2017 DE SA (North Rhine-Westphalia) Type of BCR: Controller Categories of data subjects Employees Clients, customers Suppliers, service providers Other third parties as part of the Group’s respective regular business activities Final Decision