Privacy Statement

Privacy Statement

Ekonomski fokus – Scholarly Journal

1. General Information

Ekonomski fokus respects the privacy of authors, reviewers, editors, registered users, and visitors to the journal's website.

Personal data are processed for the purposes of managing editorial and peer review procedures, scholarly publishing, communication with users, and maintaining the security of the journal's information systems.

Personal data processing is governed by applicable data protection legislation, including Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR).

2. Data Controller

The data controller is:

Name: [Full legal name of the publisher or other actual data controller]
Address: [Official address]
Email: [Privacy contact email]

Contact details of the Data Protection Officer will be provided where such an officer has been appointed.

3. Categories of Personal Data

Depending on the user's role and interaction with the platform, the following categories of personal data may be processed:

  • full name;

  • email address and contact information;

  • institutional and academic affiliation;

  • ORCID identifier, where provided;

  • username and authentication-related information;

  • manuscript submission and authorship information;

  • editorial correspondence;

  • peer review reports and decisions;

  • technical information required for platform operation and security.

4. Purposes and Legal Bases of Processing

Personal data may be processed for:

  • user registration and account management;

  • manuscript submission, editing, peer review, and publication;

  • communication with authors, reviewers, and editors;

  • maintenance of bibliographic and scholarly records;

  • ensuring the security and reliability of the information system;

  • compliance with applicable legal obligations.

The legal basis depends on the specific processing activity and may include the performance of contractual obligations, legitimate interests, compliance with legal obligations, or consent where appropriate and required.

5. Access to and Recipients of Personal Data

Access to personal data is restricted to authorized individuals according to their editorial, administrative, or technical responsibilities.

Certain personal data may be processed by service providers necessary for the operation of the platform, including hosting and technical maintenance providers, subject to appropriate data protection safeguards.

Bibliographic information relating to published articles, including authors' names and institutional affiliations, may be made publicly available for scholarly identification, citation, and dissemination.

Reviewer identities and confidential manuscript information are protected in accordance with the journal's published peer review policy.

6. Data Retention

Personal data are retained for as long as necessary to fulfil the purposes of processing, comply with applicable obligations, and preserve the integrity of scholarly and editorial records.

Information associated with published articles may be retained over the long term to preserve reliable bibliographic records. Retention periods for other categories of personal data are determined according to their purpose and applicable requirements.

7. Data Subject Rights

Subject to applicable conditions under the GDPR, individuals may exercise the following rights:

  • the right of access;

  • the right to rectification;

  • the right to erasure, where applicable;

  • the right to restriction of processing;

  • the right to data portability, where applicable;

  • the right to object to processing;

  • the right to withdraw consent where processing is based on consent.

Requests may be submitted through the data controller's contact details provided above.

8. Cookies and Technical Data

The Open Journal Systems (OJS) platform may use cookies and technical mechanisms required for user authentication, session management, and proper operation of the website.

Any additional analytics or other non-essential technologies, where implemented, are subject to appropriate information and applicable cookie requirements.

9. Data Security

The data controller implements appropriate technical and organizational measures proportionate to the risks associated with personal data processing.

Access to editorial and administrative functions is restricted according to user roles and permissions.

10. International Data Transfers

Where personal data are transferred outside the European Economic Area, such transfers must be supported by an appropriate legal basis and safeguards under applicable data protection legislation.

Information about relevant international transfers and applicable safeguards will be provided where such transfers occur.

11. Right to Lodge a Complaint

Individuals have the right to lodge a complaint with a competent data protection supervisory authority.

In Croatia, the competent authority is the Croatian Personal Data Protection Agency (AZOP).

Website: https://azop.hr/

12. Changes to This Statement

This Privacy Statement may be updated to reflect changes in personal data processing activities, technical infrastructure, or applicable legal requirements.

Last updated: 16.10.2026.