We are subject to international data protection laws, such as the General Data Protection Reg ulation, or GDPR, in the
European Economic Area. The GDPR imposes several stringent requirements for controllers and processors of personal
data which have increased our obligations, including, for example, by requiring more robust disclosures to individua ls,
notifications, in some cases, of data breaches to regulators and data subjects, and a record of processing and other
policies and procedures to be maintained to adhere to the accountability principle. In addition, we are subject to the
GDPR ’s rules on transferring personal data outside of the EEA (including to the United States), and some of these rules
are currently being challenged in the courts. Failure to comply with the requirements of GDPR and the local laws
implementing or supplementing the GDPR could result in fines of up to €20,000,000 or up to 4% of the total worldwide
annual turnover of the preceding financial year, whichever is higher, as well as other administrative penalties. We are
likely to be required to expend significant capital and ot her resources to ensure ongoing compliance with the GDPR and
other applicable data protection legislation, and we may be required to put in place additional control mechanisms which
could be onerous and adversely affect our business, financial condition, r esults of operations, and prospects.
We may not realize the cost savings, synergies, and other benefits expected from the Merger.

### Language ###
English

### Assessment ###
Getting information about the maximum GDPR fine amount

### Query ###
Tell me the maximum fine that can be imposed for GDPR violations.
Tell me the maximum fine that can be imposed for GDPR violations.