Spain – Computer audit consultancy and hardware consultancy services – Contratación de servicios para el seguimiento y adecuación al reglamento de protección de datos (UE) 2016/679 (RGPD), Ley orgánica 3/2018 (LOPDGDD) y designación externa del delegado de protección de datos, así como el mantenimiento y mejora continua del esquema nacional de seguridad y servicios extraordinarios por precios unitarios.

The Universitat Politècnica de València needs to ensure the continuous fulfillment of the legal and regulatory obligations that are required of it in terms of personal data protection and information security, given its status as a public university, data controller and processor, and entity within the public sector. This need arises, on the one hand, from the obligation to comply with and keep up-to-date the technical and organizational measures required by Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Organic Law 3/2018, on Personal Data Protection and guarantee of digital rights (LOPD-GDD), and to ensure the permanent adequacy of the processing of personal data carried out by the Universitat to the current regulatory provisions. Id: UPV-GENFirmaExt-424393 Cod. Verificació: A3KSSM17D6WU4G21. Similarly, the Universitat Politècnica de València must ensure compliance with the requirements established in the National Security Scheme (ENS), continuously maintaining and improving the security measures implemented, periodically reviewing their adequacy to the existing risks and adapting them to the normative, organizational and technological changes that may occur. This need is particularly relevant given that the Universitat has ENS certification in the medium category and must ensure the maintenance of the conditions that allow it to retain said certification. Likewise, in accordance with Article 37 of the GDPR, the Universitat Politècnica de València is obliged to have a Data Protection Officer who supervises compliance with data protection regulations, advises the organization in this matter and acts as a point of contact with the supervisory authority and with the interested parties. On the other hand, the progressive digitization of university procedures and the provision of services through electronic administration require ensuring the confidentiality, integrity, availability, authenticity and traceability of information and of the systems that support it, ensuring adequate management of information security throughout the organization. Consequently, the Universitat Politècnica de València needs to have the specialized means necessary to ensure the maintenance, review, updating and continuous improvement of the mechanisms for regulatory compliance in terms of personal data protection and information security, guaranteeing the proper performance of the functions required by the applicable regulations.