Privacy Statement

PRIVACY STATEMENT — EUROPEAN DATA SCIENCE JOURNAL (EDSJ)

 

1. INTRODUCTION

 

The European Data Science Journal (EDSJ), published by ESA Research, is committed to protecting the personal data of all individuals who interact with the journal, including authors, reviewers, readers, and registered users. This Privacy Statement describes the data we collect, how it is used, the legal basis for processing, your rights as a data subject, and how to contact us regarding your data.

 

This statement is compliant with the European Union General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and applicable national data protection legislation.

 

2. DATA CONTROLLER

 

The data controller for personal data collected through the EDSJ website and submission system is:

 

European Data Science Journal (EDSJ)

ESA Research

[YOUR FULL ADDRESS]

Email: [YOUR-EDITORIAL-EMAIL]

 

3. WHAT PERSONAL DATA WE COLLECT

 

We collect the following categories of personal data:

 

REGISTERED USERS (AUTHORS AND REVIEWERS):

 Full name

—Email address

— Institutional affiliation

— Country of residence

— ORCID iD (if provided)

— Username and password (passwords are stored encrypted)

— Submission and review history

 

READERS / VISITORS:

— IP address and browser type (collected automatically via server logs)

— Pages visited and time of visit (collected via website analytics)

 

CORRESPONDENCE:

— Name and email address provided in direct communications with the editorial office

 

4. PURPOSE AND LEGAL BASIS FOR PROCESSING

 

We process personal data for the following purposes and on the following legal bases:

 

| Purpose | Legal Basis (GDPR Art. 6) |

|---|---|

| Processing manuscript submissions and managing peer review | Performance of a contract (Art. 6(1)(b)) |

| Sending issue notifications and editorial communications | Consent (Art. 6(1)(a)) |

| Registering DOIs with CrossRef and submitting records to indexing databases | Legitimate interests (Art. 6(1)(f)) |

| Complying with legal obligations (e.g., data retention, legal disputes) | Legal obligation (Art. 6(1)(c)) |

| Maintaining website security and preventing fraud | Legitimate interests (Art. 6(1)(f)) |

 

5. HOW WE USE YOUR DATA

 

Personal data is used exclusively for the operation of the journal and the purposes stated above. We do not sell, rent, or share personal data with third parties for commercial purposes. Data may be shared with:

 

— CrossRef (for DOI registration — author names and article metadata)

— Scopus, DOAJ, Google Scholar, and other indexing services (article-level bibliographic metadata only)

— PKP/OJS platform services (for technical operation of the journal system)

— Payment processors (if APCs are collected online — only payment-related data is shared)

 

6. DATA RETENTION

 

Personal data held in user accounts is retained for the duration of the account and for a period of seven (7) years thereafter, unless deletion is requested earlier. Anonymised analytics data may be retained indefinitely.

 

7. YOUR RIGHTS AS A DATA SUBJECT

 

Under GDPR, you have the following rights with respect to your personal data:

 

— RIGHT OF ACCESS: You may request a copy of the personal data we hold about you.

— RIGHT TO RECTIFICATION: You may request correction of inaccurate or incomplete data.

— RIGHT TO ERASURE ("RIGHT TO BE FORGOTTEN"): You may request deletion of your data, subject to applicable retention obligations.

— RIGHT TO RESTRICTION OF PROCESSING: You may request that we restrict the processing of your data in certain circumstances.

— RIGHT TO DATA PORTABILITY: You may request a copy of your data in a structured, machine-readable format.

— RIGHT TO OBJECT: You may object to the processing of your data where processing is based on legitimate interests.

— RIGHT TO WITHDRAW CONSENT: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

 

To exercise any of these rights, please submit a written request to [YOUR-EDITORIAL-EMAIL]. We will respond within 30 days. You also have the right to lodge a complaint with a supervisory authority; in the EU, this is your national data protection authority.

 

8. COOKIES

 

The EDSJ website uses cookies necessary for the technical operation of the OJS platform (session cookies for logged-in users). These cookies do not track personal browsing behaviour for advertising purposes. By using this website, you consent to the use of essential cookies as described.

 

9. SECURITY

 

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include encrypted password storage, access controls, and secure server hosting.

 

10. CHANGES TO THIS STATEMENT

 

This Privacy Statement may be updated periodically to reflect changes in our practices or applicable law. The date of the most recent revision is shown at the top of this statement. We encourage users to review this statement periodically.

 

11. CONTACT

 

For any questions or concerns regarding this Privacy Statement or your personal data, please contact: