This policy explains how the Academy of Sciences of National Security, as the owner of journalassn.eu, may collect, use, retain and protect personal data relating to people who visit the website, contact the editorial team or interact with the journal.

1. Scope

This policy applies to personal data processed through journalassn.eu and related electronic communications. Depending on the circumstances, it may concern website visitors, authors, reviewers, editorial board members, collaborators and other people who contact us.

2. Personal data we may process

Depending on how you use the website or communicate with the journal, we may process the following categories of data:

• identification and contact data, such as name, email address, institutional affiliation, professional position and other information provided voluntarily;
• editorial-process data, including information contained in manuscripts, declarations, correspondence, reviews, comments and documents submitted in connection with the editorial process;
• technical data normally generated when a website is accessed, such as IP address, browser type, operating system, date and time of access, requested pages and server-log information;
• other information that you voluntarily send to us by email or through other communication channels made available on the website.

3. Purposes of processing

Personal data may be processed for one or more of the following purposes:

• operating, maintaining and securing the website;
• responding to requests, questions and messages;
• managing the editorial process, including manuscript receipt, review, editing and publication;
• communicating with authors, reviewers and journal collaborators;
• complying with legal obligations and maintaining necessary records;
• protecting the legitimate rights, interests and security of the journal, website and users.

4. Legal bases

Under Regulation (EU) 2016/679 (GDPR), processing may be based, as applicable, on steps taken at the request of the data subject or performance of a contractual relationship, compliance with a legal obligation, the controller's legitimate interests, or the data subject's consent where consent is required.

5. Providing personal data

Providing certain information is voluntary. However, without the information needed for a particular purpose, we may be unable to respond to a request, process a manuscript or properly complete a stage of the editorial process.

6. Recipients of personal data

Personal data may be accessible, strictly on a need-to-know basis, to persons involved in administering the journal and website, technical, hosting or maintenance service providers, and public authorities where disclosure is required by law. During the editorial process, relevant information may be shared with editors and reviewers in accordance with the journal's rules and procedures.

We do not sell personal data and do not use it for commercial marketing without an appropriate legal basis.

7. International data transfers

If technical or editorial services involve processing outside the European Economic Area, we will seek to rely on safeguards provided by applicable law, such as adequacy decisions or standard contractual clauses, where relevant.

8. Data retention

We retain personal data only for as long as necessary for the purposes for which it was collected, for conducting and documenting the editorial process, for complying with legal obligations or for establishing, exercising or defending legal claims. Specific retention periods may vary according to the nature of the information and the context in which it was provided.

9. Data security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, disclosure or destruction. No electronic transmission or storage method can, however, guarantee absolute security.

10. Your rights

Subject to the conditions laid down by the GDPR, you may have the right to access, rectify or erase your data, restrict processing, object to processing, receive data portability and, where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights or ask a question about your personal data, please contact [email protected]. We may request additional information solely to verify the identity of the person making the request.

11. Right to lodge a complaint

If you believe that your personal data is being processed in breach of applicable data-protection law, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) or another competent supervisory authority, without prejudice to other available remedies.

12. Links to other websites

The website may contain links to external resources or websites. We do not control how third parties process personal data and recommend reviewing the privacy policies of those websites.

13. Cookies

Information about cookies and similar technologies is available in our Cookie Policy.

14. Changes to this policy

We may update this policy to reflect legal, technical or operational changes. The version published on this page is the version in force at the time it is consulted.

Last updated: 29 September 2026