Company: RMIX
Filing Date: 2025-11-12
Form Type: S-4
Source: 0001104659-25-110488
Chunk: 726

Company: Suncrete, Inc.
Filing Date: 2025-11-12
Form: S-4
Chunk 726
---
iii) all contractual commitments that the Company or any Company Subsidiary has entered into with respect to privacy and/or data security, and (iv) PCI DSS (collectively, the “

#### Data Security Requirements
”). The Company does not sell Personal Information (as contemplated by the CCPA). The Company’s and the Company Subsidiaries’ employees receive reasonable training on information security issues to the extent required by Privacy/Data Security Laws. The Company and the Company Subsidiaries take commercially reasonable measures to prevent the introduction of and remove Disabling Devices in the Business Systems and Product components. The Company displays a privacy policy on each website and mobile application owned, controlled or operated by the Company and the Company Subsidiaries, and, to the Company’s knowledge, each such privacy policy incorporates all disclosures to data subjects required by the Data Security Requirements.

(k) Since January 1, 2019 to the date of this Agreement, neither the Company nor any of the Company Subsidiaries has: (i) to the Company’s knowledge, experienced any data security breaches, ransomware attacks, unauthorized access or use of any of the Business Systems, or unauthorized access, acquisition, destruction, damage, disclosure, loss, corruption, alteration, or other Processing of any Business Data or Personal Information in the custody or control of the Company, any Company Subsidiary, or any service provider acting on behalf of the Company, or (ii) received notice or become aware through other means of any audits, proceedings or investigations by any Governmental Authority (domestic or foreign) or other person, or received any claims or complaints regarding the collection, dissemination, storage, use, or other Processing of Personal Information, or the violation of any applicable Data Security Requirements. Neither the Company nor any of the Company Subsidiaries has provided or, been legally required to provide, any notice to persons in connection with any unauthorized access, use, or disclosure or other Processing of Personal Information. There have not been any subject access or other individual rights requests made pursuant to the Data Security Requirements.

(l) The Company and/or one of the Company Subsidiaries (i) exclusively owns and possesses all right, title and interest in and to the Business Data constituting Company-Owned IP free and clear of any restrictions other than those imposed by applicable Privacy/Data Security Laws, and (ii) with respect to Business Data that does not constitute Company-Owned IP, has the right to use, exploit, publish, reproduce, distribute, license, sell,