Where personal data of data subjects will be processed within the operations/services that will be offered as part of the contract, this would need to be regulated through a separate agreement. More information on this matter can be found in the document Data Protection Principles. 

Data Protection Notice

For information on the rights of Data Subjects; the purposes of processing and Enemalta’s lawful bases of such processing; recipients and transfers of Personal Data; data retention obligations; and the technical and organisational measures adopted by the Enemalta to keep the Personal Data secure, please refer to the Enemalta Privacy Notice for Contractors. (this will be a separate document which I will be sending soon)