Privacy Policy for Authors and Reviewers
The Journal of Human Resource Management – HR Advances and Developments (JHRM) processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR). This document explains how we collect, process, and protect the personal data of our authors and reviewers.
- Data Controller The Data Controller responsible for the processing of your personal data is Comenius University Bratislava, Faculty of Management, Odbojárov 10, P.O.BOX 95, 820 18 Bratislava 218, Slovak Republic and Slovak Academic Association for Personnel Management (SAAPM), Ulica Vladimíra Clementisa 7547/13A, 917 01 Trnava, Slovensko. Contact email for the JHRM editorial board regarding data protection: jhrm@jhrm.eu
- Personal Data We Collect Depending on your relationship with the journal, we may collect and process:
- Name and surname;
- Institutional affiliation and professional position;
- Academic qualifications and areas of expertise;
- Email address and other professional contact details;
- ORCID and other research identifiers;
- Manuscript information and correspondence relating to submissions;
- Reviewer reports and editorial comments;
- Information contained in acknowledgements and funding declarations.
- Purposes and Legal Basis of Processing In the context of the academic publication process, we do not process your data based on consent, but rather on the following legal grounds:
- For Authors: The primary purpose of processing your personal data is the execution of the publishing process (submission handling, peer review, editing, publication, and indexing). The legal basis for this processing is Article 6(1)(b) of the GDPR (processing is necessary for the performance of a contract/publishing agreement). Providing this personal data is a mandatory condition for processing and publishing your submitted article. Refusal to provide this data will result in the inability to publish your work in JHRM.
- For Reviewers: The personal data of reviewers are processed for the purpose of ensuring the quality, integrity, and objectivity of the scientific publication process through peer review. The legal basis is Article 6(1)(f) of the GDPR (processing is necessary for the purposes of the legitimate interests pursued by the controller).
- Publication and Data Sharing (Recipients) When an article is published, certain personal data automatically becomes publicly available to readers and constitutes a permanent scholarly record. This includes author names, institutional affiliations, ORCID iDs, and contact emails (if required by the publication policy).
Other recipients of personal data (before or after publication) may include:
- Editors, editorial board members, and authorized university staff;
- Reviewers (within the double-blind peer review process, the authors’ identities are kept strictly confidential from reviewers, but the data is managed within the editorial system);
- Website hosting, IT, and security service providers;
- Abstracting, indexing, and scholarly-communication services (e.g., EBSCO, DOAJ, Scopus) to ensure the dissemination of the scientific work.
- Data Retention Periods
- Published Articles: Because academic publications constitute a permanent scholarly record, personal data associated with published articles (names, affiliations, identifiers) are retained indefinitely. This is required to preserve the integrity, authenticity, and citation history of the global scholarly record.
- Rejected Manuscripts and Editorial Correspondence: Editorial and peer-review records, including the personal data of authors of rejected manuscripts and reviewer reports, are retained for a period of 5 years after the conclusion of the specific editorial process. This retention is necessary to document editorial decisions, address potential complaints or academic disputes, and protect the integrity of the publication process.
- Your Rights Under the GDPR, you have the right to:
- Access your personal data;
- Request rectification of inaccurate or incomplete data;
- Request erasure of your data (Note: This right is strictly limited regarding published scientific articles, as their deletion would compromise the integrity of the permanent scholarly record under Art. 17(3)(d) of the GDPR);
- Request restriction of processing or object to processing (particularly regarding processing based on legitimate interest);
- Request data portability.
- Right to Lodge a Complaint If you conclude that the processing of your personal data constitutes an infringement of the GDPR, you have the right to lodge a complaint with the official supervisory authority: Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), Hraničná 12, 820 07 Bratislava 27, Slovak Republic, Website: https://dataprotection.gov.sk/.
- Data Security The journal and its service providers implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, loss, or destruction.
Last update: 2026
