Measures and guidelines: The handling of personal data is governed both by the provisions of the German Federal Data Protection Act (BDSG) and by the Group Code of Conduct, which requires employees to comply with the provisions of data protection law and the Group data protection guidelines and to actively contribute to ensuring that personal data are protected reliably from unauthorised access.