Germany - Software development

Description

The State of Baden-Württemberg (Center for School Quality and Teacher Training - hereinafter: Client or Awarding Authority) intends to procure services in the area of software development (subject lot no. 1) and data protection documentation (subject lot no. 2) in connection with the aula BW project: a) Lot no. 1: Specifically, development services are to be procured for the application ("aula BW") used in Baden-Württemberg, among other places. aula BW" is a participation concept that enables young people to actively participate in everyday (school) life with the help of an online platform.b) Lot No. 2: The subject of Lot No. 2 is the procurement of services in the area of documentation of the relevant data protection framework conditions for the application used in Baden-Württemberg (aula BW).
The State of Baden-Württemberg (Center for School Quality and Teacher Training) would like to procure services in the area of software development. Specifically, development services are to be procured for the application used in Baden-Württemberg ("aula BW"), among others. aula BW" is a participation concept that enables young people to actively participate in everyday (school) life with the help of an online platform. The key data of the contract to be awarded can be summarized as follows: 1. aula BW" is an open source application and is provided under the license GNU GPLV3. On the frontend side, the VUE3 / Vuetify framework is currently used. The native aula apps are provided in both the Apple and Android Play Store. The development is done in PHP8.2, mariadb is used as database.The online platform "aula BW" can currently either be obtained as SaaS via the aula gGmbH, or is available as a free download for so-called self-hosting on their own servers. The software product implements a rights- and role-oriented client system in which individual schools and their respective users are managed as separate clients.2 The individual functions of the aula application can be viewed at https://www.aula.de or https://www.learning.aula.de.In connection with the use of the aula BW application in baden-Württemberg, development services are to be procured in the following areas: a) Notification of compatibility problems b) Compression of image filesc) LTI integrationd) Connection of third-party solutions (translation services for ideas, etc.) e) Connection of third-party solutions for push notificationsf) Separation of hosting administration, conversion of system architecture to configurable hosting / standalone operationg) Statistical collection of anonymized datah) User interface design / user experience i) Frontend: Self-explanatory user interface j) Frontend: Simplified bug reportingk) Frontend: Breadcrumb navigation in frontend / back functionl) Frontend: Storage of uploaded images as filesim) Frontend: Reporting of ideas, topics and suggestions for improvementn) Frontend: Generation of a print view for ideas o) Frontend: Enabling delegation of votes p) Frontend: Switching technology stackq) Frontend: User:inside dashboard r) Frontend: Self-registration by users) Frontend: "Forgotten password" function t) Backend / Administration: Individual definition of phase duration per room u) Backend / Administration: Individual definition of phase duration per topicav) Backend / Administration: Temporary user blocking w) Backend / Administration: Advanced search filters in user and group administrationx) Backend / Administration: Archive function for wild ideas y) Backend / Administration: Move topics to other roomsz) Backend / Administration: Integration of optional "Custom" fields for ideas (aa) Backend / Administration: Voting module (bb) Backend / Administration: Vacation mode (cc) Backend / Administration: Locking of an instance(dd) Backend / Administration: Integration of a messaging and command system (ee) Development of a self-service installation wizard for instances(ff) Data protection / data security: Provision of function "user data export" according to DSGVO (gg) Data protection / data security: Development of extended user consent according to DSGVO (hh) Data protection / data security: Functions (one-click solution) to fulfill obligations from data subject rights according to DSGVO(ii) Data protection / data security: conversion of database and system architecture to Salt-based encryption (jj) Data protection / data security: backup / restore system (kk) Data protection / data security: forced change of assigned passwords 1. Background and general conditions: The protection of personal data is one of the most important issues when using applications in everyday life. Particular attention is paid to the issue in connection with the provision of applications that are used by minors requiring special protection. Since aula is used in a school context, it is essential that the rights of users in connection with the GDPR are protected at all times. In the context of the aula application, different user groups need to be considered: (a) organization using aula (e.g., school), (b) organization creating the program code and licensing aula, (c) organization performing the technical operation of the aula application (service provider or hoster), and (d) the users using aula (students and teachers). The relevant legal sources for the protection of personal data in the context of the aula application are the DSGVO, the BDSG, the LDSG Baden-Württemberg, the Landesschulgesetz Baden-Württemberg (SchG BW), the administrative regulation of the Ministry of Education and Cultural Affairs on data protection at public schools dated 04.07.2019 (Ref.: 13-0557.0/106) and the specifications of the BSI Grundschutz. 2. on the basis of the framework conditions outlined under item 1, the contractor shall provide the following services: (a) Implementation of evaluations and audits in coordination with aula gGmbH - Evaluation and identification of data protection aspects that arise in the context of the aula application in the school context - Technical evaluation, documentation and auditing of data security (if necessary: preparation of GAP analysis with recommendations for action) - Evaluation and, if necessary. Supplementation/correction of the existing data security concept of the aula application as well as the technical and organizational measures in connection with the hosting operation of the aula application - Review of the existing aula-specific contracts for completeness and conformity with the above-mentioned legal sources for data protection at schools / if necessary: preparation of revision proposals (note: compliance with the requirements of the Legal Services Act) - Evaluation and assurance that each school has concluded an order data processing contract with the respective hosting service provider / data center and that the order processor has been checked for trustworthiness. (b) Document templates and guidelines - Creation of a binding agreement template for participation in the aula application for schools between school and student:s - Creation of binding data protection guidelines for the aula application - Creation of handout for school to supplement the processing directory to be kept by the school on a mandatory basis - Proposal of legal bases for each type of processing possible via the app - Submission of sample texts pursuant to. Art. 13 GDPR - Document according to Art. 5 GDPR (c) Creation of teaching material and handouts - Tutorials on the topic of data protection in the aula application for the target groups of students and operators - Content for the online FAQ database on data protection issues - Handout for operators with guidelines for the operation of the aula application

Opportunity closing date

13 November 2023

Value of contract

£100k-1m