Information on the Processing of Personal Data of Authors and Co-Authors Submitting an Article by Joint Controllers

In accordance with Articles 13, 14, and 26 of the GDPR1, we inform you that the SGH Warsaw School of Economics and the Foundation for the Promotion and Accreditation of Economic Education in Warsaw jointly process your personal data in connection with the publication of the e-Mentor journal. The Joint Controllers have concluded an agreement regulating their cooperation in the processing of personal data in accordance with the rules set out in the GDPR. In matters concerning the protection of your personal data, you may contact either of the Joint Controllers. We encourage you to read the information regarding the processing of your data by the Joint Controllers.

1. Joint-Controllers

The Joint Controllers of your data are:

• SGH Warsaw School of Economics, with its registered office at al. Niepodległości 162, 02-554 Warsaw (SGH), and
• Foundation for the Promotion and Accreditation of Economic Education, with its registered office at al. Niepodległości 162, 02-554 Warsaw (Foundation).

2. Contact Details

To obtain information about the processing of your personal data, please contact:

• for SGH: the designated Data Protection Officer via e-mail at iod@sgh.waw.pl.
• for the Foundation: via e-mail at biuro@fundacja.edu.pl

3. The purposes and legal basis of processing of personal data

Your personal data will be processed for the following purposes:

1. accepting the submitted article, conducting the editorial verification procedure, and organizing the scientific peer review process.
   The legal basis for processing your personal data is Article 6(1)(e) of the GDPR (performance of a task carried out in the public interest) in connection with the provisions of the Law on Higher Education and Science²;
2. archival purposes, consisting of documenting the publishing process.
   The legal basis for processing your personal data is Article 6(1)(c) of the GDPR (compliance with a legal obligation to which the Joint Controllers are subject) in connection with the provisions of the National Archival Resources and Archives Act³.

4. Source of personal data

If you did not submit the article personally, your personal data (in the scope of: name, surname, e-mail address, affiliation, ORCID number) were provided to the Joint Controllers by the submitting Author as part of the submission of a joint article for publication.

5. Voluntary Provision of Data

Providing your personal data is voluntary, but necessary to accept the article, include it in the peer review process, and potentially publish it.

6. The recipients or categories of recipients of the personal data

If the controller uses the services of other entities, personal data may be disclosed to them on the basis of contracts entrusting them with the processing of personal data, and these entities will be obliged to preserve the confidentiality of the processed data.
Your personal data will undergo a pseudonymization process (hiding/removing your data from the text file and metadata). The reviewers evaluating the article do not receive access to your personal data.

7. The period for which the personal data will be processed

If the article is accepted for publication, the data processing period will be specified in the license agreement.
If the article is rejected, your personal data will be stored for the period necessary to document the decision-making process, and then archived in accordance with the applicable Uniform File Classification System (Jednolity Rzeczowy Wykaz Akt).

8. The rights of data subject

You have the right to access, rectify your data, restrict the processing thereof or erase your data, in the cases provided for by law.
You also have right to object to processing on grounds relating to your particular situation.
Your data will not undergo profiling and no automated decision-making will be conducted based on these data.

9. The right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority, i.e. the President of the Office of Personal Data Protection, if you consider that the processing of your personal data infringes upon GDPR.

¹ Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), OJ L 119, 4.5.2016, p. 1, as amended.

² The Act of 20 July 2018 – Law on Higher Education and Science (Journal of Laws [Dz.U.] of 2024 item 1571 as amended).

³ The Act of 14 July 1983 on National Archival Resources and Archives (Journal of Laws [Dz.U.] of 2019 item 164 as amended).