{"id":724,"date":"2025-09-17T01:11:27","date_gmt":"2025-09-17T01:11:27","guid":{"rendered":"https:\/\/legiergroup.info\/?page_id=724"},"modified":"2025-10-21T13:45:40","modified_gmt":"2025-10-21T13:45:40","slug":"supply-chain","status":"publish","type":"page","link":"https:\/\/legiergroup.info\/en\/supply-chain\/","title":{"rendered":"Supply chain"},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

1) Introduction & Definition<\/h1>

This presentation describes an integrated, cross-brand supply chain of the LEGIER Group (incl. SCANDIC Group by LEGIER) - from input (sources, suppliers, partners) through production\/services to global delivery and monetization - with governance, KPIs and a digital image (\u201eDigital Twin\u201c).<\/p>

Supply chain management (SCM) strategically and operationally coordinates activities along the supply chain and integrates procurement\/sourcing, conversion\/production and logistics\/distribution. The aim is to achieve a system-wide increase in effectiveness (customer benefit) and efficiency across company boundaries.<\/p>

2) Overview: LEGIER & SCANDIC Group by LEGIER<\/h1>
  • LEGIER MEDIA GROUP: global media conglomerate with its own daily newspapers and high-performance infrastructure (data center in Manama, Bahrain).<\/li>
  • SCANDIC Group by LEGIER: associated brands in Payments\/Crowdfunding, Real Estate, Trading\/Finance, Private Aviation, Yachting, Data Center, Trust\/Asset Protection, Security and Health.<\/li><\/ul>

    The ecosystem enables cross-brand value streams (e.g. capital \u2192 deal flow \u2192 processing \u2192 operations \u2192 service \u2192 monetization) and shared platforms (identity, compliance, data, security, operations).<\/p>

    3) Digital Twin + Control Tower<\/h1>
    • Digital twin: semantically linked image of all assets, nodes, flows and SLAs - across brands and regions.<\/li>
    • Supply chain control tower: real-time visibility and control (demand\/traffic, order\/content throughput, capacity, risks, compliance, revenue) including suggested countermeasures (COA).<\/li>
    • Forecasts & scenarios: Forecasts (load, demand, sales, subscription\/yield), what-if simulations (outages, peaks, policy changes) and automated COAs.<\/li><\/ul>

      4) End-to-end value stream per brand (short profile & supply chain role)<\/h1>
      • National - examples: DE ZAG & GwG; AT ZaDiG 2018 & FM-GwG; FR Code mon\u00e9taire et financier & LCB-FT; IT d.lgs. PSD2\/AML; ES RDL 19\/2018 & Ley 10\/2010; NL Wft & Wwft; PL Ustawa o us\u0142ugach p\u0142atniczych & AML; RO Legea 209\/2019 & 129\/2019.<\/li><\/ul>
        • EU: PSD2; E-Money Directive; MiCA & Transfer of Funds Reg.; DORA; AML Directives (5th\/6th); GDPR; eIDAS; Data Act; DSA\/DMA.<\/li><\/ul>

          R<\/strong>legal framework<\/strong>\u00a0(EU \/ national -\u00a0<\/strong>Selection<\/strong>):<\/strong><\/p>

          4.1 SCANDIC PAY (Crowdfunding, finance, digital assets)<\/h2>
          • eIDAS: Trust services\/signatures (article per use case).<\/li>
          • DORA: Art. 5 ff. (ICT risk), Art. 17 ff. (incident reporting).<\/li>
          • MiCA\/TFR: central application articles incl. travel data obligations.<\/li>
          • PSD2: Art. 66\/67 (access to third-party services), Art. 97 (SCA).<\/li>
          • GDPR: Art. 5 (Principles), Art. 6 (Legal bases), Art. 28 (Processors), Art. 32 (Security), Art. 33\/34 (Notification), Art. 44 ff. (Transfers).<\/li><\/ul>

            Article notes<\/strong>\u00a0EU (<\/strong>Extract<\/strong>):<\/strong><\/p>

            • Input\/Source: Project initiators, investors\/backers, payment networks, card program (debit).<\/li>
            • Make\/Convert: Due diligence, project listing, Payment orchestration, token\/asset mapping, reporting.<\/li>
            • Deliver\/Operate: Platform operation, investor communication, payouts, statistics, compliance\/DSGVO.<\/li>
            • Value: Capital mobilization, deal sourcing for Estate\/Trade, brand reach.<\/li>
            • National - examples: DE GEG & GwG; AT EAVG\/EEffG & FM-GwG; FR Code de la construction & LCB-FT; IT Testo Unico Edilizia & d.lgs. 231\/2007; ES LOE & Ley 10\/2010.<\/li>
            • EU: CSDD\/CSRD; AML directives; EPBD (energy performance of buildings); Consumer Rights Directive; GDPR.<\/li><\/ul>

              Legal framework<\/strong>\u00a0(EU \/ national -\u00a0<\/strong>Selection<\/strong>):<\/strong><\/p>

              4.2 SCANDIC ESTATE (Real Estate Development & Brokerage)<\/h2>
              • GDPR: Art. 6, 28, 32 (legal basis\/AVV\/security).<\/li>
              • EPBD: Energy efficiency\/EP certificates (article per national implementation).<\/li>
              • CSDDD: Core article on risk analysis\/remediation\/stakeholder involvement.<\/li>
              • CSRD: Art. 19a\/29a (sustainability reports).<\/li><\/ul>

                Article notes<\/strong>\u00a0EU (<\/strong>Extract<\/strong>):<\/strong><\/p>

                • Input\/Source: Land\/properties, developers, authorities, construction\/service providers, capital partners.<\/li>
                • Make\/Convert: project development, valuation, marketing, transaction processing, ESG\/compliance.<\/li>
                • Deliver\/Operate: handover\/after-sales, operation\/asset management, logistics and communication infrastructure.<\/li>
                • Value: Asset pipeline for investors\/Trust, space\/locations for operations (e.g. logistics\/communication).<\/li>
                • National - Examples: DE WpHG\/WpDVerOV; FR Code mon\u00e9taire et financier; IT TUF; ES Ley del Mercado de Valores; NL Wft; PL Ustawa o obrocie instrumentami finansowymi.<\/li>
                • EU: MiFID II\/MiFIR; MAR; Prospectus Regulation; EMIR; BMR; SFDR\/Taxonomy; AML; GDPR.<\/li><\/ul>

                  Legal framework<\/strong>\u00a0(EU \/ national -\u00a0<\/strong>Selection<\/strong>):<\/strong><\/p>

                  4.3 SCANDIC TRADE (Markets: equities, foreign exchange, crypto, commodities, emission rights)<\/h2>
                  • SFDR: Art. 3, 4, 6\/8\/9 (Disclosure\/PAI\/Products).<\/li>
                  • Prospectus Regulation: Art. 3 et seq. (obligations\/thresholds).<\/li>
                  • MAR: Art. 7, 14, 18 (insiders\/prohibitions\/lists).<\/li>
                  • MiFIR: Transparency\/reporting obligations (core title).<\/li>
                  • MiFID II: Art. 16, 24, 25 (organization\/information\/suitability).<\/li><\/ul>

                    Article notes<\/strong>\u00a0EU<\/strong>:<\/strong><\/p>

                    • Input\/Source: Market data\/exchanges, liquidity partners, regulatory\/KYC\/AML.<\/li>
                    • Make\/Convert: order management, risk\/margin systems, portfolio\/treasury functions.<\/li>
                    • Deliver\/Operate: reporting\/billing, APIs\/platform, 24\/7 monitoring, incident response.<\/li>
                    • Value: Liquidity\/hedging component for group (e.g. Aviation fuel hedges, FX hedging Real Estate)<\/li>
                    • National - Examples: DE LuftVG\/LuftBO; AT Luftfahrtgesetz; FR Code de l'aviation civile; IT Regolamenti ENAC; ES Ley de Navegaci\u00f3n A\u00e9rea.<\/li>
                    • EU: EASA Basic Regulation 2018\/1139; Air OPS 965\/2012; Occurrence Reporting 376\/2014; Air Passenger Rights Regulation 261\/2004; DSA (customer pages).<\/li><\/ul>

                      Legal framework<\/strong>\u00a0(EU \/ national -\u00a0<\/strong>Selection<\/strong>)<\/strong><\/p>

                      4.4 SCANDIC FLY (private jet charter & special flights)<\/h2>
                      • Regulation 376\/2014: Art. 4 et seq. (incident reporting).<\/li>
                      • Regulation 261\/2004: Art. 5-9 (compensation\/support\/reimbursement).<\/li>
                      • Air OPS 965\/2012: Parts OPS\/ORO\/ARO (operational requirements).<\/li>
                      • EASA Basic Regulation 2018\/1139: central approval\/supervisory articles.<\/li><\/ul>

                        Article notes<\/strong>\u00a0EU (<\/strong>Extract<\/strong>):<\/strong><\/p>

                        • Input\/source: Fleet\/operator network, slots\/handling, crews, safety\/compliance partners.<\/li>
                        • Make\/Convert: Brokerage, flight\/route planning, handling\/ground, Security, special cases (evacuation\/freight).<\/li>
                        • Deliver\/Operate: charter execution, 24\/7 customer service, billing, DSA\/compliance pages, arbitration.<\/li>
                        • Value: Premium mobility for customers\/management, synergies with Yachts, Security and Trust.<\/li>
                        • National - examples: DE Recreational craft\/sea regulations; FR Code des transports (nautique); IT Codice della nautica da diporto; ES norma n\u00e1utica recreativa; NL Binnenvaartwet.<\/li>
                        • EU: Recreational Craft Directive 2013\/53\/EU; Passenger Rights at Sea Regulation 1177\/2010; Port\/Safety Regulation 725\/2004.<\/li><\/ul>

                          Legal framework<\/strong>\u00a0(EU \/ national -\u00a0<\/strong>Selection<\/strong>):<\/strong><\/p>

                          4.5 SCANDIC YACHTS (yacht brokerage)<\/h2>
                          • Regulation 725\/2004: Safety of ships\/port facilities (ISPS connection).<\/li>
                          • Regulation 1177\/2010: Art. 16 et seq. (passenger rights by sea).<\/li>
                          • Directive 2013\/53\/EU: essential safety\/environmental requirements (Annexes).<\/li><\/ul>

                            Article notes<\/strong>\u00a0EU (<\/strong>Extract<\/strong>):<\/strong><\/p>

                            • Input\/Source: Shipyards\/owners, listings, classification societies, insurers.<\/li>
                            • Make\/Convert: Valuation, mandate, marketing, due diligence, escrow, transfer processes.<\/li>
                            • Deliver\/Operate: Refit\/service partner, charter management, crew, port\/logistics partner.<\/li>
                            • Value: Complements luxury mobility (Fly), cross-selling with Trust\/Wealth, events\/branding.<\/li>
                            • National - Examples: DE BDSG\/TTDSG\/BSIG(NIS2); FR LIL & D\u00e9crets ANSSI; IT Codice Privacy; ES LOPDGDD; NL UAVG; PL Ustawa o ochronie danych; RO Legea 190\/2018.<\/li><\/ul>
                              • EU: GDPR; ePrivacy Directive; NIS-2; Data Act\/DGA; Cyber Resilience Act; eIDAS; DORA (for financial IT services).<\/li><\/ul>

                                Legal framework<\/strong>\u00a0(EU \/ national -\u00a0<\/strong>Selection<\/strong>):<\/strong><\/p>

                                4.6 SCANDIC DATA (data centers & platforms)<\/h2>
                                • CRA: Product cyber security\/CE conformity.<\/li>
                                • Data Act\/DGA: Data access\/altruism - duties per role.<\/li>
                                • NIS-2: Art. 20-23 (risk management), Art. 30 (reporting).<\/li>
                                • GDPR: Art. 5, 6, 28, 32-36, 44 ff (core obligations).<\/li><\/ul>

                                  Article notes<\/strong>\u00a0EU (<\/strong>Extract<\/strong>):<\/strong><\/p>

                                  • Input\/source: editorial\/brand data, customer data (GDPR), telemetry\/logs, partner feeds.<\/li>
                                  • Make\/Convert: Compute\/Storage (IBM mainframes, AI\/HPC), data integration, ontology, Security.<\/li>
                                  • Deliver\/Operate: Hosting\/Edge\/CDN connection, observability, SLO\/SLA management, backup\/BCP\/DR.<\/li>
                                  • Value: Backbone for operations, analytics\/forecasting, identity\/compliance backbone.<\/li>
                                  • National - Examples: Register of beneficial owners (DE Transparency Register, FR Registre des b\u00e9n\u00e9ficiaires effectifs, IT Registro titolari effettivi, ES Registro de titularidades reales, NL UBO-register, PL CRBR, RO Registrul beneficiarilor reali).<\/li>
                                  • EU: AML Directives; DAC6 (reporting obligation for cross-border tax arrangements); GDPR; SFDR\/Taxonomy (depending on the product).<\/li><\/ul>

                                    Legal framework<\/strong>\u00a0(EU \/ national -\u00a0<\/strong>Selection<\/strong>):<\/strong><\/p>

                                    4.7 SCANDIC GROUP (asset protection & succession)<\/h2>
                                    • GDPR: Art. 6\/28\/32 (legal basis\/AVV\/security).<\/li>
                                    • DAC6: Indicators\/deadlines of cross-border arrangements.<\/li>
                                    • AMLD: UBO\/KYC\/Care - Key messages from the 5th\/6th AMLD.<\/li><\/ul>

                                      Article notes<\/strong>\u00a0EU (<\/strong>Extract<\/strong>):<\/strong><\/p>

                                      • Input\/Source: Clients\/Family Offices, wealth\/asset data, legal\/tax frameworks.<\/li>
                                      • Make\/Convert: Structuring (Trust\/FO), due diligence, risk\/legal review, foundation\/ESG objectives.<\/li>
                                      • Deliver\/Operate: Trust management, reporting\/audit, interaction with Pay\/Trade\/Estate\/Yachts\/Fly.<\/li>
                                      • Value: Securing\/scaling assets, synergies in investment\/real assets\/luxury services.<\/li>
                                      • National - examples: DE GewO \u00a734a\/BewachV; FR Code de la s\u00e9curit\u00e9 int\u00e9rieure; IT TULPS (sicurezza privata); ES Ley 5\/2014 Seguridad Privada; NL Wet particuliere beveiligingsorganisaties; PL Ustawa o ochronie os\u00f3b i mienia; RO Legea 333\/2003.<\/li>
                                      • EU: NIS-2; CER Directive; Cyber Resilience Act; GDPR.<\/li><\/ul>

                                        Legal framework<\/strong>\u00a0(EU \/ national -\u00a0<\/strong>Selection<\/strong>):<\/strong><\/p>

                                        4.8 SCANDIC SEC (Security: physical & digital)<\/h2>
                                        • GDPR: Art. 32, 35 (Security\/DPIA).<\/li>
                                        • CER DIRECTIVE: Risk\/resilience obligations (item-specific per sector).<\/li>
                                        • NIS-2: Art. 20-23 (risk management), Art. 30 (notification), Art. 32 (enforcement).<\/li><\/ul>

                                          Article notes<\/strong>\u00a0EU (<\/strong>Extract<\/strong>):<\/strong><\/p>

                                          • Input\/Source: Hazard\/threat analyses, locations\/objects, VIPs\/persons.<\/li>
                                          • Make\/Convert: Security concepts, protective measures (object\/person\/RC), cyber detection\/response.<\/li>
                                          • Deliver\/Operate: 24\/7 operations, event\/travel Security (Fly\/Yachts), crisis\/evacuation planning.<\/li>
                                          • Value: Resilience of the entire supply chain, protection of people, data, assets, brand.<\/li>
                                          • National - examples: DE SGB V\/BDSG\/BfArM regulations; FR Code de la sant\u00e9 publique; IT norme SSN & privacy sanit\u00e0; ES Ley 41\/2002 & LOPDGDD; NL WGBO\/AVG; PL Ustawa o systemie informacji w ochronie zdrowia; RO Legea 95\/2006.<\/li>
                                          • EU: GDPR; EHDS Regulation; MDR 2017\/745; IVDR 2017\/746; Patients' Rights Directive 2011\/24\/EU.<\/li><\/ul>

                                            Legal framework<\/strong>\u00a0(EU \/ national -\u00a0<\/strong>Selection<\/strong>):<\/strong><\/p>

                                            4.9 SCANDIC HEALTH (ENT Northwest \/ Medical Services)<\/h2>
                                            • MDR\/IVDR: Conformity\/monitoring - articles\/appendices per product.<\/li>
                                            • EHDS-VO: Interoperability\/access rules (article-dependent).<\/li>
                                            • GDPR: Art. 9, 15-22, 32-36 (health data\/rights\/security\/DPIA).<\/li><\/ul>

                                              Article notes<\/strong>\u00a0EU (<\/strong>Extract<\/strong>):<\/strong><\/p>

                                              • Input\/source: clinics\/practices, medical devices\/pharmaceuticals, patient flows, referring physicians.<\/li>
                                              • Make\/Convert: diagnostics\/therapy (ENT), surgery services, appointment\/case management, quality and hygiene processes.<\/li>
                                              • Deliver\/Operate: care\/outcome tracking, telemedicine, billing, data protection\/patient rights.<\/li>
                                              • Value: Health services in the network; medical care for customers\/employees.<\/li><\/ul>

                                                5) Process map (SCOR-adapted, Group-wide)<\/h1>
                                                • Plan: S&OP via brands (capacity, demand, campaigns, liquidity).<\/li>
                                                • Source: Supplier\/partner management, onboarding, contracts, KYC\/AML, rights.<\/li>
                                                • Make: service\/content\/project production, quality\/compliance, approvals.<\/li>
                                                • Deliver: Multi-Channel\/Operations, SLA, Logistics\/Flight\/Sea, Edge\/CDN, Customer Service.<\/li>
                                                • Return\/Respond: Complaints\/Corrections\/Takedowns, Medical Post-Op\/Follow-ups, Incident Lessons Learned.<\/li>
                                                • Enable: Data Center, Identity\/IAM, Security, Ontology\/MDM, FinOps, Legal\/Regulatory.<\/li><\/ul>

                                                  6) Integration & data architecture (high-level)<\/h1>
                                                  • Integration layer: events\/streaming + batch; zero-copy\/virtualization for single pane of glass.<\/li>
                                                  • Semantic layer\/ontology: entities (project, asset, flight, yacht, object, campaign, customer, contract, right, incident, mandate, payment, order) with lineage\/SLA\/PII.<\/li>
                                                  • Control Tower apps: dashboards, root cause, playbooks (COA), approvals, simulations.<\/li>
                                                  • Security\/Privacy: Zero-Trust, Threat-Detection, Secrets-Management, Encryption at Rest\/In Transit.<\/li><\/ul>

                                                    7) Governance & Compliance<\/h1>
                                                    • EU-DSGVO\/BDSG, DSA transparency reports, Modern Slavery Act, KYC\/AML in Finance\/Trade.<\/li>
                                                    • CSDDD\/LkSG due diligence obligations in supply chains (risk analysis, prevention, complaints mechanism, report).<\/li>
                                                    • Industry regulations: Aviation (Fly), Maritime\/Yachting, Real Estate and Financial Regulation, Medical Law (Health).<\/li>
                                                    • Energy Performance of Buildings Directive (EPBD) - Directive (EU) 2024\/1275 (recast)<\/li>
                                                    • Real estate, construction & energy efficiency:<\/strong><\/li>
                                                    • General Product Safety Regulation - Regulation (EU) 2023\/988<\/li>
                                                    • Consumer Rights Directive - Directive 2011\/83\/EU<\/li>
                                                    • Consumer & E-Commerce:<\/strong><\/li>
                                                    • Ban on products from forced labor - Regulation (EU) 2024\/3015<\/li>
                                                    • Conflict minerals - Regulation (EU) 2017\/821<\/li>
                                                    • EUDR - Regulation (EU) 2023\/1115 (Deforestation-free supply chains)<\/li>
                                                    • CSDDD - Directive (EU) 2024\/1760 (Corporate Sustainability Due Diligence)<\/li>
                                                    • CSRD - Directive (EU) 2022\/2464 (Corporate Sustainability Reporting)<\/li>
                                                    • Sustainability & supply chain diligence:<\/strong><\/li>
                                                    • Recreational craft - Directive 2013\/53\/EU (Recreational Craft)<\/li>
                                                    • Ship and port facility safety - Regulation (EC) No. 725\/2004<\/li>
                                                    • Air passenger rights - Regulation (EC) No. 261\/2004<\/li>
                                                    • Air OPS - Regulation (EU) No. 965\/2012 (Air Operations)<\/li>
                                                    • EASA Basic Regulation - Regulation (EU) 2018\/1139<\/li>
                                                    • Aviation & Sea:<\/strong><\/li>
                                                    • Dual-use Regulation - Regulation (EU) 2021\/821 (control of dual-use items)<\/li>
                                                    • Union Customs Code (UCC) - Regulation (EU) No. 952\/2013<\/li>
                                                    • Trade, customs & export controls:<\/strong><\/li>
                                                    • Anti-money laundering: 5th AMLD - Directive (EU) 2018\/843; 6th AMLD - Directive (EU) 2018\/1673<\/li>
                                                    • Sustainability reporting\/financial market: SFDR - Regulation (EU) 2019\/2088; Taxonomy - Regulation (EU) 2020\/852<\/li>
                                                    • Market Abuse Regulation (MAR) - Regulation (EU) No. 596\/2014; Prospectus Regulation - Regulation (EU) 2017\/1129<\/li>
                                                    • MiFID II - Directive 2014\/65\/EU & MiFIR - Regulation (EU) No. 600\/2014<\/li>
                                                    • MiCA - Regulation (EU) 2023\/1114 & Transfer of Funds Regulation - Regulation (EU) 2023\/1113<\/li>
                                                    • E-Money Directive - Directive 2009\/110\/EC<\/li>
                                                    • PSD2 - Directive (EU) 2015\/2366<\/li>
                                                    • Financial services<\/strong>ngen, payments & crypto:<\/strong><\/li>
                                                    • DORA - Regulation (EU) 2022\/2554 (with accompanying Directive (EU) 2022\/2556)<\/li>
                                                    • Directive on the resilience of critical facilities (CER) - Directive (EU) 2022\/2557<\/li>
                                                    • NIS-2 - Directive (EU) 2022\/2555<\/li>
                                                    • Cybersecurity & critical\u00a0<\/strong>Infrastructures:<\/strong><\/li>
                                                    • Cyber Resilience Act (CRA) - Regulation (EU) 2024\/2847<\/li>
                                                    • eIDAS & European Digital Identity - Regulations (EU) No. 910\/2014 and (EU) 2024\/1183<\/li>
                                                    • Digital Markets Act (DMA) - Regulation (EU) 2022\/1925<\/li>
                                                    • Digital Services Act (DSA) - Regulation (EU) 2022\/2065<\/li>
                                                    • Digital platforms & markets:<\/strong><\/li>
                                                    • European Health Data Space - Regulation (EU) 2025\/327<\/li>
                                                    • AI Regulation (Artificial Intelligence Act) - Regulation (EU) 2024\/1689<\/li>
                                                    • Data Act - Regulation (EU) 2023\/2854<\/li>
                                                    • Data Governance Act - Regulation (EU) 2022\/868<\/li>
                                                    • ePrivacy Directive - Directive 2002\/58\/EC<\/li>
                                                    • General Data Protection Regulation (GDPR) - Regulation (EU) 2016\/679<\/li>
                                                    • Data protection, data & AI:<\/strong><\/li>
                                                    • Relevant legal frameworks that typically have to be taken into account depending on the business area of the LEGIER Group (incl. SCANDIC):<\/li><\/ul>

                                                      7.1 Relevant European legislation (extract)<\/h2>

                                                      8) Risks & resilience (with COA examples)<\/h1>
                                                      • Cyber\/availability: CDN\/edge\/cloud\/data center failures \u2192 automatic failover, rate limits, graceful degradation, prewarming.<\/li>
                                                      • Regulatory\/compliance: policy changes (DSA\/ESG\/KYC) \u2192 rule watch, feature flags, training, audit trails.<\/li>
                                                      • Supplier\/partner failure: alternative networks (operators\/yards\/exchanges), contract SLAs, emergency ramps.<\/li>
                                                      • Peaks in demand: Autoscaling, prioritization of critical pipelines (e.g. evacuation flights), capacity rebalancing.<\/li>
                                                      • Security situation: Travel\/Event-Security, evacuation playbooks, emergency communication.<\/li><\/ul>

                                                        9) Metrics & target KPIs (excerpt)<\/h1>
                                                        • Pay\/Trade: Authorization rate, settlement TTR, reversal rate, VaR\/margin utilization.<\/li>
                                                        • Estate: Time-to-close, notarization lead time, ESG score per project, vacancy rate.<\/li>
                                                        • Fly\/Yachts: On-time performance, safety events, NPS, charter utilization, fuel\/CO2 per hour.<\/li>
                                                        • Data\/Media: Availability, 95p\/99p latency, Core Web Vitals, Data Freshness, Incident MTTR.<\/li>
                                                        • Trust: Reporting fidelity, audit findings, client satisfaction, SLA adherence.<\/li>
                                                        • Security\/Health: Incident rate, response time, compliance rate, patient satisfaction.<\/li><\/ul>

                                                          10) Operating model & roles (RACI, outlined)<\/h1>
                                                          • Global: Control Tower (24\/7), Data\/Ontology, Security\/CERT, Compliance, Vendor Management, FinOps.<\/li>
                                                          • Brand: Responsible owner (Pay\/Estate\/Trade\/Fly\/Yachts\/Data\/Trust\/Sec\/Health) with clear SLAs.<\/li>
                                                          • Together: Change Advisory Board, Incident Commander, Data Governance Board, Legal\/Regulatory Council.<\/li><\/ul>

                                                            11) Implementation roadmap (12 months)<\/h1>

                                                            0-90 days (Foundational):<\/p>

                                                            • Data inventory & minimal digital twin (brands\/assets\/flows\/SLAs).<\/li>
                                                            • Control Tower: first dashboards\/alerts; COA playbooks for critical scenarios (CDN\/DSA\/Payment).<\/li>
                                                            • Standardize supplier\/KYC\/AML due diligence, mandate\/contract registry.<\/li><\/ul>

                                                              3-6 months (scaling):<\/p>

                                                              • Extension to rights\/compliance workflows (media\/Trust\/Estate), group-wide IdM\/IAM.<\/li>
                                                              • Forecasting (demand\/capacity\/revenue), SLA reports, workflow automation (case management).<\/li>
                                                              • Scenario simulator (What-if), alternative networks for operator\/yard\/exchange.<\/li><\/ul>

                                                                6-12 months (Advanced):<\/p>

                                                                • Autonomous COAs (e.g. capacity rebalancing, Payment rerouting, route\/slot optimization).<\/li>
                                                                • Integrated Revenue & Ops S&OP (Pay\/Trade\/Estate\/Fly\/Yachts\/Trust).<\/li>
                                                                • Continuous CSDDD\/LkSG reporting, third-party audits, red teaming (Security).<\/li><\/ul>

                                                                  12) Data model \u201estarter set\u201c (extended)<\/h1>
                                                                  • Project\/Deal (Estate\/Pay\/Trade) \u21c4 Asset\/Contract \u21c4 Party (customer, partner, operator, yard, medical team)<\/li>
                                                                  • Flight \u21c4 Operator \u21c4 Handling \u21c4 Crew \u21c4 Airport\/Slot \u21c4 Security Plan<\/li>
                                                                  • Yacht \u21c4 Owner \u21c4 Yard \u21c4 Class \u21c4 Insurance \u21c4 Crew \u21c4 Port<\/li>
                                                                  • Trust Mandate \u21c4 Portfolio \u21c4 Policy\/Clause \u21c4 Beneficiary \u21c4 Report<\/li>
                                                                  • Order\/Trade \u21c4 Market\/Exchange \u21c4 Position \u21c4 Risk \u21c4 Settlement<\/li>
                                                                  • Content\/Media \u21c4 Channel \u21c4 Campaign \u21c4 Placement \u21c4 RevenueRecord<\/li>
                                                                  • Incident \u21c4 Type\/Severity \u21c4 COA \u21c4 Status \u21c4 TimelineAnnex A - National transpositions (selection per Member State)<\/li><\/ul>

                                                                    Note from the LEGIER Group and its affiliated brands and companies: Legal frameworks are dynamic. This overview lists typical primary standards\/authorities per country for key EU areas (data protection, payments\/AML, financial markets, cyber\/NIS, consumers).<\/p>

                                                                    • Germany (DE)<\/strong><\/li>
                                                                    • Data protection: BDSG, TTDSG; Supervision: BfDI\/LfDI.<\/li>
                                                                    • Payments\/AML: ZAG, GwG; Supervision: BaFin, FIU.<\/li>
                                                                    • Financial markets: WpHG\/MiFID II implementation; supervision: BaFin.<\/li>
                                                                    • Cyber\/NIS: BSIG; NIS-2 implementation (ongoing\/current).<\/li>
                                                                    • Consumers: BGB (inter alia \u00a7\u00a7 312 ff.), UWG.<\/li>
                                                                    • Austria (AT)<\/strong><\/li>
                                                                    • Data protection: DSG; TKG 2021; Supervision: DPO.<\/li>
                                                                    • Payments\/AML: ZaDiG 2018; FM-GwG; Supervision: FMA.<\/li>
                                                                    • Financial markets: WAG 2018; Supervision: FMA.<\/li>
                                                                    • Cyber\/NIS: NIS-G; Supervision: BMI\/BKA.<\/li>
                                                                    • Consumers: KSchG, FAGG.<\/li>
                                                                    • France (FR)<\/strong><\/li>
                                                                    • Data protection: Loi Informatique et Libert\u00e9s; Supervision: CNIL.<\/li>
                                                                    • Payments\/AML: Code mon\u00e9taire et financier (LCB-FT); Supervision: ACPR\/AMF.<\/li>
                                                                    • Financial markets: AMF regulations (MiFID II implementation).<\/li>
                                                                    • Cyber\/NIS: Code de la d\u00e9fense (ANSSI).<\/li>
                                                                    • Consumers: Code de la consommation.<\/li>
                                                                    • Italy (IT)<\/strong><\/li>
                                                                    • Data protection: d.lgs. 196\/2003 (Codice Privacy); Supervision: Garante.<\/li>
                                                                    • Payments\/AML: d.lgs. PSD2; d.lgs. 231\/2007 (AML).<\/li>
                                                                    • Financial markets: TUF (Testo Unico della Finanza); supervision: CONSOB.<\/li>
                                                                    • Cyber\/NIS: d.lgs. NIS; ACN (Agenzia per la Cybersicurezza).<\/li>
                                                                    • Consumer: Codice del Consumo.<\/li>
                                                                    • Spain (ES)<\/strong><\/li>
                                                                    • Data protection: LOPDGDD; Supervision: AEPD.<\/li>
                                                                    • Payments\/AML: RDL 19\/2018 (PSD2), Ley 10\/2010 (AML).<\/li>
                                                                    • Financial markets: LMV; Supervision: CNMV.<\/li>
                                                                    • Cyber\/NIS: Esquema Nacional de Seguridad\/NIS.<\/li>
                                                                    • Consumer: TRLGDCU.<\/li>
                                                                    • Netherlands (NL)<\/strong><\/li>
                                                                    • Data protection: UAVG; Supervision: AP.<\/li>
                                                                    • Payments\/AML: Wft; Wwft; Supervision: DNB\/AFM.<\/li>
                                                                    • Financial markets: Wft\/MiFID II implementation; AFM.<\/li>
                                                                    • Cyber\/NIS: Wet beveiliging netwerk- en informatiesystemen.<\/li>
                                                                    • Consumer: BW (German Civil Code).<\/li>
                                                                    • Belgium (BE)<\/strong><\/li>
                                                                    • Data protection: Loi vie priv\u00e9e\/AVG-Wet; Supervision: APD\/GBA.<\/li>
                                                                    • Payments\/AML: Loi anti-blanchiment (AMLD implementation).<\/li>
                                                                    • Financial markets: FSMA regulations (MiFID II implementation).<\/li>
                                                                    • Cyber\/NIS: Loi NIS.<\/li>
                                                                    • Consumers: Code de droit \u00e9conomique.<\/li>
                                                                    • Poland (PL)<\/strong><\/li>
                                                                    • Data protection: Ustawa o ochronie danych osobowych; Supervision: UODO.<\/li>
                                                                    • Payments\/AML: Ustawa o us\u0142ugach p\u0142atniczych; Ustawa AML 2018.<\/li>
                                                                    • Financial markets: Ustawa o obrocie; Supervision: KNF.<\/li>
                                                                    • Cyber\/NIS: Ustawa o KSC (NIS).<\/li>
                                                                    • Consumers: Kodeks cywilny & ustawy konsumenckie.<\/li>
                                                                    • Romania (RO)<\/strong><\/li>
                                                                    • Data protection: Legea 190\/2018; Supervision: ANSPDCP.<\/li>
                                                                    • Payments\/AML: Legea 209\/2019 (PSD2); Legea 129\/2019 (AML).<\/li>
                                                                    • Financial markets: Capital Markets Act; Supervision: ASF.<\/li>
                                                                    • Cyber\/NIS: lege NIS; CERT-RO\/Directoratul Na\u021bional de Securitate Cibernetic\u0103.<\/li>
                                                                    • Consumer: OUG 34\/2014.<\/li>
                                                                    • Sweden (SE)<\/strong><\/li>
                                                                    • Data protection: Dataskyddslagen; Supervision: IMY.<\/li>
                                                                    • Payments\/AML: Betaltj\u00e4nstlagen; Penningtv\u00e4ttslagen.<\/li>
                                                                    • Financial markets: V\u00e4rdepappersmarknadslagen; Supervision: FI.<\/li>
                                                                    • Cyber\/NIS: Lag om informationss\u00e4kerhet f\u00f6r samh\u00e4llsviktiga tj\u00e4nster.<\/li>
                                                                    • Consumers: Consumers' complaints m.fl.<\/li>
                                                                    • Denmark (DK)<\/strong><\/li>
                                                                    • Data protection: Databeskyttelsesloven; Supervision: Datatilsynet.<\/li>
                                                                    • Payments\/AML: Betalingsloven; Hvidvaskloven.<\/li>
                                                                    • Financial markets: V\u00e6rdipapirhandelsloven; Supervision: Finanstilsynet.<\/li>
                                                                    • Cyber\/NIS: Lov om net- og informationssikkerhed.<\/li>
                                                                    • Consumers: Forbrugeraftaleloven.<\/li>
                                                                    • Ireland (IE)<\/strong><\/li>
                                                                    • Data protection: Data Protection Act 2018; Supervision: DPC.<\/li>
                                                                    • Payments\/AML: European Union (Payment Services) Regulations; AML Acts.<\/li>
                                                                    • Financial markets: Central Bank Acts\/MiFID rules; supervision: CBI.<\/li>
                                                                    • Cyber\/NIS: European Union (NIS) Regulations.<\/li>
                                                                    • Consumers: Consumer Rights Act 2022.<\/li>
                                                                    • Portugal (PT)<\/strong><\/li>
                                                                    • Data protection: Lei 58\/2019; Supervision: CNPD.<\/li>
                                                                    • Payments\/AML: Regime Jur\u00eddico dos Servi\u00e7os de Pagamento; Lei 83\/2017 (AML).<\/li>
                                                                    • Financial markets: CMVM rules (MiFID II implementation).<\/li>
                                                                    • Cyber\/NIS: Lei do Ciberespa\u00e7o\/NIS.<\/li>
                                                                    • Consumer: Lei de Defesa do Consumidor.<\/li>
                                                                    • Czech Republic (CZ)<\/strong><\/li>
                                                                    • Data protection: Z\u00e1kon o zpracov\u00e1n\u00ed osobn\u00edch \u00fadaj\u016f; Supervision: \u00daOO\u00da.<\/li>
                                                                    • Payments\/AML: Z\u00e1kon o platebn\u00edm styku; AML z\u00e1kon.<\/li>
                                                                    • Financial markets: ZPKT; Supervision: \u010cNB.<\/li>
                                                                    • Cyber\/NIS: Z\u00e1kon o kybernetick\u00e9 bezpe\u010dnosti.<\/li>
                                                                    • Consumers: Ob\u010dansk\u00fd z\u00e1kon\u00edk & consumer laws.<\/li>
                                                                    • Greece (GR)<\/strong><\/li>
                                                                    • Data protection: Law 4624\/2019; Supervision: HDPA.<\/li>
                                                                    • Payments\/AML: PSD2 implementation; AML laws.<\/li>
                                                                    • Financial markets: HCMC rules (MiFID-II).<\/li>
                                                                    • Cyber\/NIS: Law on the implementation of NIS.<\/li>
                                                                    • Consumers: Law 2251\/1994 (updated).<\/li>
                                                                    • Hungary (HU)<\/strong><\/li>
                                                                    • Data protection: Info Act; Supervision: NAIH.<\/li>
                                                                    • Payments\/AML: PSD2 implementation; AML law.<\/li>
                                                                    • Financial markets: Capital Market Act; Supervision: MNB.<\/li>
                                                                    • Cyber\/NIS: Act L of one year (NIS implementation).<\/li>
                                                                    • Consumers: Civil Code & Consumer Protection Laws.<\/li>
                                                                    • Finland (FI)<\/strong><\/li>
                                                                    • Data protection: Tietosuojalaki; Supervision: Data Protection Ombudsman.<\/li>
                                                                    • Payments\/AML: Maksupalvelulaki; Rahanpesulaki.<\/li>
                                                                    • Financial markets: Arvopaperimarkkinalaki; Supervision: FIN-FSA.<\/li>
                                                                    • Cyber\/NIS: Laki tietoturvasta (NIS).<\/li>
                                                                    • Consumer: Kuluttajansuojalaki.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"

                                                                      1) Einleitung & Definition Diese Darstellung beschreibt eine integrierte, marken\u00fcbergreifende Supply-Chain der LEGIER Gruppe (inkl. SCANDIC Group by LEGIER) \u2013 vom Input (Quellen, Lieferanten, Partner) \u00fcber Produktion\/Services bis zur globalen Auslieferung und Monetarisierung \u2013 mit Governance, KPIs und einem digitalen Abbild (\u201eDigital Twin\u201c). Supply-Chain-Management (SCM) koordiniert strategisch und operativ die Aktivit\u00e4ten entlang der Lieferkette und […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-724","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/legiergroup.info\/en\/wp-json\/wp\/v2\/pages\/724","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/legiergroup.info\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/legiergroup.info\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/legiergroup.info\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/legiergroup.info\/en\/wp-json\/wp\/v2\/comments?post=724"}],"version-history":[{"count":11,"href":"https:\/\/legiergroup.info\/en\/wp-json\/wp\/v2\/pages\/724\/revisions"}],"predecessor-version":[{"id":1823,"href":"https:\/\/legiergroup.info\/en\/wp-json\/wp\/v2\/pages\/724\/revisions\/1823"}],"wp:attachment":[{"href":"https:\/\/legiergroup.info\/en\/wp-json\/wp\/v2\/media?parent=724"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}