Privacy Statement

Privacy information for the Palladianist journal

INTBAU Italia APS, Italian tax code 91351090377, is the controller of personal data processed through this journal website. For privacy questions and requests concerning your personal data, write to intbauitalia@gmail.com.

Information still being verified: INTBAU Italia APS is checking the roles and locations of its technical suppliers, whether they transfer personal data outside the European Economic Area and, if so, which safeguards apply. It is completing the documented assessment of the legitimate interests described below and checking the retention of the shared mail-server logs. A separate data protection officer contact has not yet been confirmed; use the controller's address above for privacy requests. This notice will be updated as these facts are confirmed. You can request current information at intbauitalia@gmail.com before opening an account or sending a manuscript.

Reading the journal

When you visit this website, the web server records technical information such as the time of access, the requested page, your IP address and browser information. OJS also records usage events for journal content. Its raw usage files contain the requested URL, browser information and a daily salted hash derived from the IP address. The journal uses these data to keep the service secure and to understand technical readership. The controller has selected its legitimate interests in security and technical statistics as the legal basis under Article 6(1)(f) GDPR.

New web logs are rotated daily, with no more than ten rotated versions per log type. Raw OJS usage-statistics files are kept for up to 30 days on the server. Copies included in automatic backups remain until four weekly full-backup cycles have rotated. Existing backups are not retrospectively changed by this rule.

OJS sets the technical cookie OJSSID to maintain the session. Its observed configured lifetime is seven days. This cookie is used to provide the journal service; it is not an advertising cookie.

Accounts, submissions and editorial work

When you register or submit a manuscript, the journal processes the information you enter in the relevant forms, the submitted files and necessary editorial correspondence. This is needed to provide the account and editorial service you request, under Article 6(1)(b) GDPR. Required fields are identified in the forms; without them, the account cannot be created or the submission cannot be processed.

Only authorised editorial staff and reviewers assigned to a manuscript may access material needed for their role. The controller also keeps a record of editorial decisions to preserve the integrity and history of the journal. The controller has selected this legitimate interest as the legal basis under Article 6(1)(f) GDPR. Published articles and their public metadata are accessible to visitors.

Account data are retained until the account is closed and for 12 months afterwards. Rejected or withdrawn manuscripts, related correspondence, review reports and reviewer assignments are retained for five years from the final decision. Published articles and their public metadata remain in the public journal archive while the article is published. Related editorial decisions, review reports and reviewer assignments remain in restricted editorial records for the same period. The scientific director decides corrections and withdrawals. If a published article is later withdrawn, its private files and editorial records are retained for five years from the withdrawal decision; any public withdrawal notice is subject to the director's editorial decision. Copies in automatic backups follow four weekly full-backup cycles.

Necessary email messages concerning accounts and the editorial workflow are part of the requested journal service. Undelivered messages remain in the delivery queue for no more than five days. The journal's own queue-processing log is rotated daily and kept for at most ten rotated copies. The controller has approved a 30-day limit for technical delivery logs, but the effective retention of the mail server's shared log is still being verified. Copies included in automatic backups follow four weekly full-backup cycles. The newsletter is disabled; these service messages are not promotional email.

Who receives data

Data may be accessed, according to their role, by authorised journal staff and assigned reviewers. Technical service providers may process data to provide hosting, backups and email delivery on the controller's instructions. Published articles and public metadata are available to anyone who visits the journal.

Your rights

You may contact the controller to request access to your personal data and, where applicable, correction, deletion, restriction, objection or portability. You may lodge a complaint with the Garante per la protezione dei dati personali. These rights depend on the type and legal basis of the processing; deletion does not automatically require removal of a published scholarly record.