contractor requests EFSA ex-ante authorisation and obtains from EFSA a written consent  in this regard. In addition, the contractor selected as a result of the present procurement procedure shall  be solely responsible and liable for the following:  If the materials (e.g. source code) are not fully created for the purpose of the contract, or  subject to licensing not compatible with EUPL 6 , this should be clearly pointed out in the  design phase of the solutions, during the execution of specific contracts/order forms. The  use of non-EUPL compatible code should be flagged at the earliest possible stage, to allow  EFSA to take decision about using or not this option. Information should be provided about  the scope of pre-existing materials, their source and when and how the rights to these  materials have been or will be acquired.  EFSA is committed to the publication of contract deliverables - such as supporting evidence  in the form of datasets, raw data, protocols etc. in the Knowledge Junction 7 or a similar  EFSA repository in order to improve transparency, reproducibility and evidence reuse. The  Knowledge Junction repository of EFSA runs on the EU-funded Zenodo research-sharing  platform where uploaded items receive a unique Digital Object Identifier to make them  citable. Any part of an  output resulting from this contract may be published (at EFSA’s  discretion) on the Knowledge Junction repository, with attribution to the contractor, and  several deliverables can be cross-linked among them and to the published final Report on  Wiley Online Library.  EFSA can require in the specific contracts/order forms that the developed source code,  cleared by security information (e.g. name/address of servers, passwords), is published in  GitHub or other public code repository under EUPL.  Processing of personal data in the context of this contract shall comply with Regulation  (EU) 2018/1725 (‘the EDPR’). The EDPR constitutes the specific data protection legal  framework applicable to EU institutions, bodies, offices and agencies, including EFSA and  is aligned with the rules and principles under the General Data Protection Regulation (EU)  2016/679 (GDPR), applicable in the European Union.  Use of results 1.6 PERSONAL DATA AND CONFIDENTIALITY  Processing of personal data by EFSA as contracting authority  13  $^{6}$  EUPL = European Union Public License  7  http://www.efsa.europa.eu/en/press/news/190117 and https://zenodo.org/communities/efsa- kj/?page=1&size=20  -  To ensure that terms and conditions asserted by any copyright holder of  publications or information referred to in the final deliverable for EFSA are fully  satisfied;  -  To make the necessary arrangements enabling EFSA to reproduce and make  non-commercial use of publications and information referred to in the final  deliverable it commissioned. As needed, the contractor shall consult with  copyright licensing authorities (i.e. at national level) for guidance on purchasing  copyright licenses to reproduce any publications provided to EFSA. The  contractor remains solely responsible and liable for obtaining all necessary  authorizations and rights to use, reproduce and share the publications provided  to EFSA. 