be handed over in an appropriate form. These inspections may take place up to 7 years  after the final payment.  43.2. Furthermore, the contractor shall allow the European Anti-Fraud Office to carry out  checks and verification on the spot in accordance with the procedures set out in the  European Union legislation for the protection of the financial interests of the European  Union against fraud and other irregularities.  43.3. To this end, the contractor undertakes to give appropriate access to staff or agents of the  European Commission, of the European Anti-Fraud Office and of the European Court of  Auditors to the sites and locations at which the contract is carried out, including its  information systems, as well as all documents and databases concerning the technical and  financial management of the project and to take all steps to facilitate their work. Access  given to agents of the European Commission, European Anti-Fraud Office and the  European Court of Auditors shall be on the basis of confidentiality with respect to third  parties, without prejudice to the obligations of public law to which they are subject.  Documents must be easily accessible and filed so as to facilitate their examination and the  contractor must inform the contracting authority of their precise location.  43.4. The contractor guarantees that the rights of the European Commission, of the European  Anti-Fraud Office and of the European Court of Auditors to carry out audits, checks and  verification will be equally applicable, under the same conditions and according to the  same rules as those set out in this Article, to any subcontractor or any other party  benefiting from EU budget/EDF funds.  43.5. Failure to comply with the obligations set forth in Article 43.1 to 43.4 constitutes a case  of serious breach of contract. Article 44 -  Data protection  44.1. Processing of personal data by the contracting authority  Any personal data included in or relating to the contract, including its implementation, shall be  processed in accordance with Regulation (EU) 2018/1725. Such data shall be processed solely for the  purposes of the implementation, management and monitoring of the contract by the data controller.  The contractor or any other person whose personal data is processed by the data controller in relation  to this contract has specific rights as a data subject under Chapter III (Articles 14-25) of Regulation  (EU) 2018/1725, in particular the right to access, rectify or erase their personal data and the right to  restrict the processing of their personal data or, where applicable, the right to object to processing or  the right to data portability.  Should the contractor or any other person whose personal data is processed in relation to this contract  have any queries concerning the processing of its personal data, it shall address itself to the data  controller. They may also address themselves to the Data Protection Officer of the data controller.  They have the right to lodge a complaint at any time to the European Data Protection Supervisor.  Details concerning the processing of personal data are available in the data protection notice referred  to in the special conditions.  August 2020 c4e_annexigc_en  Page 34 of 36 