Privacy Policy


This Privacy Policy of INSTITUT D’INVESTIGACIÓ BIOMÉDICA DE BELLVITGE (IDIBELL) regulates the collection, use, and other forms of processing of personal data provided by users on the website Thus, it also provides complementary information to the data processing carried out from different strategic areas of this program.

If you make contact through the e-mails included in the website, you accept the inclusion and processing of the data they provide in the processing of personal data, of which INSTITUT D’INVESTIGACIÓ BIOMÉDICA DE BELLVITGE (IDIBELL) is the holder, being able to exercise the related rights according to the exposed in the following clauses.

All legal texts are available to users and / or interested in the corresponding website. These texts may be modified and/or updated according to the needs and activities carried out by INSTITUT D’INVESTIGACIÓ BIOMÉDICA DE BELLVITGE (IDIBELL).

In the following sections, we answer some questions that may arise concerning how these data are treated and what are the commitments we assume when accessing, storing, and disposing of the information that may eventually be collected.

What regulations do we apply when we manage your data to provide you with our services?
For these purposes, our activity is governed by the commonly known General Regulation of Data Protection (RGPD), which is the Regulation (EU) 2016/679 of the Parliament and of the Council, of April 27, 2016, regarding the protection of legal people with regard to the processing of personal data and the free movement of such data and repealing Directive 95/46 / EC; Organic Law 3/2018, of December 5, Protection of Personal Data and guarantee of digital rights, and other national regulations that may be applicable.
How can I contact the person responsible for processing personal data?
CIF: G58863317
Address: Gran Via de l’Hospitalet, 199-203, 2a planta
City: Hospitalet de Llobregat
Postal code: 08908
Phone/email: +34 93 260 74 11 /
Contact for the exercise of rights:
Contact with DPD: FUNDACIÓ TIC SALUT SOCIAL, amb CIF G64350374, direcció postal c/ Roc Boronat 81-95, 08005, Barcelona.
Who collects your data?

The collection and processing of personal data that can be provided are carried out by IDIBELL, and in this case, through its data processors, who are third parties with whom IDIBELL has established an express service contract, and in which the conditions have been set so that the management of the data is by the law. These third parties are required by contract that their activity respects the law and that they implement the appropriate security measures to protect these rights.

What is the legal basis of the processing of your personal data?

The primary legal basis of the processing of your personal data for browsing through the IDIBELL website is your consent, provided by the acceptance of the notice of the use of cookies, or in the case of not accepting or rejecting, for continuing browsing knowing their existence. It is also understood that there is express consent if you make the first contact through the e-mails included on the website, providing personal data.

Regardless of the information collected through cookies, you can browse most of the pages of IDIBELL without providing any personal information.

In the event that the processing of your personal data could be based on some other basis of legitimacy, you would be expressly informed prior to registering personal information.

For what purpose do we collect your data?

IDIBELL only collects the strictly necessary data to offer the services derived from its activity and other benefits, procedures, and activities attributed by law. On this website, only the data provided by Users is processed. The data that can be obtained from the user will be treated for the management of your contact data to resolve doubts, suggestions, or requests of a professional nature.

As a follower user in social networks, the processing will be carried out to manage and publish content or information that may appear your profiles or walls and that we think may be of interest.

As a user candidate for a job offered by P-CMR[C], an internship or research project of IDIBELL, or any other person who has opted for an IDIBELL candidacy or has presented spontaneously for a similar purpose, you will also be accepting the processing of your personal data to apply for a position, maintain communication concerning the status of the candidature, to access the delivered CV, as well as on the candidate’s social networks; to compare that your data is in accordance with the offers announced by IDIBELL and to verify, where appropriate, that the information provided is accurate. This information can be shared with other co-managers of the processing that are linked to the purpose of the application, which will be expressly informed at the time of data collection.

Finally, as a person who has given biological samples to the STEM CELL BANK, the purposes of the processing will be expressly communicated before the collection of personal data, which, for your safety, will go through a pseudonymization process, by the current regulation.

How do we treat your data?

L’IDIBELL collects data exclusively to the extent necessary to achieve a specific purpose. The information will not be used for a purpose incompatible with that described.

These data will be guarded and managed with the highest reasonable diligence applying the limitation and minimization criteria.

IDIBELL has included all the technical and organizational measures at its disposal to prevent the loss, misuse, alteration, unauthorized access, and theft of the personal data it guards. Likewise, in the event of a security incident that seriously jeopardizes the confidentiality and availability of your data, IDIBELL will follow the mandatory notification protocols to the competent authority, and the interested parties affected.

How do we treat your data?

When the legitimate basis of the processing is based on the consent of the interested party, the personal data will be kept as long as it does not state otherwise, unless, for logical and evident reasons, they have lost the utility or the legitimate purpose for which they were collected. It is reported that those personal data collected through an application that does not end with the incorporation of the candidate in IDIBELL, will be kept for a maximum period of one year.

When the legitimate basis of the processing is based on the fulfillment of a legal and/or contractual obligation, the personal data will be kept, once the relationship that links the interested party with the IDIBELL for the time necessary to face the derived legal responsibilities. From the same. In this sense, it is expressly informed that the legally established conservation periods are:

  • Ten years in cases related to IDIBELL accounting and taxation, as determined in the General Tax Law of December 16, and according to the periods of prescription of criminal liability derived and included in Organic Law 10/1995 of November 23.
  • Ten years as regards the contractual obligations acquired by the IDIBELL, except for claims related to periodic payments that must be made for years or terms plus prices, remuneration for the provision of services and works, claims for the sale price of consumption, which will be kept for a period of 3 years, as provided in Law 29/2002, of December 30. First Law of the Civil Code of Catalonia.
  • Three years regarding data that may be linked to other non-contractual obligations, as provided in Law 29/2002, of December 30. First Law of the Civil Code of Catalonia.
Finally, and regarding the specific conservation periods of the applicable legislation in the field of biomedicine, and as long as the corresponding rights of the interested parties are not exercised, the established legal conservation periods are:
  • Thirty years regarding data associated with cells, tissues, and any biological material of human origin according to Law 14/2007, of July 3, on biomedical research, once the project, study, or trial is finished, for which they were collected.
  • Fifteen years regarding the data included in the informed consent, according to Law 21/2000, of December 29, on the rights of information about the health and autonomy of the patient, and the clinical documentation of the Department of the Presidency of the Autonomous Community of Catalonia.
  • Five years regarding genetic data, since they were obtained, except that their conservation is necessary to preserve the health of the person from whom it comes or of third parties related to it according to Law 14/2007, of July 3, of investigation biomedical.
To which recipients will your data be communicated?

Your data can be communicated to third parties who help us provide Information Technology services, and comply with the legal and contractual obligations assumed by IDIBELL

IDIBELL has adopted the appropriate technical and organizational measures to guarantee the adequate use of data by these third parties, and if the aforementioned data processing implies the international transfer of data, especially for the use of services hosted in the cloud, ensures that the third party complies with the obligations outlined in the current data protection regulations.

If you want more information about which third parties your data may have been transferred, you can request it through the e-mail

What rights do you have about your data?
Right of access
You can ask the center if you are treating your information and in what way.
Right of rectification
You can ask us to update your personal information if it is incorrect, and delete it if you wish.
Right to limitation of processing
In this case, they will only be kept by IDIBELL for the exercise of defense so claims.
Right of opposition
After your request to oppose the processing, IDIBELL will stop treating the data in the way indicated, unless for compelling legitimate reasons or the exercise of the defense of possible claims have to continue processing.
Right to data portability
In case you want your data to be processed by another company, IDIBELL will facilitate the portability of your data to the new manager.
Right of suppression
You may request that we delete your data when it is no longer necessary for the processing, withdraw your consent, be it illicit processing, or have a legal obligation to do so. We will analyze the assumption and apply the law.
Right not to be subject to automated decisions

Right not to be subject to wholly automated decisions and without human intervention if it may have legal effects on the interested party or may significantly affect it, as long as the interested party’s explicit consent has not been obtained or is authorized by EU law or the State.

If you need more information about what rights are recognized in the law and how to exercise them, we recommend that you contact our Data Protection Delegate at or at the Catalan Data Protection Agency, which is the control authority in terms of data protection, with whom you also have the right to request your protection before a possible data protection information.

For the best management of your request, please send us the following information:
  • An e-mail to the mailbox,, indicating your full name, along with a copy of your ID or similar and the right you wish to exercise over your data.
  • A letter with the same information at the address: Gran Via de l’Hospitalet, 199-203, 2nd floor, Hospitalet de Llobregat.
  • If you have doubts about how to do it, you can also call us: 93 260 74 11.
In the event of any conduct or situation that could be likely to generate an incident or irregularity of any kind, please contact

IDIBELL recommends that, before introducing the data in any or some of the data collection sheets of this website, carefully read the legal notice, cookie policy, and privacy policy.

In any case, the user is responsible for the authenticity of the data provided, which are accurate, updated and complete for the purpose for which they are provided, assuming responsibility for damages, both for lost profits and for emerging damage, which may be generated by such inaccuracies or falsehoods.


Both the access to the websites and the use that can be made of the information and contents included in them will be of the exclusive responsibility of whoever makes it. Therefore, the use that may be made of the information, images, content reviewed and accessible through it, will be subject to the law, whether national or international, applicable, as well as the principles of good faith and lawful use by users, who will be entirely responsible for such access and proper use. Users will be obliged to make reasonable use of the services or content, under the principle of good faith and with respect for existing law, morality, public order, good customs, the rights of third parties or the IDIBELL itself, all according to the possibilities and purposes for which they are designed.

IDIBELL assumes no liability, whether direct or indirect, for consequential damages or lost profits, arising from the misuse of services or content made by users or third parties.

In fulfillment of the duty of information contemplated in the article 10 of the effective Law 34/2002, of July 11, of Services of the Society of the Information and of Electronic Commerce, we communicate to him that manager of contents of the web where it can unload different applications and/or information is INSTITUT D’INVESTIGACIÓ BIOMÉDICA DE BELLVITGE (IDIBELL) with domicile in and with the management of the domain of Internet registered in the corresponding registry, attending to communications of the users and/or interested parties through the e-mail

Privacy Policy Social Networks

1. Information about the person responsible for the processing of personal data in their social networks

Following the duty of information established in Regulation (EU) 2016/679 of April 27 (GDPR) and LO 3/2018, of December 5, Protection of Personal Data and guarantee of digital rights, INSTITUT D’INVESTIGACIÓ BIOMÉDICA DE BELLVITGE (from now on, IDIBELL), wishes to inform the users of any social network of its domain the policy regarding treatment and protection of personal data of those who voluntarily they access and they can use them.

The access and use of these social networks by the user implies that they expressly accept this privacy policy and that they give their consent to the processing of their personal data foreseen in it.

2. Data of minors or incapacitated
The access and registration in the social networks of the person in charge by minors of fourteen (14) years and incapable, requires the consent of the owner of the parental authority or guardianship of the user or his legal representative for access and use. IDIBELL will be expressly exonerated from any liability that may arise from the use of its official page by minors and incapacities being the responsibility of their legal representatives in each case.
3. Identification of the person responsible
IDIBELL is responsible for the personal data of the user, which hare collected and stored in the social network, without prejudice to the treatments for which the titular entity of the social network in which our page is responsible is official.
4. Purposes to which personal data, information, and consent are intended

Personal data provided voluntarily by the user to IDIBELL, through its official website of the social network will be part of a data processing responsibility of RESPONSIBLE, by e-mail, fax, SMS, MMS, social communications or any other electronic or physical means, present or future, that enables commercial communication, sending a newsletter to those users who subscribe expressly, exchange information with IDIBELL, and other users and establish contact with third parties.

From the moment the user uses the official website of the social network, their free, unequivocal, specific, informed, and express consent is given for the processing of their personal data by IDIBELL.

The user is free to use the official page of IDIBELL, in any social network of his domain, so that in case the user does not agree with the processing of their data with such purposes, he should not use it or provide his personal information.

Through the official page of the responsible social networks, the user can share texts, photos, videos, and other training and / or content that will be subjected to both this policy and rules and conditions of the platform.

The user may only publish on the official pages of the social networks of the person in charge of the personal data, photographs, and information or other content whose ownership belongs to him or in respect of which he holds the authorization of third parties.

IDIBELL shall have the right to remove from its official pages of social networks – unilaterally and without prior communication or permission of the user – any content published by the user when it infringes or violates current legislation, the rules set out in this policy and the provisions of the platform.

5. Identification of the recipients concerning whom IDIBELL, foresees the realization of assignment or data communications

The user is advised that all the information and contents will be published on the official pages of the social networks of the person in charge may be known by remaining users of the official website and the social network platform. Consequently, all information and content published by the user on the official website of RESPONSIBLE, in this social network, will be the subject of a communication to the rest of the users by the very nature of the service.

IDIBELL has only planned the realization of assignments or communications of data that, because of the current regulations, must be made to judges, courts, public administrations, and competent authorities of an administrative nature.

6. Other third-party service providers
IDIBELL warns the user that this entity is only co-responsible and guarantees the confidentiality, security, and treatment of the data by this policy, regarding the personal data collected from the user through their social networks, not having no type of responsibility concerning the procedures and subsequent uses of personal data that could be carried out both by the owner of the social network, and by third-party service providers of the information society that could access such data because of the provision of its services or exercise of its activity, as well as third parties that establish hyperlinks to the social network, or those who are responsible for those who through hyperlinks of RESPONSIBLE send to the users attached to this official page.
7. Data quality
IDIBELL warns the user that, except for the existence of a legally constituted representation. No user can use the identity of another person and communicate their personal data. So the user at all times must have an account that only can be provided by personal data corresponding to their own identity, and that is appropriate, pertinent, current, exact, and true. In any case, the user must respect the privacy of third parties. Whether they are users or not of the social network or the official page of CO-RESPONSIBLE, in it.
8. Use recommendations
IDIBELL recommends, following instructions from the Instituto Nacional de Tecnologías de la Comunicación (INTECO) and the Agencia Española de Protección de Datos (AEPD), for the use of social networks or browsing in web environments, the execution of the following actions ( if one day it is available for use):
  • It is recommended that all users use pseudonyms or personal nicks with which to operate over the Internet, allowing them to have a real “digital identity,” which does not jeopardize the safety of their personal and professional lives.
  • It is recommended that users take special care when publishing audiovisual and graphic content in their profiles, as in this case, they may be putting at risk the privacy and intimacy of people around them.
  • It is recommended to review and read, both before user registration and subsequently, the general conditions of use and privacy policy that the platform makes available on their websites.
  • It is recommended that the degree of privacy of the user’s profile on the social network be configured appropriately in such a way that it is not entirely public, but only those persons who have been previously cataloged as “friends” or “direct contacts” by the user have access to the information published on the profile.
  • It is recommended to accept as a contact only those people known or with whom you have a previous relationship, not compulsively accepting all requests for communication you receive and investigating whenever possible and necessary, who is the person requesting contact through the social network.
  • It is recommended not to publish in the user profile physical contact information, which allows anyone to know where he lives, where he works, or studies daily or the leisure places he frequents.
  • Users of microblogging tools are advised to take special care concerning the publication of information regarding the areas in which they are at any moment.
  • It is recommended that you only use and publish content for which you have sufficient intellectual property rights. Otherwise, the user will be committing a civil offense that can be protected by national courts.
  • It is recommended to use passwords with a minimum length of 8 characters, alphanumeric, and with the use of upper and lower case letters.
  • It is recommended that all users have installed and correctly updated antivirus software on their computers.
  • Minors should not reveal excessive personal data. Never provide data to strangers.
  • All information concerning the website should be read. It explains who are its holders and the purpose for which the data is requested.
  • Usernames and passwords should not be communicated to third parties, nor shared among friends or classmates. These data are private and should not be communicated to third parties and/or unknown.
  • Whenever there is any doubt regarding a situation arising from the use of social networks and collaborative tools, parents or guardians should be asked.
  • Activate parental control and platform control tools, as well as establishing the parent’s or guardian’s e-mail as secondary contact e-mail.
  • Make sure age verification checks are in place.
  • Ensure the correct installation of the content blocker.
9. Rights that assist the interested party:
The right to withdraw consent at any time. The right of access, rectification, portability, and suppression of your data and the limitation or opposition to your treatment. The right to file a claim for the protection of your rights with the Catalan Agency for data protection. If you consider that the treatment does not comply with current regulations.
10. Other information of interest
IDIBELL may modify and/or replace at any time this policy, which, as the case may be, will replace, complete and/or modify the currently published here collected. Therefore, the user must periodically access them to keep them updated. The user can contact RESPONSIBLE through the internal messaging service of the social network through the following addresses and contact information:
Address: Gran Via de l’Hospitalet, 199-203, 2a planta, 08908 de L’Hospitalet de Llobregat
Also, the user can consult the rules and policies published by the owner of the social network for the use of it.