the request of the contracting authority, the contractor must provide a document providing evidence of this commitment. 

## II.9. PROCESSING OF PERSONAL DATA 

## II.9.1 Processing of personal data by the contracting authority 

Any personal data included in or relating to the FWC, including its implementation, shall be processed in accordance with Regulation (EU) 2018/1725. Such data shall be processed solely for the purposes of the implementation, management and monitoring of the FWC by the data controller. 

The contractor or any other person whose personal data is processed by the data controller in relation to this FWC has specific rights as a data subject under Chapter III (Articles 14-25) of Regulation (EU) 2018/1725, in particular the right to access, rectify or erase their personal data and the right to restrict or, where applicable, the right to object to processing or the right to data portability. 

Should the contractor or any other person whose personal data is processed in relation to this FWC have any queries concerning the processing of its personal data, it shall address itself to the data controller. They may also address themselves to the Data Protection Officer of the data controller. They have the right to lodge a complaint at any time to the European Data Protection Supervisor. 

Details concerning the processing of personal data are available in the data protection notice referred to in Article I.9. 

## II.9.2 Processing of personal data by the contractor 

The processing of personal data by the contractor shall meet the requirements of Regulation (EU) 2018/1725 and be processed solely for the purposes set out by the controller. 

The contractor shall assist the controller for the fulfilment of the controller’s obligation to respond to requests for exercising rights of person whose personal data is processed in relation to this FWC as laid down in Chapter III (Articles 14-25) of Regulation (EU) 2018/1725. The contractor shall inform without delay the controller about such requests. 

The contractor may act only on documented written instructions and under the supervision of the controller, in particular with regard to the purposes of the processing, the categories of data that may be processed, the recipients of the data and the means by which the data subject may exercise its rights. 

The contractor shall grant personnel access to the data to the extent strictly necessary for the implementation, management and monitoring of the FWC. The contractor must ensure that personnel authorised to process personal data has committed itself to confidentiality or is under appropriate statutory obligation of confidentiality in accordance with the provisions of Article II.8. 

