PRIVACY POLICY
I. General Provisions

1. This Privacy Policy applies to the personal data of users of the IPN Journals Platform available at https://czasopisma.ipn.gov.pl/, hereinafter referred to as the “Platform”.
2. The Controller of personal data is the President of the Institute of National Remembrance – Commission for the Prosecution of Crimes against the Polish Nation, with its registered office at ul. Janusza Kurtyki 1, 02-676 Warsaw, Poland, hereinafter referred to as the “Controller”.
3. Personal data shall be processed in accordance with the requirements of generally applicable laws, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC, hereinafter referred to as the “GDPR”.

II. Purposes, Scope and Duration of Personal Data Processing

1. The personal data of Platform users shall be processed to the extent and for the purposes necessary to ensure the proper functioning of electronic academic journals, in particular for the purposes of:

a. ensuring efficient communication during the editorial process;

b. editing and preparing content;

c. preparing internal reports and analyses, including statistics concerning visits to individual pages and readership of publications;

d. sending journal-related notifications and information, subject to the user’s consent;

e. processing any payments for access to publications;

f. informing readers about the authorship of texts published on the Platform;

g. indexing published texts and related data in databases, catalogues and services, in accordance with the journals’ publishing policies.

2. Users registered on the Platform may provide the Controller with the following data. An asterisk (*) indicates mandatory data:

• First name*
• Middle name
• Last name*
• Username*
• Gender
• Password stored in encrypted form*
• Email address*
• ORCID iD
• Website
• Country*
• Telephone number
• Fax number
• Affiliation
• Biographical statement
• Registration date
• Date of last login
• Location
• Research interests
• Function or role on the Platform

3. Where the sale of electronic versions of publications is made available through the Platform, persons wishing to use this service may provide the Controller with additional data concerning their selected payment method and bank account number.
4. The provision of personal data is:

a. voluntary where the user accesses open-access journal content deposited on the Platform;

b. necessary where the user wishes to participate in the electronic publishing process, including for the purposes of:

1. submitting texts for publication as an author;
2. performing tasks associated with the roles of editor, section editor, technical editor, reviewer, DTP specialist, indexer, proofreader, journal manager, subscription manager or marketing manager;
3. creating a reader account in order to receive information from the publisher and journal editorial teams about newly published issues and articles.
4. In accordance with Article 89 of the GDPR, the personal data of persons participating in the electronic editorial process, including authors, editors and reviewers, shall be processed for scientific research and statistical purposes throughout the period during which electronic versions of the journal are made available.

For the purposes of this Privacy Policy, scientific research purposes shall include the archiving of articles and metadata, making them available, indexing them and transferring them for indexing in academic databases, catalogues and services.

6. The personal data of prospective authors whose texts have not been accepted for publication may be deleted by the Controller two years after the editorial decision not to publish the text.
7. The personal data of users registered as readers may be deleted by the Controller at any time following the submission of a request by the user.

III. Users’ Rights

1. Every user registered on the Platform is entitled to exercise the rights set out in Articles 15–21 of the GDPR, subject to the conditions specified in those provisions:

a. the right of access to personal data;

b. the right to rectification of personal data;

c. the right to erasure, also known as the “right to be forgotten”;

d. the right to restriction of processing;

e. the right to data portability;

f. the right to object to processing.

2. Users have the right to edit their accounts and modify previously provided data, with the exception of their system username. Users may withdraw their consent to receiving information from the publisher and the editorial teams of journals hosted on the Platform at any time through the Platform’s user interface.
3. To exercise the rights specified in Section III.1, the user should submit a request to the Controller electronically by contacting the Data Protection Officer at:

inspektorochronydanych@ipn.gov.pl

IV. Rights of the Controller

1. The Controller reserves the right to continue processing users’ personal data after consent has been withdrawn, solely where this is necessary for the establishment, exercise or defence of legal claims before a court, or where the retention of such data is required under national law, European Union law or international law.
2. The Controller may disclose users’ personal data and other data held by the Controller to authorised entities where such disclosure is permitted or required under applicable law.
3. The Controller may use the services of other processors on the basis of written agreements and subject to the conditions specified in Article 28 of the GDPR.
4. Personal data may be disclosed or transferred to:

a. processors providing administration and technical support services for the Platform;

b. providers of analytics services, including Google Analytics, AddThis and PlumX Metrics;

c. providers and operators of indexing databases and catalogues;

d. entities or public authorities authorised to receive such data under applicable law.

V. Personal Data Security

The Platform uses SSL encryption technology (Secure Sockets Layer). Passwords entered by users are stored in encrypted form.

VI. Cookies

1. The Platform uses cookies to identify visitors’ web browsers. The information collected through cookies enables the Controller to obtain information about the frequency of visits to the Platform and to identify the sections and content of greatest interest to users.

The collected data allows the Controller to adapt the Platform more effectively to users’ needs, improve its operation and prepare statistical analyses.

Cookies cannot be used to infect a user’s device with viruses or other malicious software.