Privacy Policy

Information according to Article 13 & 14 GDPR

The Österreichische Galerie Belvedere processes personal data when you use this website and when you contact us personally, electronically, by telephone, or by post. This is done in accordance with the legal requirements of the Austrian Federal Act concerning the Protection of Personal Data (DSG) and the General Data Protection Regulation (GDPR), as amended from time to time. In the following section, you will learn what kind of data is collected when visiting this website or as part of further contact and how this data is being used.

We reserve the right to adapt this privacy policy to reflect any new technical developments or legal changes and, if necessary, to update it when new services or products become available.

Responsible Party

Österreichische Galerie Belvedere

Wissenschaftliche Anstalt öffentlichen Rechts (hereinafter referred to as “responsible party”, “we”, “us”)

Prinz Eugen-Strasse 27

1030 Vienna

Austria

Phone: +43 1 795 57-0

Email: info@belvedere.at

On any matter relating to privacy or the exercise of your rights, you may contact the privacy officer at datenschutz@belvedere.at.

Data Access

Each time you access our website, your browser automatically transmits, for technical reasons, the data listed below to the web server. The data is stored exclusively for statistical and technical purposes; for example, to evaluate the frequency of page visits or to detect malfunctions in server operations.

The following data is logged and evaluated:

- Request (file name of the requested file)

- Browser type and browser version

- Operating system used

- Referrer URL, i.e. the website that directed you to our website

- IP address

- Date and time of your visit

- The particular webpages visited within our website

We collect this data in accordance with our legitimate interest (see Article 6(1)(f) GDPR) and store the information in “server log files” on the website server. The server log files are stored for one day and are subsequently anonymized. If data must be stored to provide evidence, e.g., to clarify security breaches, it is excluded from deletion until the incident is conclusively resolved.

For the technical and organizational implementation of this website as well as the provision of the functionalities (CRM, notifications/subscription/newsletter, download statistics), we make use of the University of Heidelberg (Grabengasse 1, 69117 Heidelberg, Germany) as a data processing company. All contracted data processing companies are contractually obligated to treat your personal data confidentially and to process it only within the scope of the service provision in accordance with our instructions. Data processing is conducted exclusively within the EU or EEA.

Cookies

Cookies are set to ensure the presentation and functionality of this website. Cookies are small data files stored on your device. Cookies can be stored for a long period of time or only during a session.

We process technically necessary cookies based on our legitimate interest in the availability of the website and the functions offered. If cookies are collected for statistical or marketing purposes, we ask for your consent. You can revoke your consent at any time.

The following cookies are set:

Name	Storage Duration	Purpose	Domain
OJS-journals-3-2	For the duration of the browser session.	Technically necessary; allows linking your actions during a given session.	.journals.ub.uni-heidelberg.de

User Management

A content management system (CRM) is provided for the purpose of managing and reviewing submissions (peer review). Authors, reviewers, and editors receive a user account for this purpose. The responsible party or the data processor processes your master data, user name and password (encrypted), e-mail address, role, assigned articles, review result, log files in accordance with your consent (author) or on the basis of an agreement (reviewer, editor). If you have given your consent, you can revoke it at any time using the contact details provided. Deletions in CRM will be carried out within the scope of technical possibilities.

However, we reserve the right to archive data for submission and review indefinitely based on our legitimate interest in scientific quality assurance, adherence to strict scientific standards, and traceability of the review process and any decisions.

Download Statistics

The responsible party collects the number of downloads and the country of origin for statistical purposes. The assignment of the country of origin is based on the IP address that is automatically transmitted when the website is accessed, and a download request is made. This is based on our legitimate interest in measuring the success of published articles and aligning the promotion of our offering. The IP address is not saved for statistical purposes. The download statistics are only available in anonymized form.

Notifications / Subscription / Newsletter

If you give your consent, we will inform you by e-mail about new journals on this website. During this process, we capture your e-mail address, your name, title, and institution affiliation. Once you have signed up for notifications, we will send you a confirmation email with a link to confirm your subscription. You will receive the newsletter only once you have confirmed your registration. If no confirmation is received, the data will be deleted. You can withdraw your consent at any time using the contact details provided.

Submissions

By submitting your submission, you consent to the processing of your personal data (master data, ORCID-iD if applicable, contact data, submissions, peer review results, download statistics, communication history) for the purpose of collection, review and publication on the website https://journals.ub.uni-heidelberg.de/index.php/brj/. Your data will be transferred to third parties (reviewers, editors) for the purpose of the peer review process and to the Heidelberg University Library for archiving. You can revoke your consent at any time using the contact details provided. Information in print media already published cannot be deleted. Deletion on the website or other electronic media will be carried out within the scope of technical possibilities.

General Contact

If you contact us via the offered contact options (e.g., by contact form, telephone, e-mail, or social media), your information (name, contact data, communication history) will be processed for the purpose of processing and answering your inquiry. The processing is carried out for the fulfillment of (pre-)contractual obligations or on the basis of our legitimate interest in processing and answering inquiries from customers, interested parties, and partners. Your data will be stored for the duration of the handling and beyond that for a maximum of three years. The data will not be passed on to third parties without your consent.

Your Rights

Regarding the processing of your data, you have the right to: information, correction, deletion, restriction, data transferability, revocation, and objection. The right of revocation applies to data processing that is based on your consent. The right to object exists in the case of data processing that is based on the legitimate interests of the responsible party or a third party. If you believe that the processing of your data violates privacy laws or your privacy claims have otherwise been violated in any way, you may lodge a complaint with the regulatory authority. In Austria, this is the Austrian Data Protection Authority. If you would like to exercise any of the above rights, you can also contact us at any time at datenschutz@belvedere.at or by mail at: