A private space for collaborating centers and professionals involved in the ASPIRE-AECC project. Its purpose is to centralize the documentation, materials, and operational information required for study follow-up, providing quick and organized access to working resources and ensuring that information is kept in one place.
The data controller for the personal data collected or generated through this website is:
This policy applies to personal data processed through:
Simply consulting general information about the project does not in itself involve the collection of patient data. However, the server, email, cookies and restricted-access system may give rise to the processing of personal data under the terms described in this policy.
Depending on how the website is used, the following categories of data may be processed:
3.1. Browsing data
3.2. Data provided through the website contact form
3.3. Private area user data
Where access is individualized, the following may be processed:
Access credentials will be managed using appropriate security mechanisms. Passwords must not be displayed or stored in readable text.
A. Managing general project enquiries
Purpose: to answer questions about ASPIRE-AECC, its objectives, outreach materials, participating entities, centres and contact methods.
Legal basis: the data subject's consent (Article 6(1)(a) GDPR), expressed through the voluntary submission of the contact form and acceptance of the data protection information provided in it.
B. Managing requests from researchers and healthcare professionals
Purpose: to handle requests for information, potential collaboration proposals, scientific enquiries or communications related to the identification or referral of potential participants.
Legal basis: the legitimate interest of FRCB-IDIBAPS (Article 6(1)(f) GDPR) in promoting and managing scientific and professional collaboration relationships. Where the request relates to a specific contractual or pre-contractual relationship, Article 6(1)(b) GDPR may also apply.
C. Managing access to the private area
Purpose: to identify and authenticate authorized users, provide access to project documents and calendar, manage permissions and maintain repository security.
Legal basis: performance of the professional or contractual relationship linked to the project, where applicable (Article 6(1)(b) GDPR), and the legitimate interest of FRCB-IDIBAPS in controlling access and protecting restricted-access information (Article 6(1)(f) GDPR).
D. Ensuring technical security
Purpose: to prevent unauthorized access, detect incidents, retain technical records, resolve errors and protect the integrity of the website.
Legal basis: the legitimate interest of FRCB-IDIBAPS in ensuring the security of its systems (Article 6(1)(f) GDPR) and, where applicable, compliance with relevant legal obligations (Article 6(1)(c) GDPR).
E. Handling rights requests and legal obligations
Purpose: to process requests for access, rectification, erasure, objection, restriction or portability, and to respond to requests from competent authorities.
Legal basis: compliance with legal obligations applicable to FRCB-IDIBAPS (Article 6(1)(c) GDPR).
The ASPIRE-AECC website does not request and is not designed to collect health data from patients or potential participants through its general contact channels.
Patients, family members, researchers and healthcare professionals must not send medical reports, test results, clinical images, medical record numbers, patient-identifying data or any other health-related information through these channels.
Enquiries about possible participation or referral must be limited to requesting information about the appropriate centres and channels. Eligibility assessment, informed consent and any processing of clinical data will be carried out exclusively through the official clinical trial procedures and outside this website.
The ASPIRE-AECC website is a dissemination, information and document-coordination site.
It is not used to:
Data relating to clinical trial participants will, where applicable, be processed in the study systems and in accordance with the specific study documentation, and not under this general website policy.
The data may be accessible, where necessary, to:
Providers that access personal data on behalf of FRCB-IDIBAPS will act as data processors where appropriate and will be subject to the relevant contract, instructions, confidentiality obligations and required security measures.
The funding of the project by the AECC Scientific Foundation does not in itself imply that AECC is a controller or joint controller, nor that it receives personal data obtained through this website.
International data transfers, if necessary due to the use of certain technology providers, will only be carried out where there is an appropriate legal basis and adequate safeguards under the GDPR.
Where a provider processes data outside the European Economic Area, FRCB-IDIBAPS will apply, as appropriate, an adequacy decision, standard contractual clauses or another valid mechanism provided for by law.
Specific information about providers and, where applicable, relevant international transfers will be reflected in this policy or in the Cookie Policy where appropriate.
The data will be kept for the following periods or according to these criteria:
Once the relevant periods have ended, the data will be securely deleted or blocked.
Data subjects may exercise the following rights:
To exercise these rights, a request may be sent to:
The request must indicate the right being exercised and include the information needed to verify the applicant's identity.
If the person believes that the processing of their data does not comply with the regulations, they may lodge a complaint with the Catalan Data Protection Authority (APDCAT): https://apdcat.gencat.cat/.
FRCB-IDIBAPS will apply technical and organizational measures appropriate to the risk to protect data against loss, alteration, access, disclosure or unauthorized processing.
In relation to the private area, FRCB-IDIBAPS will establish appropriate and proportionate security measures, including, where applicable:
The website is informative in nature and is not specifically directed at minors.
Minors must not send personal data through the website's contact channels without the involvement of their parents or legal representatives where this is required.
No decisions with legal effects on users are made solely on the basis of automated processing, nor are profiles created from the data collected on the website.
The website may include links, videos or resources hosted by third parties. These services may collect browsing data or install cookies in accordance with their own policies.
Third-party content or services that involve non-essential cookies or data communications subject to consent will not be loaded until the user has given that consent, where required.
FRCB-IDIBAPS may update this policy whenever functional, regulatory, technical or processing changes occur in connection with the website.
The changes will be published in this same section and will include the date of the latest update.
Last updated: 07/09/2026
In compliance with Law 34/2002 of 11 July on information society services and electronic commerce, users are informed that the owner of this website is:
The purpose of the website is to disseminate scientific, outreach and organizational information related to the ASPIRE-AECC project, a hepatocellular carcinoma research project combining a multicentre clinical trial with complementary translational research lines.
The project is funded by the AECC Scientific Foundation under the "AECC 70% Survival Challenge" programme.
The above data are provided to enable direct and effective communication with the owner and to comply with the information obligations applicable to providers of information society services.
The website is intended to:
The content published on the website is exclusively informative, scientific and for outreach purposes.
The information provided:
People interested in learning about possible participation should contact their medical team or the relevant participating centre. Inclusion in the study will depend on the assessment carried out by the research team and compliance with the criteria established in the protocol.
The contact channels published on this website are for information purposes and must not be used to send medical reports, test results, images, medical record numbers or other identifying or health-related data. Possible participation in the study will be managed exclusively through the official pathways and procedures established by the participating centres.
Access to the website confers the status of user and implies acceptance of these conditions.
The user undertakes to use the website and its content lawfully, responsibly and in good faith, refraining from:
IDIBAPS may limit, suspend or block access to the private area when it detects improper use, a security risk, a loss of credential confidentiality or any action contrary to these conditions.
The private area is reserved for researchers, healthcare professionals and other authorized persons linked to the ASPIRE-AECC project.
Authorized users must:
The private area is configured as a repository of documents, materials, operational resources and the project calendar. It is not intended to store medical records, healthcare documentation, or patients' personal or health data.
It is expressly prohibited to upload or introduce into this area:
The contents of the website, including but not limited to texts, videos, photographs, graphics, designs, logos, documents, brochures, downloadable materials, structure, code and audiovisual elements, are protected by intellectual and industrial property regulations.
Ownership of such content belongs to IDIBAPS, AECC or the third parties that have authorized its use, as applicable.
Access to the website does not grant the user any ownership rights over the content. Consultation of the content and, where expressly enabled, downloading for informational, scientific, academic or professional purposes related to the project is allowed.
Its reproduction, modification, distribution, public communication, commercial exploitation or incorporation into other media without prior authorization from the rights holder is prohibited, except in cases permitted by law.
The use of the names, trademarks, logos or distinctive signs of IDIBAPS, ASPIRE-AECC, AECC or participating entities will require prior authorization unless covered by a legal or contractual basis.
IDIBAPS strives to ensure that the published information is understandable, up to date and accurate. However, it does not guarantee the absence of errors, omissions or outdated content.
IDIBAPS may modify, correct, expand, suspend or remove website content whenever necessary, especially where there are changes to the project, the study protocol, participating centres or outreach materials.
Without prejudice to any responsibilities that may apply under the applicable regulations, FRCB-IDIBAPS will not be liable for:
The website may include links to pages of collaborating entities, public bodies, clinical study registries, healthcare centres, scientific publications or other sources related to the project.
These links are provided for information purposes only. IDIBAPS does not necessarily control their content, terms of use, availability or privacy policies and assumes no responsibility for them.
Access to those sites is at the user's own risk, and the user must review their corresponding legal conditions and privacy policies.
The processing of personal data that may arise as a result of access to and use of the website is governed by the Privacy Policy included below.
The website will have a separate Cookie Policy that clearly informs users about the cookies and similar technologies actually used, their purpose, duration and, where applicable, the third parties involved.
Where cookies requiring consent are used, they will not be activated before such consent is obtained, and visible, equivalent options will be provided to accept, reject or configure cookies in accordance with the applicable regulations.
This legal notice shall be governed by Spanish law and by the applicable European regulations.
Any dispute shall be submitted to the courts and tribunals having jurisdiction under the applicable regulations, without prejudice to any complaint or dispute-resolution mechanisms available by law.
FRCB-IDIBAPS may update or amend this legal notice to adapt it to regulatory, technical, organizational or functional changes to the website.
Last updated: 07/09/2026
