Company: GIGGU
Filing Date: 2025-09-29
Form Type: 425
Source: 0001193125-25-221783
Chunk: 56

Company: GigCapital7 Corp.
Filing Date: 2025-09-29
Form: 425
Chunk 56
---
authorized Processing or other misuse. The Company has implemented written policies relating to Processing of Personal Data and the security of Company information, Software and IT Assets. The Company has tested and maintained commercially
reasonable measures to protect the confidentiality, integrity, and security of all data in its possession or control against damage, loss, and against unauthorized Processing or other misuse. No Person has obtained unauthorized access to any
material information, data (including Personal Data), IT Assets or Software in the possession of the Company or, to the Knowledge of the Company, in the custody or control of a third party, and there has not been any loss, damage, improper
disclosure or

17

unauthorized processing, breach of security, unauthorized Processing, or other compromise of the security, confidentiality or integrity of any such IT Assets, Software, information, or data. The
Company has not experienced unavailability, or any security incident that has compromised the integrity or availability of the material IT Assets of the Company or the information and data thereon. Neither the Company nor any third party acting at
its direction or authorization has paid any perpetrator of any actual or threatened security incident or cyber-attack, including, but not limited to a ransomware attack or a
denial-of-service attack. There are no written or oral complaints, or notice of any claims or investigations, relating to an unauthorized Processing of Personal Data,
improper use or disclosure of, or a breach in the security of, any such information or data or relating to any information security-related incident has been received by the Company and the Company has not been notified in writing, or been required
by applicable Laws or Contract to notify in writing, any Person or entity of any Personal Data, information security-related incident.

(j) The Company has provided notifications to, and has obtained consent from, Persons regarding its Processing of Personal Data where such
notice and/or consent is required by Data Protection Law or Contract. The Company has collected all Personal Data in accordance with all Data Protection Law, and the Company’s collection of such Personal Data or any other data from third
parties is in accordance with any requirements from such third parties, including written website terms and conditions. The Company has provided all notices and obtained all consents required in connection with any use of cookies, device or browser,
cross-device tracking, or other user, device, account, or other tracking technology or similar technology, in connection with the use of such technologies in accordance with Data Protection Law. There has been no interception, disclosure of,
provision of access