, and management of the Plan. You understand Employee understands that, pursuant to Section 7 of the Legislative Decree no. 196/2003, you have Employee has the right to, including but not limited to, access, delete, update, correct, or terminate, for legitimate reason, the Data processing. Furthermore, you are Employee is aware that Data will not be used for direct marketing purposes. In addition, Data provided can be reviewed and questions or complaints can be addressed by contacting your Employee’s local human resources representative.

Data Privacy Notice. This section replaces Paragraph 9 6 of the Agreement: You understand . Employee understands that the Employer, the Company and any Subsidiary may hold certain personal information about youEmployee, including, but not limited to, your Employee’s name, home address and telephone number, date of birth, social insurance (to the extent permitted under Italian law) or other identification number, salary, nationality, job title, any Stock or directorships held in the Company or any Subsidiary, details of all Performance Restricted Stock Units or other entitlement to shares of Stock granted, awarded, canceled, exercised, vested, unvested or outstanding in your Employee’s favor, for the exclusive purpose of implementing, managing and administering the Plan (“Data”). You Employee also understand understands that providing the Company with Data is necessary for the performance of the Plan and that your Employee’s refusal to provide such Data would make it impossible for the Company to perform its contractual obligations and may affect your Employee’s ability to participate in the Plan. The Controller of personal data processing is KBR Inc., with registered offices at ▇▇▇ ▇▇▇▇▇▇▇▇▇ ▇▇▇▇▇▇, ▇▇▇▇▇ ▇▇▇▇, ▇▇▇▇▇▇▇, ▇▇▇▇▇ ▇▇▇▇▇, U.S.A, and, pursuant to Legislative Decree no. 196/2003, its representative in Italy is ▇▇▇▇▇▇▇ ▇▇▇▇▇ & Root Projects Limited, with registered offices at Deloitte & Touche, ▇▇▇ ▇▇▇▇▇▇▇ ▇▇, ▇▇▇▇▇, ▇▇▇▇▇. You understand Employee understands that Data will not be publicized, but it may be transferred to banks, other financial institutions, or brokers involved in the management and administration of the Plan. You understand Employee understands that Data may also be transferred to the Company’s stock plan service provider, ▇▇▇▇▇▇ ▇▇▇▇▇▇▇ ▇▇▇▇▇ ▇▇▇▇▇▇, or such other administrator that may be engaged by the Company in the future. You Employee further understand understands that the Company and/or any Subsidiary will transfer Data among themselves as necessary for the purpose of implementing, administering and managing your Employee’s participation in the Plan, and that the Company and/or any Subsidiary may each further transfer Data to third parties assisting the Company in the implementation, administration, and management of the Plan. Such recipients may receive, possess, use, retain, and transfer Data in electronic or other form, for the purposes of implementing, administering, and managing your Employee’s participation in the Plan. You understand Employee understands that these recipients may be located in or outside the European Economic Area, such as in the United States or elsewhere. Should the Company exercise its discretion in suspending all necessary legal obligations connected with the management and administration of the Plan, it will delete Data as soon as it has completed all the necessary legal obligations connected with the management and administration of the Plan. You understand Employee understands that Data-processing related to the purposes specified above shall take place under automated or non-automated conditions, anonymously when possible, that comply with the purposes for which Data is collected and with confidentiality and security provisions, as set forth by applicable laws and regulations, with specific reference to Legislative Decree no. 196/2003. The processing activity, including communication, the transfer of Data abroad, including outside of the European Economic Area, as herein specified and pursuant to applicable laws and regulations, does not require your Employee’s consent thereto as the processing is necessary to performance of contractual obligations related to implementation, administration, and management of the Plan. You understand Employee understands that, pursuant to Section 7 of the Legislative Decree no. 196/2003, you have Employee has the right to, including but not limited to, access, delete, update, correct, or terminate, for legitimate reason, the Data processing. Furthermore, you are Employee is aware that Data will not be used for direct marketing purposes. In addition, Data provided can be reviewed and questions or complaints can be addressed by contacting your Employee’s local human resources representative.

Data Privacy Notice. This section replaces Paragraph 9 7 of the Agreement: You understand . Employee understands that the Employer, the Company and any Subsidiary may hold certain personal information about youEmployee, including, but not limited to, your Employee’s name, home address and telephone number, date of birth, social insurance (to the extent permitted under Italian law) or other identification number, salary, nationality, job title, any shares of Stock or directorships held in the Company or any Subsidiary, details of all Performance Units Options or other entitlement to shares of Stock granted, awarded, canceled, exercised, vested, unvested or outstanding in your Employee’s favor, for the exclusive purpose of implementing, managing and administering the Plan (“Data”). You Employee also understand understands that providing the Company with Data is necessary for the performance of the Plan and that your Employee’s refusal to provide such Data would make it impossible for the Company to perform its contractual obligations and may affect your Employee’s ability to participate in the Plan. The Controller of personal data processing is KBR Inc., with registered offices at ▇▇▇ ▇▇▇▇▇▇▇▇▇ ▇▇▇▇▇▇, ▇▇▇▇▇ ▇▇▇▇, ▇▇▇▇▇▇▇, ▇▇▇▇▇ ▇▇▇▇▇, U.S.A, and, pursuant to Legislative Decree no. 196/2003, its representative in Italy is ▇▇▇▇▇▇▇ ▇▇▇▇▇ & Root Projects Limited, with registered offices at Deloitte & Touche, ▇▇▇ ▇▇▇▇▇▇▇ ▇▇, ▇▇▇▇▇, ▇▇▇▇▇. You understand Employee understands that Data will not be publicized, but it may be transferred to banks, other financial institutions, or brokers involved in the management and administration of the Plan. You understand Employee understands that Data may also be transferred to the Company’s stock plan service provider, ▇▇▇▇▇▇ ▇▇▇▇▇▇▇ ▇▇▇▇▇ ▇▇▇▇▇▇, or such other administrator that may be engaged by the Company in the future. You Employee further understand understands that the Company and/or any Subsidiary will transfer Data among themselves as necessary for the purpose of implementing, administering and managing your Employee’s participation in the Plan, and that the Company and/or any Subsidiary may each further transfer Data to third parties assisting the Company in the implementation, administration, and management of the Plan. Such recipients may receive, possess, use, retain, and transfer Data in electronic or other form, for the purposes of implementing, administering, and managing your Employee’s participation in the Plan. You understand Employee understands that these recipients may be located in or outside the European Economic Area, such as in the United States or elsewhere. Should the Company exercise its discretion in suspending all necessary legal obligations connected with the management and administration of the Plan, it will delete Data as soon as it has completed all the necessary legal obligations connected with the management and administration of the Plan. You understand Employee understands that Data-processing related to the purposes specified above shall take place under automated or non-automated conditions, anonymously when possible, that comply with the purposes for which Data is collected and with confidentiality and security provisions, as set forth by applicable laws and regulations, with specific reference to Legislative Decree no. 196/2003. The processing activity, including communication, the transfer of Data abroad, including outside of the European Economic Area, as herein specified and pursuant to applicable laws and regulations, does not require your Employee’s consent thereto as the processing is necessary to performance of contractual obligations related to implementation, administration, and management of the Plan. You understand Employee understands that, pursuant to Section 7 of the Legislative Decree no. 196/2003, you have Employee has the right to, including but not limited to, access, delete, update, correct, or terminate, for legitimate reason, the Data processing. Furthermore, you are Employee is aware that Data will not be used for direct marketing purposes. In addition, Data provided can be reviewed and questions or complaints can be addressed by contacting your Employee’s local human resources representative.

Data Privacy Notice. This section replaces Paragraph 9 Notwithstanding Section 12 or any other provision of the Grant Agreement, the Employee agrees that the following shall apply with regard to data privacy in Italy: You understand The Employee understands that the Employer, the Company and any Subsidiary of its other Subsidiaries and Affiliates may collect, use, transfer and hold certain personal information about youthe Employee, including, but not limited to, your the Employee’s name, home address and telephone number, date of birth, social insurance (to the extent permitted under Italian law) number or other identification number, salary, nationality, job title, any Shares or directorships held in the Company or any SubsidiaryCompany, details of all Performance Units granted, the award of RSUs or any other entitlement to Shares awarded, canceled, exercised, vested, unvested or outstanding in your favorthe Employee’s favor (“Data”), for the exclusive purpose of implementing, managing and administering the Plan (“Data”)Plan. You The Employee also understand understands that providing the Company with the Data is necessary for the performance of the Plan and that your refusal to provide without such Data it would make it be impossible for the Company to perform its contractual obligations and may affect your the Employee’s ability to participate in the Plan. The Controller of personal data processing is KBR Inc.Hewlett Packard Enterprise Company, with registered offices at ▇▇▇▇ ▇▇▇▇▇▇▇▇▇ ▇▇▇▇▇▇, ▇▇▇▇▇ ▇▇▇▇, ▇▇▇▇▇▇▇, ▇▇▇▇▇ ▇▇▇▇▇, U.S.A▇▇▇, and, pursuant to Legislative Decree no. 196/2003, its representative in Italy is ▇▇▇▇▇▇▇ ▇▇▇▇▇▇▇ & Root Projects Limited, with registered offices at Deloitte & Touche, ▇▇▇ ▇▇▇▇▇▇▇▇ ▇▇ ▇▇, ▇▇▇▇▇, ▇▇▇▇▇9, Cernusco sul Naviglio, Milano, Italy. You understand The Employee understands that Data will not be publicized, but it may be transferred to ▇▇▇▇▇▇▇ ▇▇▇▇▇ or other third parties, banks, other financial institutions, institutions or brokers involved in the management and administration of the Plan. You understand that Data may also be transferred to the Company’s stock plan service provider, ▇▇▇▇▇▇ ▇▇▇▇▇▇▇ ▇▇▇▇▇ ▇▇▇▇▇▇, or such other administrator that may be engaged by the Company in the future. You The Employee further understand understands that the Company and/or any Subsidiary its Subsidiaries and Affiliates will transfer Data among amongst themselves as necessary for the purpose of implementingimplementation, administering administration and managing your management of the Employee’s participation in the Plan, and that the Company and/or any Subsidiary its Subsidiaries and Affiliates may each further transfer Data to third parties assisting the Company in the implementation, administration, administration and management of the Plan, including any requisite transfer to ▇▇▇▇▇▇▇ ▇▇▇▇▇ or another third party with whom the Employee may elect to deposit any Shares acquired under the Plan. Such recipients may receive, possess, use, retain, retain and transfer the Data in electronic or other form, for the purposes of implementing, administering, administering and managing your the Employee’s participation in the Plan. You understand The Employee understands that these recipients may be located in or outside the European Economic Area, or elsewhere, such as in the United States U.S. or elsewhereAsia. Should the Company exercise its discretion in suspending all necessary legal obligations connected with the management and administration of the Plan, it will delete Data as soon as it has completed accomplished all the necessary legal obligations connected with the management and administration of the Plan. You understand The Employee understands that Data-Data processing related to the purposes specified above shall take place under automated or non-automated conditions, anonymously when possible, that comply with the purposes for which Data is are collected and with confidentiality and security provisions, provisions as set forth by applicable laws Applicable Laws and regulations, with specific reference to Legislative Decree no. 196/2003. The processing activity, including communication, the transfer of Data abroad, including outside of the European Economic AreaUnion, as herein specified and pursuant to applicable laws Applicable Laws and regulations, does not require your the Employee’s consent thereto as the processing is necessary to performance of contractual obligations related to implementation, administration, administration and management of the Plan. You understand The Employee understands that, pursuant to Section 7 of the Legislative Decree no. 196/2003, you have the Employee has the right to, including but not limited to, access, delete, update, correct, or terminateask for rectification of Data and estop, for legitimate reasonreasons, the Data processing. Furthermore, you are the Employee is aware that Data will not be used for direct marketing purposes. In addition, the Data provided can be reviewed and questions or complaints can be addressed by contacting your the Employee’s local human resources representativedepartment.