PRIVACY POLICY

The Institute for Research and Innovation in Health (IRIS) is committed to safeguarding the privacy and confidentiality of your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and related national legislation.

To ensure transparency, IRIS has drafted this Privacy Policy, which describes how we collect, use, store and protect the “Personal Information” you provide when using this Website, as well as the circumstances under which such data may be shared with third parties.

“Personal Information” refers to data such as your name, email address, telephone number, postal address, and any other information or preferences you provide, including those specific to your requests or use of our services.

This Privacy Policy must be read together with any other legal notices or terms and conditions available on the Website (including the Terms of Use and Cookies Policy).

If you have any questions regarding this Privacy Policy or wish to exercise any of your data protection rights, you may contact us using the details provided below.

1. Website Controller

The website iris.upc.edu (the “Website”) is owned and managed by the Institute for Research and Innovation in Health (IRIS) at the Universitat Politècnica de Catalunya (UPC), with registered address:
Institute for Research and Innovation in Health (IRIS)
Universitat Politècnica de Catalunya
Av. Diagonal 647
08028 Barcelona, Spain
Email: iris@upc.edu
ID Number: Q-0818003F

2. Collection of Personal Information

Provided that you have given prior consent, or when required to comply with a legal obligation, IRIS may request and collect Personal Information that is appropriate, relevant and necessary for the purposes described below:

a. Provision of Services and Information

To process and respond to your requests, including:

  • enquiries submitted through Website forms,
  • applications for job positions, scholarships or other opportunities,
  • participation in IRIS-organised events or activities.

b. Institutional Communications and Marketing

To send communications related to IRIS activities, events, news, research developments or services we believe may interest you.
You may opt out of these communications at any time using the “unsubscribe” functionality included in emails or by contacting IRIS directly.

c. Technical Support

To provide assistance regarding the use of the Website or digital services.

d. Website Hosting and Maintenance

To ensure proper functioning, monitoring and improvement of the Website.

Personal data will be retained by IRIS for as long as necessary to fulfil the purposes described above, unless you request its deletion.

3. Cookies

IRIS may use browsing analysis tools, tracking technologies and cookies in order to:

  • improve website navigation and functionality,
  • analyse traffic and usage patterns.

Information collected may include:

  • the domain name of your internet provider,
  • geographic origin of your access,
  • pages visited, dates and times,
  • referral sources.

These tools are designed to produce statistical reports and are not used to identify individual visitors.
 For more details, please refer to our Cookies Policy.

4. Disclosure of Personal Information to Third Parties

Certain services provided by IRIS require the involvement of carefully selected third parties. IRIS ensures that your Personal Information is adequately protected when shared.

a. Google Analytics

We use Google Analytics to generate aggregated data on website usage. You can prevent Google Analytics cookies via your browser settings or by installing the browser plug-in provided by Google. (See Cookies Policy.)

b. Service Providers (within the EEA)

We may share your Personal Information with third-party service providers within the European Economic Area (“EEA”) that:

  • process data collected through the Website,
  • host or maintain the Website,
  • support IRIS communication or IT systems.

These service providers act exclusively on our behalf and follow our instructions and this Privacy Policy.

c. Service Providers Outside the EEA

If data must be transferred outside the EEA, we will inform you in advance and ensure appropriate safeguards.

d. Legal Obligations and Security

We may disclose your data to regulatory authorities, courts or law enforcement agencies when legally required, or when necessary for:

  • fraud prevention,
  • detection of criminal activity,
  • ensuring network and information security.

e. Social Media Platforms

The Website may include sharing buttons for social networks. Social media providers may collect data once you click on these buttons. Please consult their respective privacy policies for further details.

5. Your Rights

Under the GDPR, you may exercise the following rights at any time:

  • Access your Personal Information.
  • Rectify inaccuracies or update incomplete data.
  • Request deletion (“right to be forgotten”).
  • Restrict or object to processing of your data.
  • Request data portability.
  • Withdraw consent at any time (where processing is based on consent).
  • Know more about how we process your data.

To exercise these rights, please contact us at:

Institute for Research and Innovation in Health (IRIS)

Universitat Politècnica de Catalunya

Av. Diagonal 647

08028 Barcelona, Spain

Email: iris@upc.edu

6. Amendments to the Privacy Policy

This Privacy Policy has been approved by IRIS. IRIS reserves the right to amend it at any time in response to legal, regulatory or organisational developments. Any updates will be published on the IRIS Website, and each case will be governed by the version in force at the time of access.

7. Additional Information

Security

Our Website is hosted on servers within the EEA. IRIS applies appropriate technical and organisational measures to protect your Personal Information against unauthorised access, loss, alteration or disclosure. However, due to the inherent risks of internet transmission, absolute security cannot be guaranteed.

Confidentiality

We recognise the confidential nature of the information you provide. IRIS does not sell, rent or commercially disclose your Personal Information to third parties. Any sharing with service providers is solely for the purposes outlined in this Privacy Policy and always in accordance with applicable law.