In accordance with the provisions of Regulation (EU) 2016/679 of 27 April on the protection of natural persons with regard to the processing of personal data (hereinafter, the “GDPR”), and in relation to the data that users enter into the forms contained on the Website, we inform you that:

• The data controller is the FUNDACIÓ DE RECERCA CLÍNIC BARCELONA–INSTITUT D’INVESTIGACIONS BIOMÈDIQUES AUGUST PI I SUNYER (hereinafter, the “Entity” or “FRCB-IDIBAPS”), with Tax ID No. G-59319681 and registered office at Rosselló Street 149–153, 08036 Barcelona, Spain. You may contact the Data Protection Officer via email at protecciodades@recerca.clinic.cat.

• Your data will be processed solely in accordance with the following purposes and lawful bases for processing:

1. Processing based on the data subject’s explicit consent (Art. 6.1.a GDPR):

• Processing of data for the purpose of managing your request for information through this Website.

• Processing of data for the purpose of keeping you informed about scientific developments and activities related to the IGNITION project.

• Management of recruitment and selection processes and any hiring carried out.

2. Processing based on a legal obligation (Art. 6.1.c GDPR):

• Disclosure of information to public authorities, regulatory bodies, or governmental entities where required by law, local regulations, or in compliance with regulatory obligations.

3. Processing based on the performance of a contract or pre-contractual measures (Art. 6.1.b GDPR):

• Processing of data for the purpose of managing users’ participation in the various activities related to the Project.

4. Processing based on the legitimate interest of the data controller (Art. 6.1.f GDPR):

• Processing of data for the purpose of monitoring Website visitors in order to understand their preferences.

      • You have the right to access your data, request the rectification of inaccurate data, or, where appropriate, request its erasure. You also have the right to restrict processing, object to processing, and withdraw your consent for specific purposes. You may exercise these rights by sending an email to protecciodades@recerca.clinic.cat, where you may also request the relevant forms to exercise your rights. Likewise, you are informed of your right to lodge a complaint with the Catalan Data Protection Authority regarding any action by FRCB-IDIBAPS that you consider to infringe your rights.

Unless expressly stated otherwise, all fields in the forms must be completed with accurate, complete, and up-to-date information; otherwise, the Entity may hold the user liable for any damages or losses caused by the provision of such information.

Where consent is required, it must be given by a person with full legal capacity; otherwise, consent must be given by their legal representative or guardian.

All data will be processed by applying the technical and organizational security measures established by current legislation.

The data provided will be retained for as long as necessary to fulfill the purposes for which they were collected and for the periods required by applicable legislation, until liabilities related to the processing and its purpose can no longer arise. In other cases, the data will be retained until the data subject requests their deletion.

Your data will not be disclosed to third parties nor used for any purpose other than those set out in the first paragraph of this Privacy Policy, unless otherwise required by law or requested by a Judge, the Public Prosecutor’s Office, or any public authority legally entitled to request them under data protection regulations. Your data will not be transferred to any country outside the European Union.