Contract number: [ complete ]   2019  Regulation (EU) 2018/1725, in particular the right to access, rectify or erase their personal data  and the right to restrict or, where applicable, the right to object to processing or the right to data  portability.  Should the contractor or any other person whose personal data is processed in relation to this  FWC have any queries concerning the processing of its personal data, it shall address itself to  the data controller. They may also address themselves to the Data Protection Officer of the data  controller. They have the right to lodge a complaint at any time to the European Data Protection  Supervisor.  Details concerning the processing of personal data are available in the data protection notice  referred to in Article I.9.  The processing of personal data by the contractor shall meet the requirements of Regulation  (EU) 2018/1725 and be processed solely for the purposes set out by the controller. The contractor shall assist the controller for the fulfilment of the controller’s obligation to  respond to requests for exercising rights of person whose personal data is processed in relation  to this FWC as laid down in Chapter III (Articles 14-25) of Regulation (EU) 2018/1725. The  contractor shall inform without delay the controller about such requests. The contractor may act only on documented written instructions and under the supervision of  the controller, in particular with regard to the purposes of the processing, the categories of data  that may be processed, the recipients of the data and the means by which the data subject may  exercise its rights. The contractor shall grant personnel access to the data to the extent strictly necessary for the  implementation, management and monitoring of the FWC. The contractor must ensure that  personnel authorised to process personal data has committed itself to confidentiality or is under  appropriate statutory obligation of confidentiality in accordance with the provisions of Article  II.8.  The contractor shall adopt appropriate technical and organisational security measures, giving  due regard to the risks inherent in the processing and to the nature, scope, context and purposes  of processing, in order to ensure, in particular, as appropriate: (e) measures to protect personal data from accidental or unlawful destruction, loss,  alteration, unauthorised disclosure of or access to personal data transmitted, stored or  otherwise processed.  (d) a process for regularly testing, assessing and evaluating the effectiveness of technical  and organisational measures for ensuring the security of the processing;  (c) the ability to restore the availability and access to personal data in a timely manner in  the event of a physical or technical incident;  (b) the ability to ensure the ongoing confidentiality, integrity, availability and resilience of  processing systems and services;  (a) the pseudonymisation and encryption of personal data;  24  II.9.2 Processing of personal data by the contractor