2 days leftSystem implementationFramework agreementPolski

Data protection management system

ekom21 - Kommunales Gebietsrechenzentrum HessenGießen, GermanyNotice 676777-2026

At a glance

ekom21 - Kommunales Gebietsrechenzentrum Hessen (Gießen, Germany) is tendering: Data protection management system. Offers are due 6 Oct 2026, 10:00 CEST. 48-month contract, 2 lots. Bidders must show, among other things: certificates, references, key people, minimum turnover, insurance.

6 Oct 2026, 10:00 CEST
Deadline
48 months
Duration
Open procedure
Procedure
Software supply services (72268000)
Main CPV
1 Oct 2026
Published

Translated from the official notice. The original text is the legally binding one.

What the buyer wants

The procurement procedure shall aim at concluding a framework agreement with an economic operator. The framework agreement is intended - without justification of a purchase obligation - to enable the needs-based provision, introduction and long-term support of a "data protection management system" as well as associated services for ekom21 customers. The maximum value of the framework agreement is €1,000,000.00 million (net). Further details are given in the procurement documents.

Die ekom21 - Kommunales Gebietsrechenzentrum Hessen (nachfolgend: ekom21) ist eine Körperschaft des öffentlichen Rechts nach dem Hessischen Datenverarbeitungsverbundgesetz (DV-VerbundG). Sie ist zentraler IT-Dienstleister für die hessischen Kommunen und ihre Einrichtungen. Von den Standorten in Gießen, Darmstadt Kassel und Fulda versorgt sie ihre Endkunden umfassend mit modernen Informations- und Kommunikationsdienstleistungen (IuK) aller Art. Zu den rund 500 Mitgliedern in Hessen und weiteren Kunden bundesweit gehören ca. 29.000 Endanwender*innen aus Kommunalverwaltungen und anderen öffentlichen Einrichtungen, wie z. B. Landkreise, Städte, Gemeinden, kommunale Eigenbetriebe, Zweckverbände, Anstalten, Krankenhäuser und Heime. Im staatlichen Bereich betreut die ekom21 zahlreiche Landesverbände, Ministerien und Regierungspräsidien. Insgesamt erbringt die ekom21 damit Services für sechs Millionen Bürger. Das Aufgabenspektrum der ekom21 wächst und verändert sich kontinuierlich, womit eine stetige Erweiterung des Kundenkreises einhergeht. Um den Anfragen unserer Kunden nach einem Datenschutzmanagement System (DSMS) Rechnung zu tragen, muss ein entsprechender Partner beauftragt werden Die ekom21 schreibt aus diesem Grund für ihre Kunden ein DSMS aus. Es soll primär ein cloud basiertes Datenschutz Management System (SaaS) beschafft werden, das die gesamte Verarbeitungstätigkeit nach Art. 5 30 Datenschutz-Grundverordnung (DSGVO), dem Bundesdatenschutzgesetz (BDSG) sowie dem Hessischen Datenschutz- und Informationsfreiheitsgesetz (HDSIG) unterstützt, dokumentiert und kontrolliert. Ziel ist es, den Aufwand für Risiko und Impact Analysen, das Verzeichnis von Verarbeitungstätigkeiten (VVT), Betroffenen Anfragen, Auftrags und Vertriebsmanagement sowie Audit Nachweise zu reduzieren und gleichzeitig die Compliance Qualität zu erhöhen.

Lots (2)

  1. Lot 1Data protection management system

    48 months

    The procurement procedure shall aim at concluding a framework agreement with an economic operator. The framework agreement is intended - without justification of a purchase obligation - to enable the needs-based provision, introduction and long-term support of a "data protection management system" as well as associated services for ekom21 customers. The maximum value of the framework agreement is €1,000,000.00 million (net). Further details are given in the procurement documents.

  2. Lot 2

    48 months
What a bidder needs

Can you bid? Your readiness check

These are the conditions this notice asks bidders to prove. In SalesDots each one is checked against your company profile: certificates with their validity dates, delivered references and your people.

Example company profile
  • Certificates

    Company or personnel certificates named in the notice

    In your profile
  • References

    Similar contracts delivered before

    In your profile
  • Key people

    Named roles, CVs or minimum team

    Not in your profile yet
  • Minimum turnover

    Minimum annual turnover or financial standing

    In your profile
  • Insurance

    Professional or liability insurance

    Expires before the deadline

Detected automatically in the published notice. Always confirm against the tender documents.

Check it against my company
Show the notice text (5)

Declaration on appropriate reference services on previously executed supplies and services providing information on technical and professional capacity in relation to the advertised services [Self-declaration on appropriate references] For each reference, at least the following information must be provided: — short name of the reference, — full name including postal address and contact details of the contracting entity (= reference contracting entity), — value of the contract, — public or private contracting entity, — period of performance (delivery or delivery date), — timely completion of the project, — description of the performer’s contribution to the reference project in percentage, — position of the performer in the reference project (sole contractor, general contractor, resource provider, member of a consortium of tenderers, — number of persons working for the candidate in the project. The description of the reference must clearly show which services the applicant, a member of an applicant community or a third party whose technical and professional capacity is based, has performed itself. The mere subordinate participation or monitoring a reference project is not sufficient. The references to be provided must be clearly attributed to the undertaking as contractor/execution manager who submits them to demonstrate its technical and professional capacity with the tender. The submission of a certificate from the reference contractor is not required. However, the client reserves the right to check the information provided by reference clients as well as its own investigations, the results of which are taken into account in the context of the suitability check. In addition to the required supporting documents, registration forms shall be provided for all the required declarations and shall be used in accordance with the completion instructions. Required qualification certificates (according to §§ 122 ff. GWB, §§ 42 ff. VgV), which are available in the form of recognized prequalification certificates (including HPQR), are admitted and recognized if the prequalification certificates in form and content correspond to the required qualification certificates. Minimum requirements: Minimum requirements: Five comparable references from the last three years in the public sector are required.

Self-declaration showing the average annual number of permanent employees of the company in the last three years [Personal self-declaration]. Minimum requirements: Total number of employees of at least. 20 employees and at least 5 programmers.

Self-declaration of the company with a meaningful presentation of the company in particular with regard to the advertised order (key data and key figures, current business areas, fields of activity and market positioning, etc.) [Self-declaration of the company]. a declaration by the company that, in the event of a surcharge, a professional or company liability insurance with the minimum standards established is concluded for the duration of the contract; or - if already available - such exists and is maintained for the duration of the execution of the order [ self-declaration on professional or company liability insurance]. In addition to the required supporting documents, registration forms shall be provided for all the required declarations and shall be used in accordance with the completion instructions. Minimum requirements: Required minimum insurance coverage of 1.5 million Euro for personal and property damage and 1 million Euro for financial loss at least twice the maximum annual performance.

Declaration on the total turnover of the company and the turnover in the field of activity of the contract put out to tender, each relating to the last three financial years [self-declaration on turnover]. Minimum requirements for lots 1, 2 and 3: An average turnover in the last three years of at least: 750,000 is required. Euro (net).

Declaration of the company, on the qualification and authorisation for the exercise of profession according to § 44 VgV [Self-declaration qualification and authorisation for the exercise of profession]. Proof of registration in the professional or commercial register, affidavit or similar certificate from an authority of the Member State in which the applicant is established (copy of submission). Business registration and, if applicable, re-registration if there is no obligation to register in the commercial or professional register (copy submission). This requirement applies uniformly and across batches.

How offers are scored

  • Assessment of the list of requirements50%
  • Assessment of the support concept10%
  • Assessment of the rough concept10%
  • Value price30%

What this buyer bought before

Recent IT contracts awarded by the same buyer, from published award notices.

  • Germany-Gießen: Software package and information systems

    Winner: Rednet AG

    €0

  • Germany-Gießen: Software package and information systems

    Winner: Rednet AG

    €0

  • Germany-Gießen: Backup or recovery software package

    Winner: Cristie Data GmbH

    €0

  • Interner Informationshub

    Winner: Haiilo GmbH

    €12m

  • Germany-Gießen: Software supply services

    Winner: T-Systems International GmbH

    €0

  • Unterstützungsleistungen für technischen Support

    Winner: univativ GmbH

    €2.1m

Win it with SalesDots

Read the documents for you

SalesDots fetches the tender documents (or takes your upload when a platform does not allow it) and answers the two questions that matter first: what the buyer wants built, and what you must prove to take part, each with the exact quote and page.

Analyse documents

Match it with your profile

Every certificate, reference and role is checked against your company: green when you have it, amber when it expires before the deadline, grey when it needs a look.

Check my fit

Prepare your response

Turn the conditions into a bid checklist with owners and due dates, draft the questions to the buyer and keep the team on one plan.

Start a response

Never miss a change

Track the deadline, amendments and answers to clarification questions, and get similar tenders and re-tenders before they are published.

Track this tender

Source: Tenders Electronic Daily (TED), Official Journal of the EU. SalesDots is not the contracting authority; offers are submitted only through the buyer's platform.