Intelligent BioMedical Analytics (IBA)
Freelance Scientific Services (Freiberufliche wissenschaftliche Dienstleistungen)
Email: info@iba-tech.com
Last updated: 18 September 2026
1. Introduction
This Privacy Policy describes how Intelligent BioMedical Analytics (“IBA”, “we”, “our”, or “us”) processes personal and scientific data in the context of molecular data interpretation, clinical analytics, pipeline development, and scientific consulting. As a Freelance Scientific Services provider (Freiberufler) operating in Germany, we comply with the European Union General Data Protection Regulation (GDPR) and all applicable German data protection laws. We prioritize scientific integrity, responsible data handling, and transparent communication.
2. Controller
The controller responsible for data processing under GDPR is:
Intelligent BioMedical Analytics (IBA)
Freelance Scientific Services (Freiberufliche wissenschaftliche Dienstleistungen)
Germany
Email: info@iba-tech.com
3. Scope of This Policy
This Privacy Policy applies to:
visitors of our website
clients and scientific partners
individuals who contact us
organizations providing datasets for analysis
all scientific data processed in the context of our services
It does not apply to third-party websites linked from our site.
4. Definitions
Personal Data
Any information relating to an identifiable individual.
Scientific Data
Molecular, clinical, biomedical, imaging, or analytical datasets provided for scientific interpretation.
Double-Anonymized Data
Data where direct identifiers are removed and indirect identifiers are transformed to prevent re-identification.
Client
Any organization or individual engaging IBA for scientific services.
Processing
Any operation performed on data, including collection, storage, organization, analysis, modification, transmission, retention, or deletion.
Additional Definitions for Collaboration Frameworks
IBA engages in multiple scientific collaboration frameworks, which may exist independently or in combination. Ownership, retention, and data-processing requirements depend on the specific agreements governing each project.
Consultancy Project
A project in which IBA provides scientific analysis, interpretation, consulting, or pipeline development as a service. The client generally retains ownership of raw data and derived results unless otherwise agreed in writing.
Collaborative Scientific Project
A joint scientific effort in which IBA and one or more partners contribute scientific, analytical, methodological, or intellectual input. Scientific outputs may be jointly owned, retained for reproducibility, and used for publications, grant applications, or further research.
Startup Collaboration
A collaborative project in which IBA and its partners co-develop scientific methods, models, technologies, or intellectual property. Scientific outputs may be retained and used for publications, grant applications, translational research, commercialization, regulatory activities, or future development efforts.
Grant-Funded Work
Scientific work conducted under grant conditions, consortium agreements, or funding-body requirements. Grant-funded work may overlap with Consultancy Projects, Collaborative Scientific Projects, or Startup Collaborations. Retention, ownership, publication, and deletion requirements may be subject to additional contractual or regulatory obligations.
Scientific Outputs
Any derived results, processed datasets, statistical models, gene sets, analytical reports, software, pipelines, algorithms, or jointly developed methods produced during consultancy or collaborative work.
5. Data We Process
5.1 Contact and Communication Data
When you contact us, we may process:
your name (if voluntarily provided)
your email address
your organization
the content of your message
This information is used solely for communication and project coordination.
5.2 Scientific and Analytical Data
IBA processes double-anonymized or pseudonymized datasets, including:
high-throughput molecular datasets (e.g., genomics, transcriptomics, proteomics, metabolomics)
clinical measurements
time-series data
multimodal biomedical datasets
derived analytical outputs
clinical images (e.g., radiology scans, digital pathology images, histopathology slides, or microscopy images of patient tissue), provided they are anonymized before transfer
We do not require or accept identifiable patient information, such as:
names
addresses
full birthdates (only derived age information, such as age at sample collection, age at diagnosis, or age groups, is accepted)
contact details
medical record numbers
facial photographs or any image revealing identity
Clinical images must be anonymized, meaning:
no facial features
no identifying labels or metadata
no hospital identifiers
no dates revealing identity
no visible characteristics enabling re-identification
Non-clinical images (e.g., diagrams, plots, illustrations, synthetic images, or equipment photographs) are not treated as clinical data. Clients must ensure all datasets, including clinical images, are anonymized before transfer.
6. Data Ownership
IBA recognizes multiple modes of scientific work: Consultancy Projects, Collaborative Scientific Projects, Startup Collaborations, and Grant-Funded Work. Ownership rules differ accordingly.
6.1 Consultancy Projects
Clients retain full ownership of all datasets, raw data, and derived analytical results.
IBA does not claim rights over client-provided raw data or results.
IBA retains ownership of its analytical methods, algorithms, internal workflows, and proprietary pipeline logic.
Derived results may be retained for documentation and reproducibility and may be deleted upon client request unless retention is required for contractual obligations, legal requirements, scientific reproducibility, or agreed project documentation.
6.2 Collaborative Scientific Projects
IBA may hold shared ownership of results, models, methods, processed datasets, or intellectual contributions.
Ownership follows collaboration agreements or scientific partnership terms.
Scientific outputs may be co-authored, co-developed, jointly retained, or jointly commercialized.
Collaboratively produced outputs cannot be deleted unilaterally during active joint work.
Jointly developed methods and models remain part of the shared intellectual contribution.
6.3 Startup Collaborations
IBA may retain or share ownership of jointly developed models, methods, processed datasets, or intellectual property.
Ownership follows startup collaboration terms, partnership agreements, or co-development contracts.
Scientific outputs may be used for publications, grant applications, translational research, commercialization, regulatory activities, or future development efforts.
Jointly produced outputs cannot be deleted unilaterally while the collaboration remains active.
Startup-mode outputs may be retained beyond standard retention periods for reproducibility, documentation, regulatory compliance, or shared intellectual property obligations.
6.4 Grant-Funded Work
Ownership follows grant conditions, consortium agreements, or funding-body requirements.
Data and outputs may require long-term retention for reproducibility, reporting, or compliance.
Jointly developed results may be co-authored, co-owned, or jointly commercialized.
6.5 Dual-Mode Structure
This ownership structure reflects IBA�s operational reality:
Consultancy mode: client-owned results, IBA-owned methods.
Collaboration, startup, and grant mode: shared scientific outputs and shared intellectual property.
7. Purpose of Processing
We process data exclusively for:
scientific analysis
molecular interpretation
clinical and translational insight
pipeline development
statistical modeling
scientific consulting
communication with clients
project documentation
We do not use scientific datasets for marketing, profiling, or automated decision-making.
8. Legal Basis (GDPR Articles 6 & 9)
Our processing is based on:
Art. 6(1)(b) — performance of a contract
Art. 6(1)(f) — legitimate scientific interest
Art. 9(2)(j) — processing for scientific research purposes
Art. 6(1)(a) — consent (for communication data)
9. Double-Anonymization and Patient Privacy
IBA follows strict scientific and ethical standards:
We work exclusively with double-anonymized patient identifiers.
We do not process direct identifiers.
We do not attempt re-identification.
We do not combine datasets in ways that could lead to re-identification.
This supports GDPR principles of:
data minimization
purpose limitation
privacy by design
10. Data Retention
10.1 Scientific Data
Default retention period: 2 years.
Early deletion may be requested at any time; however, deletion cannot be performed while the data remains necessary to complete a contracted analysis, scientific service, or active collaborative work.
Extended retention may be permitted upon request of the data owner and only when required for ongoing analysis, active collaboration, grant-funded work, startup activities, or other mutually agreed scientific purposes.
Data that fails agreed quality-control requirements may not proceed to analysis and may be deleted or returned in accordance with project agreements.
Scientific datasets may be stored on secure, access-restricted, encrypted third-party storage systems located in Germany or elsewhere in the European Union and operated by GDPR-compliant providers.
Datasets are permanently removed following the applicable retention period unless retention is required under collaborative, startup, or grant-funded project rules.
10.2 Communication Data
Retained only as long as necessary for project coordination and completion of the agreed scientific work.
Deletion may be requested at any time; however, deletion cannot be performed while the information remains necessary to complete the contracted analysis, scientific service, or active collaborative work.
Communication data may be stored on secure, GDPR-compliant third-party systems located in Germany or elsewhere in the European Union.
Deleted after project completion or when no longer required for communication, documentation, legal obligations, or contractual requirements.
10.3 Scientific Outputs and Collaborative Data
Derived results may include reports, statistical models, processed datasets, gene sets, software, analytical pipelines, algorithms, jointly developed methods, and other scientific outputs. Consultancy Mode
Scientific outputs may be retained longer than raw data for documentation and reproducibility.
Outputs may be deleted upon client request unless retention is required for contractual obligations, legal requirements, scientific reproducibility, or agreed project documentation.
Outputs are never shared without authorization.
Collaborative Scientific Projects, Startup Collaborations, and Grant-Funded Work
Collaboratively produced data, models, methods, and scientific outputs may be retained as part of the joint intellectual contribution.
Deletion cannot occur while collaborative work, startup activities, grant obligations, publications, reporting requirements, or other joint scientific tasks remain active.
Retention may extend beyond two years when required for reproducibility, scientific documentation, regulatory compliance, grant obligations, or shared ownership.
Jointly produced outputs are not deleted upon unilateral request unless agreed by all relevant collaboration partners.
Such outputs may be stored on secure, GDPR-compliant third-party storage systems located in Germany or elsewhere in the European Union.
Scientific outputs are never shared outside the collaboration framework without authorization.
11. Data Storage Location
Scientific data may be stored:
on secure, access-restricted systems
within Germany or elsewhere in the European Union
using encrypted storage environments
on GDPR-compliant third-party storage providers when required for scientific work, collaboration, startup activities, or grant-funded projects
IBA primarily stores scientific data within Germany or the European Union. Where scientific, technical, contractual, or regulatory requirements necessitate the use of infrastructure located outside the European Union, IBA will implement appropriate safeguards and comply with applicable GDPR requirements for international data transfers.
12. Data Security
We implement appropriate technical and organizational measures, including:
encrypted data transfer
encrypted storage environments
access-restricted analytical systems
protection against unauthorized third-party access
third-party service providers are engaged only under appropriate contractual safeguards
continuous security review and updates
13. Data Sharing
IBA does not sell, rent, or disclose data to advertisers, marketing platforms, or unauthorized third parties. Data may be processed by GDPR-compliant infrastructure, hosting, storage, backup, computing, or analytical service providers when required to support scientific work and subject to appropriate contractual, organizational, and technical safeguards. Data may be shared only when:
the client explicitly requests collaboration
a formal agreement is in place
sharing is necessary for scientific interpretation, project execution, or technical support
sharing is required under a collaboration agreement, startup partnership, consortium agreement, or grant-funded project
sharing is required by applicable law, regulatory requirements, or legal obligations
Where appropriate, data shared with authorized collaborators, infrastructure providers, or service providers will be limited to the minimum information necessary to fulfill the intended scientific, technical, contractual, or regulatory purpose. All authorized recipients of data are expected to maintain appropriate confidentiality, security, and data-protection standards consistent with applicable legal and contractual requirements.
14. International Data Transfers
IBA primarily stores and processes scientific data within Germany and the European Union. Where scientific, technical, contractual, regulatory, or collaborative requirements necessitate the transfer, storage, or processing of data outside the European Union, IBA will implement appropriate safeguards and comply with applicable GDPR requirements governing international data transfers. Such safeguards may include:
adequacy decisions issued by the European Commission
approved contractual protections
legally recognized data-transfer mechanisms
written agreements governing the transfer and processing of data
project-specific contractual or regulatory requirements
Where appropriate, affected clients, collaborators, or project partners will be informed of such arrangements. Any international transfer of scientific data will be limited to what is necessary for the intended scientific, technical, regulatory, or contractual purpose and will be subject to appropriate technical and organizational safeguards.
15. Data Breach Notification
In the unlikely event of a data breach:
IBA will notify affected clients without undue delay.
Affected clients will be informed in accordance with applicable GDPR requirements.
Relevant mitigation measures and corrective actions will be communicated transparently.
16. Rights of Data Subjects
You have the right to:
access your data
request correction
request deletion
restrict processing
object to processing
request data portability
withdraw consent at any time
lodge a complaint with a supervisory authority
To exercise these rights, contact: info@iba-tech.com
17. Website Data (Cookies & Analytics)
Our website may collect minimal technical data, including:
server logs
anonymized usage statistics
essential cookies required for functionality
We do not use:
advertising cookies
behavioral tracking
third-party marketing analytics
18. Children’s Privacy
IBA does not knowingly process identifiable personal data from minors. Any scientific datasets involving minors must be anonymized before transfer.
19. Changes to This Policy
We may update this Privacy Policy to reflect legal, scientific, operational, or regulatory changes. The latest version will always be available on our website.
20. Contact
For questions, data protection requests, or deletion instructions:
Intelligent BioMedical Analytics (IBA)
Freelance Scientific Services (Freiberufliche wissenschaftliche Dienstleistungen)
Email: info@iba-tech.com
