be handed over in an appropriate form. These inspections may take place up to 7 years after the final payment. 

43.2. Furthermore, the contractor shall allow the European Anti-Fraud Office to carry out checks and verification on the spot in accordance with the procedures set out in the European Union legislation for the protection of the financial interests of the European Union against fraud and other irregularities. 

43.3. To this end, the contractor undertakes to give appropriate access to staff or agents of the European Commission, of the European Anti-Fraud Office and of the European Court of Auditors to the sites and locations at which the contract is carried out, including its information systems, as well as all documents and databases concerning the technical and financial management of the project and to take all steps to facilitate their work. Access given to agents of the European Commission, European Anti-Fraud Office and the European Court of Auditors shall be on the basis of confidentiality with respect to third parties, without prejudice to the obligations of public law to which they are subject. Documents must be easily accessible and filed so as to facilitate their examination and the contractor must inform the contracting authority of their precise location. 

43.4. The contractor guarantees that the rights of the European Commission, of the European Anti-Fraud Office and of the European Court of Auditors to carry out audits, checks and verification will be equally applicable, under the same conditions and according to the same rules as those set out in this Article, to any subcontractor or any other party benefiting from EU budget/EDF funds. 

43.5. Failure to comply with the obligations set forth in Article 43.1 to 43.4 constitutes a case of serious breach of contract. 

## Article 44 - Data protection 

## 44.1. Processing of personal data by the contracting authority 

Any personal data included in or relating to the contract, including its implementation, shall be processed in accordance with Regulation (EU) 2018/1725. Such data shall be processed solely for the purposes of the implementation, management and monitoring of the contract by the data controller. 

The contractor or any other person whose personal data is processed by the data controller in relation to this contract has specific rights as a data subject under Chapter III (Articles 14-25) of Regulation (EU) 2018/1725, in particular the right to access, rectify or erase their personal data and the right to restrict the processing of their personal data or, where applicable, the right to object to processing or the right to data portability. 

Should the contractor or any other person whose personal data is processed in relation to this contract have any queries concerning the processing of its personal data, it shall address itself to the data controller. They may also address themselves to the Data Protection Officer of the data controller. They have the right to lodge a complaint at any time to the European Data Protection Supervisor. 

Details concerning the processing of personal data are available in the data protection notice referred to in the special conditions. 

