FUNDACIÓ INSTITUT DE RECERCA BIOMÈDICA (IRB BARCELONA), as the data controller, through its website, ensures an adequate and consistent level of protection of individuals with regard to their personal data, subject to processing by the company, in accordance with the General Data Protection Regulation (679/2016) and Organic Law 3/2018 on data protection and guarantee of digital rights.

IRB BARCELONA only processes personal data with full responsibility and loyalty, and in accordance with legal bases that allow the lawfulness of the processing. Likewise, appropriate security measures have been adopted to protect the rights and freedoms of the data subjects.

Data controller


VAT Number: G63971451

Postal Address: C/Baldiri Reixac 10-12, 08028 Barcelona


Purpose of the processing, legal basis and storage

At IRB BARCELONA, we will process your data for the following purposes:

  • Managing your data to register you in our database platform, entitled by the consent you provide when registering. Article 6.1.a of the GDPR 2016/679.

Personal data will be destroyed once the purpose for which your data was processed has been fulfilled. Only necessary data for making claims or complying with applicable regulations will be retained. In the case of data necessary for conducting commercial communications, they will be retained until the deadlines determined by legislation or until the data subject opposes the processing.

Data processor

In accordance with Regulation (EU) 2016/679 (General Data Protection Regulation), users of the website, through the use of the Cancer Genome Interpreter (CGI) tool, will be considered data controllers for the personal data that may be processed through the use of the tool.

IRB BARCELONA will be considered the data processor of personal data as described in the data processing agreement signed between IRB BARCELONA and the users of the Cancer Genome Interpreter (CGI) tool.

Recipients of the data

Personal data will not be transferred to third parties under any circumstances, except there is a legal obligation.

International data transfers

In order to provide you with our services, IRB BARCELONA contracts resources that carry out international data transfers to third countries located outside the European Union. These countries have an adequate level of data protection declared by the European Commission and also provide appropriate guarantees such as the bilateral agreement between the EU and the USA called DATA PRIVACY FRAMEWORK. The activities where such international data transfers are carried out include:

  • Third-party cookies (Google Analytics, Google, Google Ads, and YouTube). You can find information about data transfers to third countries, if any, carried out by the third parties identified in this cookie policy, in their corresponding policies on the processing of collected data.

Automated decision-making processing and profiling

IRB BARCELONA does not carry out automated decision-making nor profiling.

Data protection rights

As a user of our website, you have the right to:

  • Access, rectify, and erase your data, as well as to restrict the processing, data portability, and object to processing when you believe it is not necessary for the purpose for which it was collected.
  • Request the restriction of the processing; only data strictly necessary for handling your claims will be retained.
  • Withdraw your consent at any time.

To exercise your data protection rights, please contact us at our email address

If you believe that your data protection rights have been violated, you have the right to file a