(i) unauthorised reading, copying, alteration or removal of storage media; 

(ii) unauthorised data inputting, as well as any unauthorised disclosure, alteration or erasure of stored personal data; 

(iii) unauthorised use of data processing systems by means of data transmission facilities; 

(b) ensure that authorised users of a data-processing system can access only the personal data to which their access right refers; 

(c) record which personal data have been communicated, when and to whom; 

(d) ensure that personal data being processed on behalf of third parties can be processed only in the manner prescribed by the Agency; 

(e) ensure that, during communication of personal data and transport of storage media, the data cannot be read, copied or erased without authorisation; 

(f) design its organisational structure in such a way that it meets data protection requirements. 

## II.10. SUBCONTRACTING 

II.10.1 The contractor must not subcontract and have the FWC implemented by third parties beyond the third parties already mentioned in its tender without prior written authorisation from the contracting authority. 

II.10.2 Even if the contracting authority authorises subcontracting, the contractor remains bound by its contractual obligations and is solely responsible for the implementation of the FWC . 

II.10.3 The contractor must ensure that the subcontract does not affect the rights of the contracting authority under this FWC, particularly those under Articles II.8, II.13 and II.24. 

II.10.4 The contracting authority may request the contractor to replace a subcontractor found to be in a situation provided for in points (d) and (e) of Article II.18.1. 

## II.11. AMENDMENTS 

II.11.1  Any amendment to the FWC or a specific contract must be made in writing before all contractual obligations have been fulfilled. A specific contract does not constitute an amendment to the FWC. 

II.11.2  Any amendment must not make changes to the FWC or a specific contract that might alter the initial conditions of the procurement procedure or result in unequal treatment of tenderers or contractors. 

## II.12. ASSIGNMENT 

II.12.1 The contractor must not assign any of the rights and obligations arising from the FWC, including claims for payments or factoring, without prior written authorisation from the contracting authority. In such cases, the contractor must provide the contracting authority with the identity of the intended assignee. 

II.12.2 Any right or obligation assigned by the contractor without authorisation is not enforceable against the contracting authority. 

