Code of conduct and data protection. 7.1 Basic company values of SCHOTT include integrity, reliability and compliance with statutory and ethical guidelines as set out more specific in SCHOTT’s Code of Conduct. Suppliers are expected by SCHOTT to share the aforementioned principles and to observe the Code of Conduct for Suppliers (available at xxxx://xxx.xxxxxx.xxx/XxX-Xxxxxxxx).
7.2 The Supplier confirms that it is well aware of the provisions of the EU-Regulations for the fight against terrorism and that it will comply at all times with the EU- Council Regulation No. 881/2002 of 27 May and EU-Council Regulation No. 2580/2001 of 27 December 2001 in its respective current consolidated version. In particular Supplier hereby confirms in respect of the above, that it does not have any business relationship to persons, which are listed in such Regulations. The security relevant aspects, as listed in the European Commission Guidelines for Authorized Economic Operators (AEO)- (TAXUD/2006/1450), (EU-Regulation No 648/2005 and EU- Regulation No 1875/2006) will be met at all times by implementation of appropriate security and safety standards. The Guidelines can be found under the official website of the European Commission. The respective internet link, which was available at the time this document was being drawn up, is: xxxx://xx.xxxxxx.xx/xxxxxxxx_xxxxxxx/xxxxxxx/xxxxxx_xxxxx s/customs_security/aeo/index_en.htm#guidelines.
7.3 The Supplier will follow in particular the regulations of the European Data Protection Directive and the other regulations to the data protection if it receives personal data from SCHOTT or the area from SCHOTT or gains insight into those. The Supplier may only collect, process and use such data insofar as this is permitted to him by SCHOTT`s order or as it is necessary for the performance of the ordered service. Any further processing of the data, in particular such for the benefit of the Supplier or a third party is not permitted; this also applies to the processing of personal data at a location outside the scope of the European Data Protection Directive.
