Ethics Committee: guidance, second-tier decision-making regarding ethics reports Manager responsible for data processing at the bank and the protection of customers’ personal data: data protection officer (reporting directly to the top management of the data controller or the data processor and not accepting instructions from anyone regarding the discharging of duties The Board of Directors and the Supervisory Board are responsible for security.