Version: 1.0

Effective Date: 2026-04-30

Introduction

Kaon Group Co., Ltd., and its subsidiaries, including Kaon Broadband (collectively, "Kaon", "we", "us", or "our"), respect your rights under the EU Data Act (Regulation (EU) 2023/2854) ("Data Act").

Certain products and services we provide meet the definition of a "connected product" or "related service." This notice outlines how users can access and share the data generated by these products. Any processing of personal data strictly complies with the General Data Protection Regulation (GDPR), and we implement appropriate technical and organizational measures to safeguard all data against unauthorized access.

Connected Products and Data Generated

A "connected product" is a device that collects data concerning its use or environment and communicates that data electronically. Kaon devices under this definition include Broadband CPE, Wi-Fi Routers, Set-Top Boxes, and AI/IoT Smart Devices. The table below categorizes the data generated, its format, and retention policies:

User Rights: Access, Erasure, and Portability

Individuals or legal entities using our connected products ("Users") have the right to request access to, erasure of, or portability of the data generated by their products. Kaon ensures that the data is made available to the User or a designated third party without undue delay, in a structured, commonly used, and machine-readable format (e.g., JSON, XML) to fulfill the interoperability requirements of Article 33 of the Data Act.

Data Sharing and Third-Party Access

Under the EU Data Act, users have the right to request that data generated by their connected products be shared with a designated third party. Kaon is committed to facilitating these requests securely and without undue delay.

How Data is Shared:

Data will only be shared with third parties based on the user's explicit request and, where personal data is involved, in accordance with a valid legal basis under the General Data Protection Regulation (GDPR). The receiving third party may only process the data for the purposes and under the conditions agreed upon with the user.4.3 Limitations on Access

Limitations on Access:

To protect users and our intellectual property, Kaon will not share data in the following circumstances:

• The designated third-party recipient is defined as a "gatekeeper" under the Digital Markets Act (Regulation (EU) 2022/1925).
• The data involves Kaon's protected trade secrets, and the user or third party fails to agree upon or implement necessary technical and organizational measures to preserve confidentiality.
• The data would be used by the third party to develop a connected product that competes with the Kaon product from which the data originated.

Data Use Restrictions

To protect intellectual property and ensure fair competition, data obtained from Kaon's connected products shall not be used for the following prohibited purposes unless expressly required by law or authorized in writing by Kaon:

• The development of competing connected products.
• The reverse engineering of Kaon's algorithms, firmware, or hardware trade secrets.
• Targeted advertising or non-consensual profiling of users.

Contact and Data Request Channel

To exercise your rights under the EU Data Act, or for any questions regarding this compliance statement, please submit your request through our designated channel:

Email: DataPrivacy@kaongroup.com

We will review and respond to your request within a reasonable timeframe, verifying user identity where necessary to ensure data security.

Policy Updates and Declaration

Kaon may update this statement periodically to reflect changes in product functionality, business strategy, or future guidance issued by EU regulatory agencies. The English version of this policy shall prevail in the event of any conflict with translated local language versions.