Personal Data Notice

Notification regarding Personally Identifying Information for OJS RUB according to the European General Data Protection Regulation (GDPR)

These details pertain to data related processes specific to OJS journals hosted by the University Library of the Ruhr-Universität Bochum.
For further information on settings and processes provided by the hosting institution, also refer to the general data protection statement of the University Library or contact dsb@rub.de.


1. Name and contact details of responsible person(s)/institution(s)

Responsibility in terms of the GDPR and other national data protection laws of member states jointly rests with the following institutions as stated below.

Technological responsibility for the internet pages of OJS RUB
Universitätsbibliothek der Ruhr-Universität Bochum
Dr. Oliver Dohndorf
Building: UB 6/15
Universitätsstraße 150
44801 Bochum
Germany
Mail: publish-oa@rub.de

Please refer to each journal’s corresponding imprint to gain information about content and subscription responsibility:

Entangled Religions
ETHICS, ECONOMICS, LAW and POLITICS
FuH - Fremdsprachen und Hochschule
GA 2
HARM - Journal of Hostility, Aggression, Repression and Malice
IACR Transactions on Cryptographic Hardware and Embedded Systems
IACR Transactions on Symmetric Cryptology
The International Newsletter of Communist Studies
Journal for Language and Literature Learning and Didactics of German
Journal of Didactics of Philosophy
Mare Nostrum
METALLA
Moving the Social
PeriodIcon
Philosophy and the Mind Sciences
Zeitschrift für Katalanistik
Zeitschrift für Mittelmeerstudien
Zeitschrift für Sprachwissenschaft - Journal of the Linguistic Society of Germany
Book – Material – Text
Ethnographies of Objects in Science and Technology Studies
International Conference on Stone and Concrete Machining (ICSCM)
Kunstgeschichte und Zeitgenossenschaft


2. Access to contents of the journal websites & related personal data

2.1 Access without registration / log-in
With the exception of some contribution content, all content on the journal websites can be accessed without registration or login. No personal data pertaining to individuals or institutions visiting the website is generated or stored in this case.

Be aware, however, that OJS deposits cookies. You can prevent this by configuring your browser accordingly. Blocking cookies may mean that you may not be able to make use of all functionalities of the website. E.g., a session cookie is required, if you want to log in. For more information on this, please refer to the general data protection statement by the library (see link above).

A Guidebook regarding the GDPR and the OJS system, written by the PKP Project, is available here.

2.2 Access to subscription content (with registration / log-in)
Contributions that are subject to a moving wall can be accessed by subscription. Details for subscribing to a journal can be found on the respective journal’s website:

Subscribing to Moving the Social

2.2.1 Contractually required data, consequence of not providing data
Individuals or institutions wishing to obtain a subscription have to provide the minimum data required to enable the users partaking of the subscription to be recognized by the system, so they can access the content they subscribed to.
For individual subscriptions, this data consists of an e-mail address and a name.
For institutional subscriptions, this data consists of an e-mail address and name of a responsible member of the institution in question, as well as the domain or IP-range of the institution in question.
If this data is not provided, access to the subscription content cannot be enabled.

2.2.2 Recipient of data
The data required for the respective subscription is communicated between the subscriber and the responsible parties who create the required user account and maintain the subscription. Ruhr-Universität Bochum does not process this data.

If you are registered as a user of Moving the Social because you are a member of the Verein zur Förderung des Instituts für Soziale Bewegungen e.V. and have decided to make use of your free online acess, your user account data may be handled by the Managing Editor, if occasion for this arises.

2.2.3 Purpose of processing data & legal foundation
The purpose of processing the data mentioned above is the creation of a user account that enables a subscriber to access the contents they subscribed to. The legal basis for this processing is the subscription agreement between the subscriber in question and the person(s) or institution(s) responsible for subscription management of the respective journal. It is therefore grounded in consent (GDPR chapter II, art. 6, 1, a).

Data given for the purpose of providing subscriptions to any journal will not be passed on to other parties and will be used only for the purpose for which it was provided.

2.2.4 Data storage and duration
The data mentioned above is stored on servers of Ruhr-Universität Bochum, Germany, where the journal websites are hosted by the University Library.
After a subscription has expired or has been terminated by the subscriber, the user account needed for the subscription will be deleted, as soon as legal regulations allow.


3. Editorial workflow

Journals that use the editorial workflow of OJS:

Journal for Language and Literature Learning and Didactics of German
Journal of Didactics of Philosophy
Philosophy and the Mind Sciences
Zeitschrift für Sprachwissenschaft - Journal of the Linguistic Society of Germany

3.1 Contributor account metadata
Any journal using the editorial workflow will need to register contributor accounts as part of the publication process. These accounts will be created by the Managing Editor either for all contributors or for most contributors, with authors creating their own accounts on the respective journal’s website. Contributor roles can be author, reviewer, and editor.

3.1.1 Required data
Mandatory contributor information for self-registered accounts includes first name, affiliation, country, e-mail address, username, and a password (encrypted).
Mandatory contributor information for accounts registered by the Managing Editor includes first name, last name, e-mail-address, username, and a password (encrypted).

3.1.2 Recipient(s) of data
The data required for the respective account can be accessed and edited (with the exception of the username and dates) by the respective contributor, system administrators, and Managing Editors.

3.2 Workflow data1
OJS tracks workflow information, mostly as submission-specific editorial history. The following information may be tracked:

  • All actions taken on a submission, and by whom;
  • All notifications sent regarding a submission (including who sent and received the notification);
  • All reviewer recommendations;
  • All editorial decisions;
  • All files uploaded as part of the submission process, including files that may have personally identifying information in the form of file metadata or in the files themselves.

3.2.1 Recipient(s) of data
The data required for the editorial workflow is communicated between the contributors. Participants of the editorial workflow on OJS have access to different amounts of workflow data depending on their role. Managing Editors can access all submission data, section editors can access all submission data only for those submissions to which they have been assigned; authors have limited access to their own submissions and are only able to see the data they have supplied, or that editors have explicitly made available to them.

3.3 Purpose of processing data & legal basis
The purpose of processing the data mentioned above is the creation of a contributor account that enables the account holder to participate in the editorial workflow of the respective journal, as well as the general publication of articles in the journals of OJS RUB. The legal basis for this processing is the agreement to become a contributor by creating an account, agreeing to have an account created for oneself, and/or taking part in the editorial workflow of any journal of OJS RUB. It is therefore grounded in consent (GDPR chapter II, art. 6, 1, a).
Data that was entered during the process of registering an account or given to the Managing Editor for the purpose of creating an account will not be passed on to other parties and will be used only for the purpose for which it was provided.

Please note that contributor account metadata is different from article metadata, some of which will be displayed publicly. Refer to section 5 for information on article metadata.

3.4 Data storage
The data mentioned above is stored on servers of Ruhr-Universität Bochum, Germany, where the journal websites are hosted by the University Library.


4. OJS-internal statistics

For the purpose of statistics, OJS includes a statistical tool that allows authorized personnel in the University to generate an overview of article download numbers over different time spans. Information on the number of downloads is not combined with information on downloading parties. The data in question is used purely numerically for internal statistical purposes and not analysed or processed in any way that touches upon the identity of persons or parties using the website.

Furthermore, we collect anonymous usage data, including IP addresses. In the process all data is anonymised. No personal information is logged. IP addresses are anonymised by being hashed. Therefore IP addresses cannot be reconstructed. The following information is collected next to the anonymised IP addresses:

  • Access type (i.e. administrative)
  • Request time
  • Requested URL
  • HTTP status code
  • Browser

The collected data is only used for evaluation purposes. No IP addresses are mapped to user IDs. We do not collect geographical data.


5. Metadata to articles and indexes

In the process of uploading articles for publication on the website of a journal, the Managing Editor will enter the e-mail address and current country of the author of the respective article into an upload form. This information is available to almost any participant of the article’s editorial workflow on OJS, excluding cases of blind peer review, but is not publicly visible, will not be disclosed and entering the address and country has purely technical reasons (compulsory field). If provided, the Managing Editor will also add information regarding the author’s affiliation to an institution or a place of work, which may also include the country, as well as their ORCID-ID to the upload form. The ORCID-ID and information regarding affiliation will be shown on the publication’s landing page. If an author does not wish to have their affiliation or ORCID-ID included in the metadata of their online article, they can inform the respective Managing Editor prior to publication.

Furthermore, some journals may require additional information of their authors as per the individual journal’s author guidelines, which can be found on the respective website.

If authors do not wish to include additional information, for example a biographical statement, that is not required by the system they can inform the Managing Editor of the respective journal.

Author Guidelines for Moving the Social


6. New issue alert

OJS automatically sends out a notification e-mail whenever a new issue has been published online. This message is sent to the address which is part of your user account. If you do not wish to receive this message, please use the link at the bottom of the message or contact the respective Managing Editor.


7. Contacting us by e-mail

If you write to any editorial e-mail address or contact the respective Managing Editor directly,your e-mail messages (e-mail address and further information you provide, including attachments) will be processed to respond to your query and will be stored on a server of Ruhr-Universität Bochum and archived there, as far as they pertain to the documentation of the peer review and editorial process that is required for the scholarly purposes and quality of the journal. This is granted by GDPR Recital 65.
Messages that are not required for these purposes of documentation will be stored for 5 years as Ruhr-Universität  Bochum retains documents of this kind for 5 years (required to fulfill its task, duration of storage according to regulation of Ruhr-Universität, legal grounds Art. 6, paragraph 1, letter e).


8. Information regarding rights

Be herewith informed that – as stipulated by the European General Data Protection Regulation (GDPR) – you are entitled to

  • receiving confirmation, whether data pertaining to your person is stored and processed by us
  • receiving information regarding the data stored and processed pertaining to your person from a responsible person or party (e.g. purpose of storage and processing, which data is stored and processed, origin of said data, recipient of said data, duration of storage),
  • access to said data
  • rectification of said data, 
  • erasure of said data, 
  • restriction of processing of said data, 
  • data portability
  • object to storage and processing of said data
  • not to be subject to automated decision-making including profiling

You also have the right to appeal to a supervising body in case of complaint (Landesbeauftragte für den Datenschutz NRW, http://ldi.nrw.de).

Consent to store and process the mentioned data for the purposes described above can be revoked by individuals or institutional representatives authorised to do so at any time and without statement of cause. This does not affect the legality of storing and processing said data prior to revocation of consent. If you wish to revoke your consent, please inform the Managing Editor of the journal in question in writing.
Be advised that – as far as the revocation of consent concerns data that is technically required to provide access to subscription content of some journals –  retracting your consent to store and process the data will result in ending your access to that content.

 

1The information in this part was taken (at times verbatim) from:
MacGregor, James: GDPR Guidebook for PKP Users, 2018 https://docs.pkp.sfu.ca/gdpr/en/, licensed under CC BY 4.0.