Company: GRAN
Filing Date: 2025-07-01
Form Type: 424B4
Source: 0001213900-25-060039
Chunk: 64

Company: Grande Group Ltd/HK
Filing Date: 2025-07-01
Form: 424B4
Chunk 64
---
 shall be erased if it is no longer required, unless erasure is prohibited by law or is not in the public interest. The PDPO also confers on the Privacy Commissioner for Personal Data (“Privacy Commissioner”) power to conduct investigations and institute prosecutions. The data protection principles (collectively, the “DPP”), which are contained in Schedule 1 to the PDPO, outline how data users should collect, handle, and use personal data, complemented by other provisions imposing further compliance requirements. The collective objective of DPPs is to ensure that personal data is collected on a fully informed basis and in a fair manner, with due consideration towards minimizing the amount of personal data collected. Once collected, the personal data should be processed in a secure manner and should only be kept for as long as necessary for the fulfilment of the purposes of using the data. Use of the data should be limited to or related to the original collection purpose. Data subjects are given certain rights, inter alia: (a) the right to be informed by a data user whether the data user holds personal data of which the individual is the data subject; (b) if the data user holds such data, to be supplied with a copy of such data; and (c) the right to request correction of any data they consider to be inaccurate. The Commissioner may carry out criminal investigations and institute prosecution for certain offenses. Depending on the severity of the cases, the Privacy Commissioner will decide whether to prosecute or refer cases involving suspected commission to the Department of Justice of Hong Kong. Victims may also seek compensation by civil action from data users for damage caused by a contravention of the PDPO. The Commissioner may provide legal assistance to the aggrieved data subjects if the Commissioner deems fit to do so. We believe that we and our subsidiaries have been in compliance with the data privacy and personal information requirements of the PDPO. Moreover, we do not expect to be subject to any cybersecurity review by Hong Kong and PRC government authorities for this Offering. However, if we or our Operating Subsidiary conducting business operations in Hong Kong have violated certain provisions of the PDPO, we could face significant civil penalties and/or criminal prosecution, which could adversely affect our business, financial condition, and results of operations. If the PRC government chooses to extend the oversight and control over offerings that are conducted overseas and / or foreign investment in Mainland China-based issuers to Hong Kong-based issuers, such action may significantly limit or completely hinder our ability to offer or continue to offer Class