out in Article I.9.2) and data security, which includes personal data held on behalf of the contracting authority in the premises of the contractor or subcontractor. 

The contractor shall notify the contracting authority without delay of any legally binding request for disclosure of the personal data processed on behalf of the contracting authority made by any national public authority, including an authority from a third country. The contractor may not give such access without the prior written authorisation of the contracting authority. 

The duration of processing of personal data by the contractor will not exceed the period referred to in Article II.24.2. Upon expiry of this period, the contractor shall, at the choice of the controller, return, without any undue delay in a commonly agreed format, all personal data processed on behalf of the controller and the copies thereof or shall effectively delete all personal data unless Union or national law requires a longer storage of personal data. 

For the purpose of Article II.10, if part or all of the processing of personal data is subcontracted to a third party, the contractor shall pass on the obligations referred to in Articles I.9.2 and II.9.2 in writing to those parties, including subcontractors. At the request of the contracting authority, the contractor shall provide a document providing evidence of this commitment. 

## II.10. SUBCONTRACTING 

II.10.1 The contractor must not subcontract and have the FWC implemented by third parties beyond the third parties already mentioned in its tender without prior written authorisation from the contracting authority. 

II.10.2 Even if the contracting authority authorises subcontracting, the contractor remains bound by its contractual obligations and is solely responsible for the implementation of the FWC . 

II.10.3 The contractor must ensure that the subcontract does not affect the rights of the contracting authority under this FWC, particularly those under Articles II.8, II.13 and II.24. 

II.10.4 The contracting authority may request the contractor to replace a subcontractor found to be in a situation provided for in points (d) and (e) of Article II.18.1. 

## II.11. AMENDMENTS 

II.11.1 Any amendment to the FWC or a specific contract must be made in writing before all contractual obligations have been fulfilled. A specific contract does not constitute an amendment to the FWC. 

II.11.2 Any amendment must not make changes to the FWC or a specific contract that might alter the initial conditions of the procurement procedure or result in unequal treatment of tenderers or contractors. 

