Data protection consultancy and external Data Protection Officer services

Summary

The tender is for ongoing data-protection support and consultancy for the Sóller municipality, including the appointment of an external Data Protection Officer (DPO). The work includes an audit of the current arrangements and a report, maintaining the record of processing activities, risk analyses and impact assessments, reviewing data-protection procedures and security measures, advising on personal-data breaches and individual-rights requests, checking contracts and privacy notices, and training municipal staff. The service is continuous, with periodic meetings and, where needed, in-person work and video conferences. Critical incidents must receive a response within 1 hour and be resolved within 1 day; serious incidents within 2 hours and 3 days respectively; and minor queries within 4 hours and 2 weeks. The initial contract term is 2 years, with an option to extend by a further 2 years. The budget for the first two years is €19,805.01 excluding VAT, or €23,964.06 including VAT; the estimated total value including the possible extension is €39,610.02 excluding VAT. Offers are assessed on price, the DPOs’ additional public-sector experience, documented DPO appointments, security-scheme and official data-protection certifications, and additional training of the principal DPO. Bidders must provide the required turnover and team evidence, assign at least two suitably qualified DPOs, and meet the security-scheme, insurance and submission requirements.