Company: SIDU
Filing Date: 2025-03-31
Form Type: 10-K
Source: 0001641172-25-001742
Chunk: 1117

Company: Sidus Space Inc.
Filing Date: 2025-03-31
Form: 10-K
Item: Item 1
Chunk 1117
---
 those currently enforced in the United States. The law requires companies to
meet stringent requirements regarding the handling of personal data of individuals located in the EEA. These more stringent requirements
include expanded disclosures to inform customers about how we may use their personal data through external privacy notices, increased
controls on profiling customers and increased rights for data subjects (including customers and employees) to access, control and delete
their personal data. In addition, there are mandatory data breach notification requirements. The law also includes significant penalties
for non-compliance, which may result in monetary penalties of up to the higher of €20.0 million or 4% of a group’s worldwide
turnover for the preceding financial year for the most serious violations. The GDPR and other similar regulations require companies to
give specific types of notice and informed consent is required for the placement of a cookie or similar technologies on a user’s
device for online tracking for behavioral advertising and other purposes and for direct electronic marketing, and the GDPR also imposes
additional conditions in order to satisfy such consent, such as a prohibition on pre-checked tick boxes and bundled consents, thereby
requiring customers to affirmatively consent for a given purpose through separate tick boxes or other affirmative action.

28

A
significant data breach or any failure, or perceived failure, by us to comply with any federal, state or foreign privacy or consumer
protection-related laws, regulations or other principles or orders to which we may be subject or other legal obligations relating to
privacy or consumer protection could adversely affect our reputation, brand and business, and may result in claims, investigations, proceedings
or actions against us by governmental entities or others or other penalties or liabilities or require us to change our operations and/or
cease using certain data sets. Depending on the nature of the information compromised, we may also have obligations to notify users,
law enforcement or payment companies about the incident and may need to provide some form of remedy, such as refunds, for the individuals
affected by the incident.

Failures
in our technology infrastructure could damage our business, reputation and brand and substantially harm our business and results of operations.

If
our main data center were to fail, or if we were to suffer an interruption or degradation of services at our main data center, we could
lose important manufacturing and technical data, which could harm our business. Our facilities are vulnerable to damage or interruption
from earthquakes, hurricanes, floods, fires, cyber security attacks, terrorist attacks, power losses, telecommunications failures, and
similar events. In