Targets (S1-5)

In 2025, there were no measurable, time-bound and outcome-oriented targets within the meaning of the ESRS in relation to data protection. The aim of the data protection organization is to implement and ensure compliance with data protection regulations. The approach is fundamentally strategic and is primarily based on legal obligations.

Nevertheless, the effectiveness of the data protection measures is regularly reviewed, particularly with regard to compliance with the GDPR. These include uniform and binding data protection regulations, our processing directory, which is a documented overview of all processing activities involving personal data in accordance with Art. 30 GDPR, and our input and complaints management.