How to bid in this country: portals, deadlines, thresholds →
Procurement of services for the monitoring and adaptation to the data protection regulation (EU) 2016/679 (RGPD), Organic Law 3/2018 (LOPDGDD) and external designation of the data protection delegate, as well as the maintenance and continuous improvement of the national security scheme and extraordinary services for unit prices.
Contratación de servicios para el seguimiento y adecuación al reglamento de protección de datos (UE) 2016/679 (RGPD), Ley orgánica 3/2018 (LOPDGDD) y designación externa del delegado de protección de datos, así como el mantenimiento y mejora continua del esquema nacional de seguridad y servicios extraordinarios por precios unitarios. — original title
Your path to submission
- Deadline: 10 November at 23:59 — 10 days left.
- You submit on PLACSP — Plataforma de Contratación del Sector Público — not here and not by e-mail. ↗ Submission via the Plataforma de Contratación (PLACSP): registration plus a recognised digital certificate / eIDAS signature — as an EU bidder, arrange this early; it typically takes days. Sort out account and signature first — not on submission day.
- Offer and evidence in: Spanish.
- Collect your evidence — use the eligibility analysis on this page: it lists the requirements and, for known certificates, how to get them.
What the buyer is looking for
The Universitat Politécnica de València needs to continuously guarantee compliance with the legal and regulatory obligations that are required of it in terms of personal data protection and information security, in view of its status as a public university, responsible for and in charge of the processing of personal data and an integral entity of the public sector. This need derives, on the one hand, from the obligation to comply with and keep up-to-date the technical and organizational measures required by Regulation (EU) 2016/679, General Data Protection Regulation (RGPD), and by Organic Law 3/2018, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD), as well as to ensure the following: UPV-GENFirmaExt-424393 Cod. Verified: A3KSSM17D6WU4G21 permanent adaptation of the processing of personal data carried out by the University to the current regulatory…
Show full description
… provisions. Likewise, the Universitat Politècnica de València must guarantee compliance with the requirements established in the National Security Scheme (ENS), maintaining and continuously improving the security measures implemented, periodically reviewing their adequacy to the existing risks and adapting them to the regulatory, organizational and technological modifications that may occur. This need is particularly relevant given that the University has ENS certification in the middle category and must ensure that the conditions that allow this certification to be maintained are maintained. Likewise, in accordance with the provisions of article 37 of the RGPD, the Universitat Politècnica de València is obliged to have a Data Protection Delegate who supervises compliance with data protection regulations, advises the organization in this matter and acts as a point of contact with the control authority and with the interested parties. On the other hand, the progressive digitalization of university procedures and the provision of services through electronic administration require guaranteeing the confidentiality, integrity, availability, authenticity and traceability of the information and the systems that support it, ensuring an adequate management of information security throughout the organization. Consequently, the Universitat Politècnica de València needs to have the specialized means necessary to ensure the maintenance, review, update and continuous improvement of the regulatory compliance mechanisms in terms of personal data protection and information security, guaranteeing the adequate performance of the functions required by the applicable regulations. · L1 - Monitoring and adaptation services to the Data Protection Regulation (EU) 2016/679 (RGPD), Organic Law 3/2018 (LOPD-GDD) and external designation of the Data Protection Delegate · L2 - Maintenance services, continuous improvement and audits of the National Security Scheme (ENS)
Contract
Type of service
Clement What the numbers say about this buyer
- In this sector the buyer awards roughly every 2 months (24 awards, most recently February 2026) — by that rhythm the next award was due around April 2026. The last award went to Centro de Observación y Teledetección Espacial, S.A.U.n = 24
- 37% of this buyer's awards went to companies that had already won here before (636 awards since 2018, spread over 323 companies). 63% went to new names.n = 636 awards since 2018
- 75% of the bids received came from small and medium-sized enterprises (112 procedures with a bid mix). Sector: 52%.n = 112
- The median procedure drew 2 bids (270 procedures with a bid count); 42% ended with a single bidder. Sector: median 2 bids.n = 270
- The award came in at a median 87% of the estimated value (247 awards with both estimate and value) — pricing at the estimate is usually too high here. Sector: 83%.n = 247
From this buyer's documented awards; comparison values from the same sector and country. Not a forecast, not legal advice. As of 01/11/2026.
What you must prove — eligibility criteria
Tender documents — direct download
Who has won at this buyer so far
Across all contract types of this buyer — not just this sector. A city buys software and fire engines through the same purchasing office.
| Company | Awards | Period |
|---|---|---|
| FULTON SA | 20 | 2022–2026 |
| IZASA SCIENTIFIC, S.L.. | 9 | 2019–2025 |
| UNIVERSITAS XXI SOLUCIONES Y TECNOLOGIA PARA LA UNIVESIDAD | 9 | 2019–2026 |
| Servicios Microinformática S.A. · MADRID | 9 | 2022–2025 |
| VALNU SERVICIOS DE INGENIERIA, SL | 8 | 2018–2024 |
How often this buyer tenders this kind of work
Tactics
When this buyer has awarded in this sector, there was usually a single bid in the end. A solid bid has a real chance here. (Based on 7 completed awards — not a statement about this procedure.)
This procedure allows 15 days between publication and deadline — typical in this country is 26 (median of 7,730 procedures). Much tighter than usual: the first week counts.
Foreign bidders
In Spain · IT services, 149 contracts went to foreign companies over the last 3 years (of 31,248 recorded awards) — mostly from Germany, Italy, France.
Submission language: Spanish.
How to bid
Guide: how to apply on PLACSP — Plataforma de Contratación del Sector Público (Spanien) → Registration, signature, fees — from the operator's bidder manual.
Don't miss the next one
Friedrich finds tenders like this for you — every morning at 7:30, each one checked by Claude (Anthropic) for fit, and he learns from your feedback what your company really does.
Register now