Protection of personal data
▪I acknowledge that I have been duly informed that my
personal data will be processed in compliance with
the EU Regulation nᵒ2016/679 (the General Data
Protection Regulation - the “GDPR”), for which
Stellantis N.V acts as the data controller (the
“Controller”), for the data collected and stored, in
order to assert my rights under the Plan reserved for
employees of the companies participating in the Plan.
The Controller informs that the personal data,
provided directly by the employee in the context of
the Shares subscription, will be collected by Natixis
Interépargne, the centralizing agent for subscriptions,
which will act as the autonomous data controller,
according to the applicable privacy laws. In order to
receive further details on the processing operations
carried out by Natixis Interépargne, please refer to
the information notice provided by the latter, under
Article 13 of the GDPR.
▪The participation in the Plan involves, in the normal
course, the processing of common personal data
(e.g., identification and contact data), data relating to
the employment position of the employees who
subscribe to the Shares, data relating to tax
obligations and any other personal data which may
be necessary in order to finalize the subscription
process.
▪In case of early release of Shares from the three-year
lock-up period for disability, the Controller will collect
special categories of personal data within the
meaning of Article 9 of GDPR, in particular, data
which can reveal the state of health of the data
subject (together with the common personal data, the
“Personal Data”).
▪Common Personal Data will be processed in order to
ensure the participation in and/or the sale in the
context of the Plan and the fulfilment of the legal
obligations to which the Controller is subject.
▪Common Personal Data are processed by the
Controller in accordance with Article 6, letter b) and c)
of GDPR.
▪The Controller will process special categories of
Personal Data only with the prior valid consent of the
subject to whom the Personal Data refer, according to
Article 9(2), letter a) of GDPR. Such consent will be
required by the Controller by means of appropriate
form, when the participant will make a request for
early release for disability. Also in such case, the
Controller informs that employees’ personal data
belonging to special categories will be collected by
Natixis Interépargne, according to the privacy laws.
▪I acknowledge that I have been duly informed that the
Personal Data provided in connection with my
participation in the Plan may be transmitted by and
exchanged between the Controller, my employer,
Natixis Interépargne, Butterfly (the communications
agency), and Global Shares Execution Services
Limited as securities account holder, and by/and to
any other party expressly authorized to receive and
retain this data and to process it for the sole purpose
of administering the Plan, for the keeping of accounts