Tenders Are Invited For Data Processing Services – Provision Of Services From An External Data Protection Officer

Data Processing Services – Provision Of Services From An External Data Protection Officer. 1 Tasks Of The Contractor In Particular, The Following Tasks Should Be Taken On By The Contractor: - Advice And Monitoring Of Compliance With Data Protection Regulations - Observation Of The Development Of Data Protection Law - Monitoring Of Data Processing And Data Protection Controls - List Of Processing Activities - Data Protection Impact Assessments - Advice On New Projects And Processing Activities - Contracts And Data Protection Agreements - Rights Of Those Affected - Data Protection Violations - Contact Persons For Employees And Contractual Partners - Cooperation With The Supervisory Authority - Documentation And Reporting - Raising Awareness And Training Of Employees - Specialist Knowledge And Further Training - Maintaining Data Protection Management - Optional: Taking On The Role Of Ai Representative 2 Availability And Response Time On Weekdays Between 9:00 A.M. And 5:00 P.M., Within 24 Hours Of Contact. Inquiries Are Processed Remotely Within Germany. In The Case Of Data Protection Incidents, A Response Time Of A Maximum Of 240 Minutes Is Required On Weekdays Within The Service Hours Of 9:00 A.M. To 5:00 P.M. The Response Must At Least Indicate That The Content Of The Request Has Been Taken Into Account. A Response Via An Automated And/Or Semi-Automated Standard Email That Simply Confirms Receipt Of The Request Is Not Sufficient. If The Data Protection Officer Appointed By The Contractor E.G. If, For Example, You Are Unable To Attend Due To Vacation Or Illness, Etc., A Representative Will Take Over The Tasks. The Representative Must Be Named At The Start Of The Service, Including Any Different Contact Details. 3 Requirements For The Qualifications Of The Personnel Employed - Valid Certification As Cipm And/Or As Cipp/E Or An Equivalent Certification (Equivalent Are Certifications Which Require A Minimum Cpe Certificate Over A Period Of 2-3 Years To Maintain Validity And Which Are Accredited According To The Ansi/Iso Standard) - Training As A Data Protection Officer And Regular (At Least Once A Year) Participation In Further Training On Data Protection Within The Last 4 Years - Working As A Data Protection Officer For At Least 5 Years Data Protection Officer - There Is Already A Valid Extended Security Clearance In Secrecy In Accordance With Section 9 Süg. For Details, See Service Description