Targets (S4-5)

In 2025, there were no measurable, time-bound and outcome-oriented targets within the meaning of the ESRS in relation to data protection. The aim of the data protection organization is to implement and ensure compliance with data protection regulations. The approach is fundamentally strategic and is primarily based on legal obligations.

Nevertheless, the effectiveness of the data protection measures is regularly reviewed, particularly with regard to compliance with the GDPR. We pursue this through uniform and binding data protection regulations, our processing directory, which is a documented overview of all processing activities involving personal data in accordance with Art. 30 GDPR, a Group-wide data protection organization, communication and training measures, as well as our input and complaints management.