Effective Date: 2025-11-01
Last Updated: 2025-11-01
Positive Science SAS attaches great importance to the protection of your personal data and respect for your privacy. This Privacy Policy informs you transparently about how we collect, use, store and protect your personal data when you use our scientific publication platform. This policy complies with the General Data Protection Regulation (GDPR - EU Regulation 2016/679) and French Data Protection Act.
1. Data Controller
Company Name: Positive Science SAS (being established)
Legal Form: Simplified Joint Stock Company (SAS)
Registered Office: 91 Route des Romains, 67200 Strasbourg, France
Email: [email protected]
Legal Representative: Valentina TESLENKO
Data Protection Officer (DPO)
DPO Email: [email protected]
DPO Postal Address: DPO - Positive Science SAS, 91 Route des Romains, 67200 Strasbourg, France
2. Information We Collect
Detailed Data Collection Table
The following table provides a comprehensive overview of the types of data we collect, their purpose, and retention period:
| Data Category | Type of Data | Purpose of Collection | Retention Period |
|---|---|---|---|
| Account Information | First name, last name, patronymic, username, email, phone number, password (encrypted) | Account creation, authentication, communication | Duration of account + 1 year after deletion |
| Profile Information | Date of birth, address, biography, affiliation, profile photo, research interests | Profile personalization, researcher identification, networking | Duration of account + 1 year after deletion |
| Scientific Content | Article title, abstract, keywords, article files, ORCID ID, author affiliations | Publication management, peer review, scientific indexing | Permanent (scientific archiving) |
| Submission Data | Submission title, abstract, files, submission status, editorial decisions | Editorial process management, peer review tracking | 10 years after final decision |
| Review Data | Reviewer comments, decisions, review dates | Peer review process, quality control, editorial decisions | 10 years after publication/rejection |
| Payment Information | Payment amount, currency, transaction ID (Stripe), payment status, receipts | Payment processing, billing, financial records | 10 years (legal obligation) |
| Technical Data | IP address, browser type, device information, access logs, cookies | Service provision, security, analytics, user experience improvement | 13 months |
| Communication Data | Email correspondence, notifications, support tickets | User communication, customer support, service notifications | 3 years after last interaction |
| Document Signatures | Signed contracts, copyright agreements, electronic signature data | Legal compliance, copyright management, contract enforcement | 10 years (legal obligation) |
3. Legal Basis for Processing
In accordance with GDPR Article 6, we process your personal data based on the following legal grounds:
| Purpose | Legal Basis |
|---|---|
| Account management | Performance of contract (Art. 6(1)(b)) |
| Service provision | Performance of contract (Art. 6(1)(b)) |
| Peer review process | Performance of contract + Legitimate interest (Art. 6(1)(b)(f)) |
| Payment processing | Performance of contract + Legal obligation (Art. 6(1)(b)(c)) |
| Communication | Performance of contract + Legitimate interest (Art. 6(1)(b)(f)) |
| Service improvement | Legitimate interest (Art. 6(1)(f)) |
| Security and fraud prevention | Legitimate interest + Legal obligation (Art. 6(1)(c)(f)) |
| Marketing (newsletters) | Consent (Art. 6(1)(a)) - opt-in |
| Legal compliance | Legal obligation (Art. 6(1)(c)) |
4. How We Use Your Information
5. Information Sharing and Disclosure
We do not sell your personal information. We may share your information in the following limited circumstances:
6. International Data Transfers
Your data is primarily hosted and processed within the European Union.
Primary hosting: Hetzner Online GmbH (Germany, EU).
For service providers outside the EU, we ensure appropriate safeguards through:
7. Your Data Protection Rights (GDPR)
Under GDPR, you have the following rights regarding your personal data:
How to Exercise Your Rights
To exercise your rights, please contact us:
Email: [email protected] or [email protected]
Postal Address: DPO - Positive Science SAS, 91 Route des Romains, 67200 Strasbourg, France
Response time: 1 month (extendable by 2 months if complex). Exercise is free of charge unless requests are manifestly unfounded or excessive.
Right to Lodge a Complaint
If you believe your rights are not being respected, you can lodge a complaint with:
CNIL (French Data Protection Authority): 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France. Website: https://www.cnil.fr
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data:
Security Measures
Data Breach Notification: In case of a data breach likely to result in a risk to your rights and freedoms, we will notify the CNIL within 72 hours and inform affected individuals if there is a high risk.
9. Minors' Privacy
Our platform is intended for persons aged 18 and over. We do not knowingly collect data from minors.
If you are a parent/guardian and discover that your child has provided personal data to us, please contact us immediately for deletion.
For minors aged 15-18 in an educational context: parental consent is required.
10. Cookies Policy
We use cookies and similar tracking technologies in accordance with GDPR requirements.
Types of Cookies
Managing Your Cookie Preferences
You can manage cookies through: (1) Cookie banner on first visit, (2) 'Manage Cookies' link at bottom of pages, (3) Your account settings, (4) Your browser settings (Chrome, Firefox, Safari, Edge).
11. Automated Decision-Making and Profiling
We may create profiles to personalize content recommendations, suggest relevant articles/journals, and improve search functionality. Legal basis: Legitimate interest (improving user experience). You can object by contacting us.
We do NOT make any decisions producing significant legal effects based solely on automated processing.
All editorial decisions are ALWAYS made by humans.
12. Links to Other Websites
Our service may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.
13. Changes to This Privacy Policy
We reserve the right to modify this Policy at any time.
Notification of substantial changes: Email to active accounts, notification on the platform, publication of the new version. Changes take effect upon publication. The update date is indicated at the top of the document.
14. Contact Us
If you have any questions about this Privacy Policy, please contact us:
Email: [email protected] or [email protected]
Address: Strasbourg, France