Contractor (or leader in the case of a joint tender): [ Full name ] Function [ Company name ] Full official address ] E-mail: [ complete ] 

## I.9.1 Processing of personal data by the contracting authority 

For the purpose of Article II.9.1, 

(a) the data controller is the Agency. ECHA is the sole controller of the data processing and the contractor and its partners or subcontractors may act as processor only under the instructions of the controller and cannot process the data further for their own purposes; 

(b) the data protection notice is available at https://www.echa.europa.eu/documents/10162/13612/annex2_privacy_stateme nt_procurement_procedures_en.pdf/ed81cf95-4056-4bdf-adb5-c0f1bd0d57a5 

## I.9.2 Processing of personal data by the contractor 

For the purpose of Article II.9.2, 

## I.9. PROCESSING OF PERSONAL DATA 

(a) the subject matter and purpose of the processing of personal data by the contractor are the provision of the unlimited and interactive database and the originals documents when requested; 

(b) The localisation of and access to the personal data processed by the contractor shall comply with the following: 

ii. the data shall only be held in data centres located with the territory of the European Union and the European Economic Area; 

iii. no access shall be given to such data outside of [the European Union and the European Economic Area; 

iv. the contractor may not change the location of data processing without the prior written authorisation of the contracting authority; 

v. any transfer of personal data under the contract to third countries or international organisations shall fully comply with the requirements laid down in Chapter V of Regulation (EU) 2018/1725 3 . 

i. the personal data shall only be processed within the territory of the European Union and the European Economic Area and will not leave that territory; 

## I.10. EXPLOITATION OF THE RESULTS OF THE CONTRACT 4 

The following provisions supersede Article II.13 and apply to the use of the solution/product licensed to the contracting authority, as such databases or data are described in the technical specifications, in the tender of the contractor or in any other documentation provided by the contractor and agreed to by the contracting authority. 

