Provision of services of an external data protection officer

Summary

ALDB GmbH intends to award a contract for the provision of an external data protection officer (DSB). The contractor will advise and supervise compliance with data protection laws (GDPR, BDSG, and other applicable regulations) across ALDB’s activities, assist with the maintenance of the processing activities registry (Art. 30), and support data protection impact assessments (Art. 35). The contractor will involve the ALDB early in new projects, draft and review data processing agreements and joint controllership arrangements, assist with data subject rights, cooperate with supervisory authorities, and provide regular reporting and documentation. The contractor will also provide staff training, act as a point of contact for staff and contractors, support data protection management and risk mitigation, and meet defined service levels (availability 09:00–17:00 on working days; 24-hour initial response; 240-minute response time for incidents). Regular on-site presence at ALDB locations (Berlin, Hannover, Bonn) is expected about 7–8 times per year; most work is performed remotely within Germany. The contract period begins 18 November 2026 and runs for at least 3 years, with renewals possible, and includes periodic management meetings via Teams.