Tenders Are Invited For Software Package And Information Systems – 2023M131_Rgpd-Grc - Framework Supply Agreement Relating To The Establishment Of A Personal Data Protection Governance Tool And For Information Security Risk Management Within The Spw

Software Package And Information Systems – 2023M131_Rgpd-Grc - Framework Supply Agreement Relating To The Establishment Of A Personal Data Protection Governance Tool And For Information Security Risk Management Within The Spw. This Framework Agreement Is A Supply Contract Whose Purpose Is The Provision In Saas (Software As A Service) Mode And For Security Reasons In Onprem Mode Of A Governance Tool For The Protection Of Personal Data (Part I) And For Grc-Type Risk Management Of Information Security Within The Spw (Part Ii). This Contract Is A Mixed Contract Within The Meaning Of Article 20 Of The Law, Relating To Both Services (Support And Training Of Software Solutions) And Supplies (Subscription Of Licenses). In This Case, The Contract Must Be Considered As Supplies Within The Meaning Of Article 2, 20° Of The Law. This Public Market Takes The Form Of A Framework Agreement Through Which Orders Will Be Placed To Subscribe To And Ensure Support For The Licenses Referred To In The Inventory And To Provide Services On Demand Or In Project Mode. This Framework Agreement Will Be Concluded With A Single Economic Operator. The Framework Agreement Contains The Terms Governing Subsequent Contracts (Orders) To Be Placed During The Term Of The Framework Agreement. The Terms And Conditions Relating To The Conclusion Of Contracts Awarded On The Basis Of This Framework Agreement Are Set Out In The Point “Award And Award Of Subsequent Contracts” Below. These Supplies Fall Under The Cpv Code: 48000000-8 List (And Possible Details) Of The Services To Be Performed: - Delivery - Assembly/Installation - Commissioning - Maintenance (Maintenance, Updates) - Training - After-Sales Service (Support, Helpdesk) I) Part I: General Data Protection Regulations (Gdpr) As Part Of Its Missions, The Walloon Public Service Is Required To Carry Out Numerous Processing Of Personal Data. These Treatments Have Various Purposes, Such As: “The Granting Of An Energy Bonus” Or “The Imposition Of A Vehicle Registration Tax”. The Spw Also Processes Personal Data As Part Of The Management Of Its Human Resources. In Order To Comply With These Regulations And Document Their Compliance, The Spw Wishes To Equip Itself With A Computerized Solution For The Governance And Protection Of Personal Data. This Tool Is Widely Acclaimed By The Data Protection Unit Of The General Secretariat And By The Data Protection Correspondents (Cpd) Of The General Directorates Of The Spw Who Consider It Essential To Help Those Responsible For Processing To Comply With The Gdpr. The Gdpr Part Requires: • Having A Software Solution Allowing: - Management Of The Register Of Processing Activities In Accordance With Article 30 §1 And §2 Of The Gdpr; - Management Of The Register Of Subcontractors And Co-Controllers Within The Meaning Of The Gdpr; - Management Of Data Protection Impact Analyzes In Accordance With Gdpr Requirements; - Management Of Data Breaches In Accordance With The Requirements Of Article 33§