Journal of Biomedical & Space Sciences
Personal data is used to support scholarly publishing—not unrelated purposes
The Journal of Biomedical & Space Sciences (JBSS) is committed to protecting the privacy, confidentiality, and personal data of authors, reviewers, editors, readers, and other users of the journal platform.
Privacy at a glance
Transparent processing throughout the publishing workflow
Framework
LGPD
Framework
GDPR
Platform
OJS / PKP
Public metadata
Clearly identified
JBSS does not sell personal information or use editorial data for unrelated commercial marketing.
Scope of this statement
How JBSS collects, uses, shares, retains, and protects personal data
This Privacy Statement applies to personal data processed through the JBSS website, Open Journal Systems platform, manuscript submission and peer-review workflow, editorial communications, publication activities, indexing, digital preservation, and related administrative operations.
JBSS seeks to process personal data in accordance with applicable data protection requirements, including the Brazilian General Data Protection Law and, where applicable, the European Union General Data Protection Regulation.
1. Responsibility for personal data
Journal publisher and privacy contact
Data controller
LIASTRA Institute
LIASTRA Institute, as publisher of JBSS, is responsible for decisions concerning the processing of personal data associated with the journal's editorial and publishing operations.
Service providers that process information only on behalf of the journal may act as data processors or operators, according to the applicable legal framework.
2. Categories of personal data
Information that may be processed by JBSS
The categories processed depend on the user's role and interaction with the journal.
Account and contact data
Name, username, email address, country, preferred language, account role, contact details, and authentication information such as a securely stored password hash.
Academic profile data
Institutional affiliation, department, country, biography, research interests, academic expertise, ORCID iD, and other identifiers voluntarily provided by the user.
Editorial workflow data
Submitted manuscripts, supplementary files, revisions, peer-review reports, editorial decisions, declarations, correspondence, internal notes, and records of actions performed in the platform.
Publication metadata
Author names, affiliations, ORCID iDs, article titles, abstracts, keywords, contributor roles, funding information, citations, license details, and persistent identifiers associated with published content.
Technical and usage data
IP address or derived technical identifier, browser and device information, date and time of access, requested pages, authentication events, cookies, error logs, and security records, according to the platform and server configuration.
Administrative and payment data
When applicable, JBSS may process payment confirmation, payer name, transaction reference, receipt, invoice, or tax-related information required for Article Processing Charge administration and accounting.
3. Purposes of processing
Why personal data is used
Scholarly publishing
Editorial and publication purposes
✓ Account registration and authentication
✓ Manuscript submission and editorial screening
✓ Reviewer selection and peer review
✓ Editorial communication and decision making
✓ Copyediting, production, and publication
✓ Corrections, retractions, and integrity procedures
Discovery and administration
Supporting the scholarly record and journal operation
✓ DOI registration and metadata deposit
✓ Indexing, abstracting, and scholarly discovery
✓ Digital preservation and long-term access
✓ Security, fraud prevention, and troubleshooting
✓ Usage statistics and service improvement
✓ APC administration, accounting, and legal compliance
4. Legal bases
Grounds that may support data processing
Depending on the activity and applicable law, JBSS may rely on one or more of the following legal grounds:
Requested services
Steps requested by authors, reviewers, editors, or registered users and performance of editorial and publication services.
Legitimate interests
Operating a scholarly journal, protecting platform security, maintaining research integrity, and communicating with participants.
Legal obligations
Compliance with applicable legal, tax, accounting, regulatory, and research-integrity requirements, including the exercise of legal rights.
Consent
Consent may be used where specifically required, including optional integrations, optional communications, or other activities for which consent is the appropriate legal basis.
5. Public and confidential information
Publication metadata and editorial confidentiality
Published authors
Some personal data becomes part of the public scholarly record
When an article is published, author names, affiliations, ORCID iDs, contributor roles, biographies when provided, and other publication metadata may be displayed publicly and distributed to DOI agencies, indexing services, libraries, repositories, and preservation systems.
An author's email address is not normally made public unless it is expressly provided for publication, identified as the corresponding author's contact, or otherwise required by journal policy.
Reviewers and editorial records
Peer-review information is handled confidentially
Reviewer identities, review reports, editor discussions, unpublished manuscripts, and internal editorial notes are restricted to authorized participants according to their roles and the journal's double-blind peer-review policy.
Confidential information may be disclosed only when justified by applicable law, a research-integrity investigation, an institutional inquiry, explicit consent, or another legitimate and documented need.
6. Data sharing and recipients
Limited sharing for legitimate publishing operations
JBSS does not sell personal data. Information may be shared only when necessary for a legitimate journal operation, when authorized by the user, or when required by law.
Persistent identifiers
DOI and identifier services
Publication metadata may be deposited with Crossref and, where authorized, connected identifier services such as ORCID.
Discoverability
Indexing and abstracting services
Published metadata may be supplied to indexing services, directories, academic search engines, libraries, repositories, and metadata aggregators.
Long-term access
Digital preservation services
Published content and metadata may be transmitted to preservation systems enabled by the journal, including the PKP Preservation Network or other approved preservation infrastructures.
Technical operations
Hosting and service providers
Limited information may be processed by hosting, email, security, technical support, backup, analytics, accounting, or payment providers used by the journal.
Ethics and law
Institutions and authorities
Information may be disclosed to institutions, funders, legal advisers, regulators, or public authorities when necessary for a lawful investigation, legal obligation, or protection of rights.
7. Cookies and technical logs
Technologies required for platform operation
Essential technologies
Session, authentication, language, and security functions
The journal platform may use essential cookies and technical logs to maintain user sessions, authenticate accounts, remember language or interface preferences, protect the platform, identify errors, prevent abuse, and compile legitimate usage statistics.
Non-essential technologies
Where non-essential analytics, embedded content, or third-party tracking technologies are enabled, JBSS should provide additional notice and obtain consent where required by applicable law. Users may also manage cookies through their browser settings.
8. Data retention
Information is retained according to purpose and scholarly-record needs
Published record
Published articles, metadata, DOI records, corrections, retractions, and related notices may be retained permanently to preserve the integrity and continuity of the scholarly record.
Editorial records
Submission, review, decision, correspondence, and integrity records may be retained for as long as reasonably necessary for accountability, audit, dispute resolution, and publication-ethics purposes.
User accounts
Account information is retained while the account is active and thereafter for the period reasonably required to support editorial records, legal obligations, or legitimate journal administration.
Technical records
Security, access, error, and usage logs are retained only for periods appropriate to security, troubleshooting, statistical, and legal requirements, according to the journal's technical configuration.
9. Rights of data subjects
Requests concerning personal data
Subject to applicable law and the circumstances of the processing, users may request:
Confirmation and access
Correction or updating
Anonymization or blocking
Deletion where applicable
Information about sharing
Data portability where applicable
Withdrawal of consent
Objection or restriction
To protect users, JBSS may request reasonable identity verification before responding to a privacy request. Requests will be evaluated and answered within the timeframes established by applicable law.
Some rights are not absolute. Deletion or modification may be limited where information must be retained to preserve the published scholarly record, DOI metadata, authorship attribution, peer-review accountability, legal obligations, or research-integrity documentation.
Human editorial oversight
No manuscript decision is made solely by automated processing
Software tools may support similarity screening, workflow management, metadata validation, and administrative checks. Acceptance, rejection, revision, and other substantive editorial decisions are made by editors and qualified human participants according to the journal's policies.
10. International data transfers
International scholarly publishing may involve providers in other countries
DOI registration, ORCID integration, indexing, preservation, hosting, email delivery, technical support, and other scholarly communication services may involve processing or storage outside the user's country.
Where an international transfer of personal data occurs, JBSS seeks to use appropriate contractual, organizational, or legal safeguards required by the applicable data protection framework.
11. Information security and OJS
Organizational and technical safeguards
Platform
Open Journal Systems
JBSS operates through Open Journal Systems, an open-source scholarly publishing platform developed by the Public Knowledge Project.
Learn about OJSSafeguards may include:
✓ Role-based access restrictions
✓ HTTPS-encrypted connections
✓ Secure account authentication
✓ Restricted server and file permissions
✓ Software maintenance and security updates
✓ Backup and recovery procedures
No online platform, transmission method, or storage system can be guaranteed to be completely secure. Users should protect their credentials, use strong passwords, and promptly report suspected unauthorized access.
12. Personal data in submitted research
Responsibilities concerning research participants
Authors must not include identifiable personal data about research participants in manuscripts, images, supplementary files, datasets, or correspondence unless the processing and disclosure are lawful, ethically approved, scientifically necessary, and supported by the required consent or other valid authorization.
Personal and sensitive research data should be anonymized, pseudonymized, minimized, or otherwise protected in accordance with the journal's research ethics, informed-consent, and data-sharing policies.
Applicable privacy frameworks
LGPD, GDPR, and supervisory authorities
Individuals may also have the right to submit a complaint to the Brazilian National Data Protection Authority or another competent supervisory authority, depending on their location and the law applicable to the processing.
13. Changes to this statement
Policy review and updates
JBSS may update this Privacy Statement when its editorial practices, platform configuration, service providers, legal obligations, or data processing activities change. Material changes will be published on this page with an updated revision date.
Last updated: 21 July 2026.