Data protection management system
At a glance
ekom21 - Kommunales Gebietsrechenzentrum Hessen (Gießen, Germany) is tendering: Data protection management system. Offers are due 6 Oct 2026, 10:00 CEST. 48-month contract, 2 lots. Bidders must show, among other things: certificates, references, key people, minimum turnover, insurance.
- 6 Oct 2026, 10:00 CEST
- Deadline
- 48 months
- Duration
- Open procedure
- Procedure
- Software supply services (72268000)
- Main CPV
- 2 Sept 2026
- Published
Translated from the official notice. The original text is the legally binding one.
What the buyer wants
The procurement procedure shall aim at concluding a framework agreement with an economic operator. The framework agreement is intended - without justification of a purchase obligation - to enable the needs-based provision, introduction and long-term support of a "data protection management system" as well as associated services for ekom21 customers. The maximum value of the framework agreement is €1,000,000.00 million (net). Further details are given in the procurement documents.
Die ekom21 - Kommunales Gebietsrechenzentrum Hessen (nachfolgend: ekom21) ist eine Körperschaft des öffentlichen Rechts nach dem Hessischen Datenverarbeitungsverbundgesetz (DV-VerbundG). Sie ist zentraler IT-Dienstleister für die hessischen Kommunen und ihre Einrichtungen. Von den Standorten in Gießen, Darmstadt Kassel und Fulda versorgt sie ihre Endkunden umfassend mit modernen Informations- und Kommunikationsdienstleistungen (IuK) aller Art. Zu den rund 500 Mitgliedern in Hessen und weiteren Kunden bundesweit gehören ca. 29.000 Endanwender*innen aus Kommunalverwaltungen und anderen öffentlichen Einrichtungen, wie z. B. Landkreise, Städte, Gemeinden, kommunale Eigenbetriebe, Zweckverbände, Anstalten, Krankenhäuser und Heime. Im staatlichen Bereich betreut die ekom21 zahlreiche Landesverbände, Ministerien und Regierungspräsidien. Insgesamt erbringt die ekom21 damit Services für sechs Millionen Bürger. Das Aufgabenspektrum der ekom21 wächst und verändert sich kontinuierlich, womit eine stetige Erweiterung des Kundenkreises einhergeht. Um den Anfragen unserer Kunden nach einem Datenschutzmanagement System (DSMS) Rechnung zu tragen, muss ein entsprechender Partner beauftragt werden Die ekom21 schreibt aus diesem Grund für ihre Kunden ein DSMS aus. Es soll primär ein cloud basiertes Datenschutz Management System (SaaS) beschafft werden, das die gesamte Verarbeitungstätigkeit nach Art. 5 30 Datenschutz-Grundverordnung (DSGVO), dem Bundesdatenschutzgesetz (BDSG) sowie dem Hessischen Datenschutz- und Informationsfreiheitsgesetz (HDSIG) unterstützt, dokumentiert und kontrolliert. Ziel ist es, den Aufwand für Risiko und Impact Analysen, das Verzeichnis von Verarbeitungstätigkeiten (VVT), Betroffenen Anfragen, Auftrags und Vertriebsmanagement sowie Audit Nachweise zu reduzieren und gleichzeitig die Compliance Qualität zu erhöhen.
Lots (2)
Lot 1Data protection management system
48 monthsThe procurement procedure shall aim at concluding a framework agreement with an economic operator. The framework agreement is intended - without justification of a purchase obligation - to enable the needs-based provision, introduction and long-term support of a "data protection management system" as well as associated services for ekom21 customers. The maximum value of the framework agreement is €1,000,000.00 million (net). Further details are given in the procurement documents.
Lot 2
48 months
Can you bid? Your readiness check
These are the conditions this notice asks bidders to prove. In SalesDots each one is checked against your company profile: certificates with their validity dates, delivered references and your people.
- In your profile
Certificates
Company or personnel certificates named in the notice
- In your profile
References
Similar contracts delivered before
- Not in your profile yet
Key people
Named roles, CVs or minimum team
- In your profile
Minimum turnover
Minimum annual turnover or financial standing
- Expires before the deadline
Insurance
Professional or liability insurance
Detected automatically in the published notice. Always confirm against the tender documents.
Check it against my companyShow the notice text (5)
Declaration on appropriate reference services on previously executed supplies and services providing information on technical and professional capacity in relation to the advertised services [Self-declaration on appropriate references] For each reference, at least the following information must be provided: — short name of the reference, — full name including postal address and contact details of the contracting entity (= reference contracting entity), — value of the contract, — public or private contracting entity, — period of performance (delivery or delivery date), — timely completion of the project, — description of the performer’s contribution to the reference project in percentage, — position of the performer in the reference project (sole contractor, general contractor, resource provider, member of a consortium of tenderers, — number of persons working for the candidate in the project. The description of the reference must clearly show which services the applicant, a member of an applicant community or a third party whose technical and professional capacity is based, has performed itself. The mere subordinate participation or monitoring a reference project is not sufficient. The references to be provided must be clearly attributed to the undertaking as contractor/execution manager who submits them to demonstrate its technical and professional capacity with the tender. The submission of a certificate from the reference contractor is not required. However, the client reserves the right to check the information provided by reference clients as well as its own investigations, the results of which are taken into account in the context of the suitability check. In addition to the required supporting documents, registration forms shall be provided for all the required declarations and shall be used in accordance with the completion instructions. Required qualification certificates (according to §§ 122 ff. GWB, §§ 42 ff. VgV), which are available in the form of recognized prequalification certificates (including HPQR), are admitted and recognized if the prequalification certificates in form and content correspond to the required qualification certificates. Minimum requirements: Minimum requirements: Five comparable references from the last three years in the public sector are required.
Self-declaration showing the average annual number of permanent employees of the company in the last three years [Personal self-declaration]. Minimum requirements: Total number of employees of at least. 20 employees and at least 5 programmers.
Self-declaration of the company with a meaningful presentation of the company in particular with regard to the advertised order (key data and key figures, current business areas, fields of activity and market positioning, etc.) [Self-declaration of the company]. a declaration by the company that, in the event of a surcharge, a professional or company liability insurance with the minimum standards established is concluded for the duration of the contract; or - if already available - such exists and is maintained for the duration of the execution of the order [ self-declaration on professional or company liability insurance]. In addition to the required supporting documents, registration forms shall be provided for all the required declarations and shall be used in accordance with the completion instructions. Minimum requirements: Required minimum insurance coverage of 1.5 million Euro for personal and property damage and 1 million Euro for financial loss at least twice the maximum annual performance.
Declaration on the total turnover of the company and the turnover in the field of activity of the contract put out to tender, each relating to the last three financial years [self-declaration on turnover]. Minimum requirements for lots 1, 2 and 3: An average turnover in the last three years of at least: 750,000 is required. Euro (net).
Declaration of the company, on the qualification and authorisation for the exercise of profession according to § 44 VgV [Self-declaration qualification and authorisation for the exercise of profession]. Proof of registration in the professional or commercial register, affidavit or similar certificate from an authority of the Member State in which the applicant is established (copy of submission). Business registration and, if applicable, re-registration if there is no obligation to register in the commercial or professional register (copy submission). This requirement applies uniformly and across batches.
How offers are scored
- Assessment of the list of requirements70%
- Value price30%
What this buyer bought before
Recent IT contracts awarded by the same buyer, from published award notices.
Germany-Gießen: Software package and information systems
Winner: Rednet AG
€0
Germany-Gießen: Software package and information systems
Winner: Rednet AG
€0
Germany-Gießen: Backup or recovery software package
Winner: Cristie Data GmbH
€0
Interner Informationshub
Winner: Haiilo GmbH
€12m
Germany-Gießen: Software supply services
Winner: T-Systems International GmbH
€0
Unterstützungsleistungen für technischen Support
Winner: univativ GmbH
€2.1m
Win it with SalesDots
Read the documents for you
SalesDots fetches the tender documents (or takes your upload when a platform does not allow it) and answers the two questions that matter first: what the buyer wants built, and what you must prove to take part, each with the exact quote and page.
Analyse documentsMatch it with your profile
Every certificate, reference and role is checked against your company: green when you have it, amber when it expires before the deadline, grey when it needs a look.
Check my fitPrepare your response
Turn the conditions into a bid checklist with owners and due dates, draft the questions to the buyer and keep the team on one plan.
Start a responseNever miss a change
Track the deadline, amendments and answers to clarification questions, and get similar tenders and re-tenders before they are published.
Track this tenderSource: Tenders Electronic Daily (TED), Official Journal of the EU. SalesDots is not the contracting authority; offers are submitted only through the buyer's platform.