Contract no: [complete]  EC - FWC services Dec 2018  II.8.4 The contractor must obtain from any natural person with the power to represent it or take  decisions on its behalf, as well as from third parties involved in the  implementation of the FWC a commitment that they will comply with this Article. At the request of the contracting authority,  the contractor must provide a document providing evidence of this commitment.  II.9.1 Processing of personal data by the contracting authority II.9.2 Processing of personal data by the contractor  a) the pseudonymisation and encryption of personal data;  b) the ability to ensure the ongoing confidentiality, integrity, availability and resilience of  processing systems and services;  c)  the ability to restore the availability and access to personal data in a timely manner in the  event of a physical or technical incident;  Any personal data included in or relating to the FWC, including its implementation, shall be processed  in accordance with Regulation (EU) 2018/1725. Such data shall be processed solely for the purposes  of the implementation, management and monitoring of the FWC by the data controller. The contractor or any other person whose personal data is processed by the data controller in relation  to this FWC has specific rights as a data subject under Chapter III (Articles 14-25) of Regulation (EU)  2018/1725, in particular the right to access, rectify or erase their personal data and the right to restrict  or, where applicable, the right to object to processing or the right to data portability.  Should the contractor or any other person whose personal data is processed in relation to this FWC  have any queries concerning the processing of its personal data, it shall address itself to the data  controller. They may also address themselves to the Data Protection Officer of the data controller. They  have the right to lodge a complaint at any time to the European Data Protection Supervisor. Details concerning the processing of personal data are available in the privacy statement referred to in  Article I.9 .  The processing of personal data by the contractor shall meet the requirements of Regulation (EU)  2018/1725 and be processed solely for the purposes set out by the controller. The contractor shall assist the controller for the fulfilment of the controller’s obligation to respond to  requests for exercising rights of person whose personal data is processed in relation to this FWC as laid  down in Chapter III (Articles 14-25) of Regulation (EU) No 2018/1725. The contractor shall inform without  delay the controller about such requests.  The contractor may act only on documented written instructions and under the supervision of the  controller, in particular with regard to the purposes of the processing, the categories of data that may be  processed, the recipients of the data and the means by which the data subject may exercise its rights.  The contractor shall grant  personnel  access to the data to the extent strictly necessary for the  implementation, management and monitoring of the FWC. The contractor must ensure that  personnel authorised to process personal data has committed itself to confidentiality or is under appropriate  statutory obligation of confidentiality in accordance with the provisions of Article II.8.  The contractor shall adopt appropriate technical and organisational security measures, giving due  regard to the risks inherent in the processing and to the nature, scope, context and purposes of  processing, in order to ensure, in particular, as appropriate:  19 II.9. PROCESSING OF PERSONAL DATA