Contract number: ECHA/2020/724  Restricted  Service contract conditions of December 2018  Contractor (or leader in the case of a joint tender):  [ Full name ]  Function [ Company name ]  Full official address ]  E-mail: [ complete ]  The following provisions supersede Article II.13 and apply to the use of the solution/product  licensed to the contracting authority, as such databases or data are described in the  technical specifications, in the tender of the contractor or in any other documentation  provided by the contractor and agreed to by the contracting authority.  (a) the data controller is the Agency. ECHA is the sole controller of the data processing  and the contractor and its partners or subcontractors may act as processor only  under the instructions of the controller and cannot process the data further for their  own purposes;  (b) the data protection notice is available at  https://www.echa.europa.eu/documents/10162/13612/annex2_privacy_stateme nt_procurement_procedures_en.pdf/ed81cf95-4056-4bdf-adb5-c0f1bd0d57a5  (a) the subject matter and purpose of the processing of personal data by the contractor  are the provision of the unlimited and interactive database and the originals  documents when requested;  (b) The localisation of and access to the personal data processed by the contractor shall  comply with the following:  i. the personal data shall only be processed within the territory of the European  Union and the European Economic Area and will not leave that territory;  ii. the data shall only be held in data centres located with the territory of the  European Union and the European Economic Area;  iii. no access shall be given to such data outside of [the European Union and  the European Economic Area;  iv. the contractor may not change the location of data processing without the  prior written authorisation of the contracting authority;  v. any transfer of personal data under the contract to third countries or  international organisations shall fully comply with the requirements laid  down in Chapter V of Regulation (EU) 2018/1725 3 .  3 Regulation (EU) 2018/1725 of 23 October 2018 on the protection of natural persons with regard to the  processing of personal data by the Agency institutions, bodies, offices and agencies and on the free  movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC, OJ L  295/39,21.11.2018,  https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32018R1725&from=EN  4 This article must be adapted with care. All information is in the Explanatory note on IPR on:  http://myintracomm.ec.testa.eu/budgweb/EN/imp/procurement/Documents/ipr-note-en.pdf  7  I.10. EXPLOITATION OF THE RESULTS OF THE CONTRACT 4 I.9.2  Processing of personal data by the contractor  I.9.1  Processing of personal data by the contracting authority  I.9. PROCESSING OF PERSONAL DATA  For the purpose of Article II.9.1, For the purpose of Article II.9.2,