TRANSCAN-4 — Privacy Policy
Last updated: 5 October 2026
1. Who we are
TRANSCAN-4 is a transnational network of national and regional funding organisations supporting translational cancer research. It is co-funded by the European Union under Horizon Europe, Grant Agreement No. 101288225.
For questions about this Privacy Policy or the processing of personal data in connection with the TRANSCAN-4 website, please contact coordination@transcan.eu.
Joint controllers
Where TRANSCAN-4 partner organisations jointly determine the purposes and means of a processing operation, for example in connection with calls for proposals, evaluation procedures or the monitoring of funded projects, they may act as joint controllers within the meaning of Article 26 GDPR. Information about the relevant controller or controllers for a particular processing operation can be requested at coordination@transcan.eu.
2. Scope of this policy
This policy explains how personal data may be processed when you use the TRANSCAN-4 website or interact with TRANSCAN-4 activities. It does not apply to websites operated independently by third parties that you may access through external links.
Where processing is based on consent, consent is requested separately and may be withdrawn at any time. Continued use of the website does not by itself constitute consent to optional analytics technologies.
3. Personal data we may process
Depending on how you interact with us, we may process:
- technical data such as IP address, browser information, date and time of access, requested URLs, referrer information and server logs;
- identification and contact data that you provide when contacting TRANSCAN-4 by email;
- institutional data, such as organisation, department, country and professional role;
- project- and call-related information connected with TRANSCAN-4 activities;
- account and access data where access to a restricted area is provided;
- information contained in documents that you voluntarily send to TRANSCAN-4.
4. Where personal data comes from
Personal data may be obtained directly from you, automatically through the technical operation of the website, or from TRANSCAN-4 partner organisations, applicant institutions or project coordinators where this is necessary for TRANSCAN-4 activities.
5. Purposes and legal bases
| Purpose | Data involved | Legal basis | Retention criterion |
|---|---|---|---|
| Responding to enquiries sent by email | Contact data and message content | Article 6(1)(e) GDPR where the processing is connected with TRANSCAN-4 public-interest activities; otherwise the applicable lawful basis will depend on the nature of the enquiry | For as long as necessary to handle the enquiry and any subsequent administrative or legal obligations |
| Managing calls, evaluations and funded projects | Identification, contact, institutional and project-related data | Article 6(1)(e) GDPR and, where applicable, Article 6(1)(c) GDPR | For the period required by the relevant programme, grant, audit and legal obligations |
| Administering restricted areas | Account data and security/access logs | Article 6(1)(e) GDPR and/or Article 6(1)(f) GDPR, as applicable | For the duration of the account and for the additional period necessary for security and accountability |
| Maintaining the security, availability and integrity of the website | Technical data, including IP addresses and server logs | Article 6(1)(f) GDPR — legitimate interests in operating and securing the website | For the period reasonably necessary for security, diagnostics and incident investigation |
| Measuring website usage and improving content and performance | Technical data and analytics identifiers | Article 6(1)(a) GDPR — consent, together with the rules applicable to non-essential cookies and similar technologies | According to the analytics technologies described in the Cookie Policy and the user's consent choices |
| Complying with legal obligations and establishing, exercising or defending legal claims | Any relevant data from the categories above | Article 6(1)(c) GDPR and, where appropriate, Article 6(1)(f) GDPR | For the period required by the applicable legal obligation or limitation period |
6. Special categories of data
The public website does not request special categories of personal data such as health data, biometric data, political opinions, religious beliefs or trade-union membership. Please avoid including such information in messages or documents unless it is genuinely necessary for the relevant TRANSCAN-4 activity and an appropriate legal basis applies.
7. Cookies and analytics technologies
TRANSCAN uses a cookie preferences mechanism that allows visitors to accept all optional technologies, reject non-essential technologies or configure their preferences.
The website stores a strictly necessary first-party preference cookie,
transcan_consent, for 180 days so that the website can remember the visitor's
privacy choices.
Google Analytics 4
If you consent to analytics, the website loads Google Analytics 4. Google Analytics uses
first-party cookies including _ga and _ga_* to distinguish users
and maintain session information. These cookies are not set before analytics consent is
granted.
Metricool
If you consent to analytics, the website also loads the Metricool visit tracker. The Metricool tracker is used to obtain statistical information about visits to the website. According to Metricool's documentation for the visit tracker, this technology does not store cookies or assign a unique identifier on the visitor's device; the script nevertheless communicates with Metricool's servers and is therefore only loaded by TRANSCAN after analytics consent has been granted.
You may change or withdraw your analytics consent at any time using the Cookie settings link in the footer. Further details are available in the Cookie Policy.
8. Recipients and service providers
Personal data may be disclosed, where necessary, to:
- TRANSCAN-4 partner organisations and authorised evaluators or experts, where required for programme activities;
- hosting and technical service providers used to operate and maintain the website;
- Google, where Google Analytics is activated with the visitor's consent;
- Metricool, where Metricool analytics is activated with the visitor's consent;
- European Union institutions and bodies where required by the Grant Agreement or other legal obligations;
- public authorities, courts or law-enforcement bodies where disclosure is required by law.
Additional processors or service providers, including newsletter providers, may be introduced in the future. Where this materially changes the processing of personal data, this Privacy Policy and, where relevant, the Cookie Policy and consent interface will be updated before the new processing is activated.
9. International transfers
Some TRANSCAN-4 partners or technology providers may process personal data outside the European Economic Area. Where an international transfer is subject to Chapter V GDPR, TRANSCAN-4 will rely on an applicable adequacy decision, appropriate safeguards such as the European Commission's Standard Contractual Clauses, or another lawful transfer mechanism available under the GDPR.
10. Retention
Personal data is retained only for as long as necessary for the purpose for which it was collected and for any applicable legal, contractual, grant, audit, security or accountability requirements.
11. Security
Appropriate technical and organisational measures are used to protect personal data against unauthorised access, alteration, disclosure or loss. These measures include, as appropriate, access controls, encrypted communications, restricted administrative access, security logging, backups and procedures for responding to security incidents.
12. Your rights
Subject to the conditions established by the GDPR, you may have the right to request access to, rectification or erasure of your personal data, restriction of processing, data portability, or to object to certain processing.
Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
To exercise your rights or ask a privacy-related question, contact coordination@transcan.eu. We may request information reasonably necessary to verify your identity.
13. Complaints
If you consider that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the competent supervisory authority. In Spain, the supervisory authority is the Agencia Española de Protección de Datos (AEPD).
Agencia Española de Protección de Datos
14. Changes to this policy
This policy may be updated to reflect changes in the website, TRANSCAN-4 activities, service providers or applicable law. The latest version will always be published on this page together with its revision date.
15. Third-party websites
The TRANSCAN website contains links to external websites operated by third parties. TRANSCAN does not control the privacy practices of those websites. Please consult their privacy notices before providing personal data to them.
16. Contact
For questions concerning this Privacy Policy or the processing of personal data in connection with the TRANSCAN website, contact coordination@transcan.eu.