1. Who are we?
1.1. The controller
The following information is shared with you so that you are aware of the commitments regarding the protection of personal data made by Plant Ecology and Evolution, an academic journal co-owned by Agentschap Plantentuin Meise and the Royal Botanical Society of Belgium (both organisations based in Belgium and governed by the Belgian law). Agentschap Plantentuin Meise acts as the controller for the processing of personal data referred to in this statement.
1.2. Our data protection officer
Agentschap Plantentuin Meise has designated a data protection officer who can be contacted via email: email@example.com
2. What personal data do we process?
In the context of processing personal data, Agentschap Plantentuin Meise collects and processes the following data:
- For authors: name, surname, institutional address, country, email address, IDs.
- For reviewers: name, surname, institutional address, country, email address, IDs.
3. What are the purposes and legal bases of our data processing?
3.1. The purposes of our data processing
We are processing data for the following purposes:
- The publication of the academic articles.
- The creation of a database for authors, reviewers, and visitors of the website.
- The execution of the peer review process.
- The production of statistics.
- The transmission of metadata to libraries.
- The transmission of data to online webpages and indexing databases (IngentaConnect, JSTOR, Web of Science, Google Scholar, etc.).
3.2. The legal bases of our data processing
We implement data processing only if at least one of the following conditions is met:
- You have given your consent to process the data.
- The existence of our legitimate interest, or that of a third party, which justifies that we implement this processing of personal data.
- The execution of a contract binding us to you requires that we implement this processing of personal data.
- We are subject to statutory and regulatory obligations that require this processing of personal data.
3.3. The legitimate interests pursued
The legitimate interests pursued by Agenstschap Plantentuin Meise may consist in particular of:
- The publication and dissemination of academic articles in open access.
- The execution of the peer review process.
4. Who are the recipients of your data?
The personal data we collect, and those we obtained subsequently, are intended for us in our capacity as controller.
We ensure that only authorised persons have access to this data. Our service providers can be recipients of this data to perform the services we entrust to them. Some personal data may be sent to third parties or to legally authorised authorities in order to meet our legal, regulatory, or contractual obligations.
They may be communicated to these entities for the purposes referred to in this privacy statement. These operations are carried out on the basis of instruments that comply with applicable regulations and are capable of ensuring that your rights are protected and respected.
5. Do we transfer your data?
We process and store your personal data in Belgium. We transfer your personal data to partners in the following countries:
- United States.
Each of these transfers is governed by legal instruments that comply with the applicable legal framework. The following countries [Canada and United States] benefit from an adequacy decision, which means that they offer your personal data a level of protection equivalent to the one which is applied on the European Union territory. Transfers made to other countries are covered by the following appropriate safeguards:
- Standard contractual clauses approved by the European Commission.
6. How long do we keep your data?
The periods for which we keep your personal data are proportionate to the purposes for which your data were collected. Our data storage policy is as follows:
- For data concerning authors: as long as the article is published.
- For data concerning reviewers: as long as necessary. In light of potential scientific fraud, the data might be saved for up to 25 years after the publication or rejection of an article.
7. What are your rights?
7.1. Your right of information
In addition to this information and with the aim of ensuring fair and transparent processing of your data, you further acknowledge that you have received additional information concerning the period for which your personal data will be kept.
If we decide to process data for purposes other than those indicated, all information relating to those new purposes will be communicated to you.
7.2. Your right of access to and rectification of your data
You have the right to access and rectify your personal data, which you can exercise by contacting our data protection officer via email: firstname.lastname@example.org
In this respect, you have the confirmation as to whether or not your personal data are being processed and where this is the case, access to your data and the following information:
- The purposes of the processing.
- The categories of personal data concerned.
- The recipients or categories of recipient, as well as the international organisations to whom the personal data have been or will be disclosed, in particular recipients in third countries.
- Where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period.
- The existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing.
- The right to lodge a complaint with a supervisory authority.
- Where the personal data are not collected from the data subjects, any available information as to their source.
- The existence of automated decision-making, including profiling, and in this case, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
You can ask us to, as the case may be, rectify or complete your personal data that are inaccurate, incomplete, equivocal, or expired.
7.3. Your right to erasure of your data
You can ask us to erase your personal data where one of the following grounds applies:
- The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
- You withdraw the consent you have previously given.
- You object to the processing of your personal data and there is no legal reason for such processing.
- The processing of personal data does not comply with the provisions of the applicable legislation and regulations.
- Your personal data have been collected in relation to the offer of information society services to children under 16 years of age.
Nevertheless, the exercise of this right will not be possible when the retention of your personal data is necessary for compliance with statutory or regulatory provisions and in particular for example for the establishment, exercise, or defence of legal claims.
7.4. Your right to restriction of data processing
You may request restriction of processing of your personal data in the cases provided for by law and regulation.
7.5. Your right to object to data processing
You have the right to object to the processing of your personal data even when the processing is based on the legitimate interest of the controller.
7.6. Your right to data portability
From 25 May 2018, you have the right to portability of your personal data.
The data on which this right can be exercised are:
- Only your personal data, which excludes anonymized personal data or data that does not concern you.
- Declarative personal data and personal data relating to our functioning, as mentioned above.
- Personal data which do not adversely affect the rights and freedoms of others such as those protected by trade secrets.
This right is limited to processing based on consent or contract as well as to personal data that you have personally generated.
This right does not include derived or inferred data, which are personal data created by Agenstschap Plantentuin Meise.
7.7. Your right to withdraw your consent
When the data processing we carry out is based on your consent, you may withdraw it at any time. We will then stop processing your personal data but this will have no impact on the previous transactions to which you have consented.
7.8. Your right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with the Belgian Data Protection Authority (www.dataprotectionauthority.be) on the Belgian territory without prejudice to any administrative or judicial remedy.
7.9. Your right to define post-mortem directives
You can give instructions in relation to the storage, erasure, and communication of your personal data to a certified trusted third party in charge of enforcing the wishes of the deceased in compliance with the applicable legal framework.
7.10. How to exercise your rights?
All the rights enumerated above can be exercised by sending a request, together with a copy of an ID document, to the data protection officer of Agentschap Plantentuin Meise via email: email@example.com.
Regarding the exercise of your right of information, we are not required to provide you with information where:
- You already possess the information.
- The recording or disclosure of your personal data is expressly laid down by law.
- The provision of information to you proves to be impossible.
- The provision of information to you would involve a disproportionate effort.