The overall responsibility for data protection and data security, as well as compliance with the legal requirements arising from the European General Data Protection Regulation (EU GDPR), lies with the Group Management Board.