Privacy Statement

Privacy and Personal Data Protection Statement

Resonancias Catequéticas – Academic Journal

1. Data Controller

The Centro Regional de Estudios Teológicos de Aragón (CRETA), as the publisher of the academic journal Resonancias Catequéticas, is responsible for processing personal data collected and managed through its Open Journal Systems (OJS) editorial platform, unless a different responsibility is expressly indicated for a particular processing activity.

Data Controller: Centro Regional de Estudios Teológicos de Aragón (CRETA).

Registered address: Ronda Hispanidad 10

Institutional website: https://www.cretateologia.es/

Journal website: https://resonanciascatequeticas.cretateologia.com/

Contact for data protection matters and the exercise of rights: administracion@cretateologia.es

2. Applicable Legislation

Personal data will be processed in accordance with applicable data protection legislation, taking into account, where relevant:

  • Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR).

  • Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights.

  • The General Decree of the Spanish Episcopal Conference on the Protection of Personal Data within the Catholic Church in Spain, dated 22 May 2018.

CRETA will implement appropriate technical and organisational measures to ensure the confidentiality, integrity, and security of personal data processed through the editorial platform, taking into account the nature of the information and the risks associated with its processing.

3. Categories of Personal Data Processed

Depending on their relationship with the journal, the following categories of personal data may be processed:

  • Registered readers: first name, surname, email address, and communication preferences.

  • Authors: identification and contact details, institutional affiliation, academic identifiers, biographical information, and data relating to submitted manuscripts.

  • Reviewers: identification and professional details, areas of expertise, editorial communications, and review reports.

  • Editorial team members: identification, professional, and contact details necessary for the performance of their duties.

  • Platform users: technical data and activity logs necessary for the operation, maintenance, and security of the system, insofar as such information is actually collected.

Only personal data that are adequate, relevant, and necessary for the stated purposes will be processed.

4. Purposes of Data Processing

Personal data will be used for the following purposes:

  • Managing user registration and accounts on the platform.

  • Receiving, processing, and evaluating manuscripts submitted to the journal.

  • Managing communications between authors, reviewers, and editorial staff.

  • Organising and documenting academic peer-review, editing, and publication processes.

  • Correctly identifying authorship, institutional affiliations, and other bibliographic information relating to published works.

  • Facilitating access to, dissemination, identification, and retrieval of scholarly content.

  • Communicating editorial news to individuals who have requested such communications.

  • Ensuring the operation, maintenance, and security of the editorial platform.

Personal data will not be used for purposes incompatible with those for which they were collected.

5. Legal Bases for Processing

Personal data will be processed on the legal bases applicable to each purpose, in accordance with relevant legislation.

Depending on the nature of the processing activity, these may include:

  • The consent of the data subject, where required.

  • The management of the editorial relationship established with authors, reviewers, and other contributors.

  • Compliance with applicable legal obligations.

  • Other appropriate legal bases for the legitimate operation of editorial activities.

The specific legal bases applicable to each processing purpose must be confirmed by the data protection service.

Where processing is based on consent, the data subject may withdraw that consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

6. Publication and Dissemination of Academic Data

The publication of scholarly articles involves the disclosure of certain academic and bibliographic data, such as authors' names, institutional affiliations, academic identifiers, and information necessary to identify and cite their work correctly.

These data may be published on the journal's website and disseminated through scholarly identification, discovery, and indexing services, including DOI systems, the OAI-PMH protocol, library catalogues, repositories, and academic databases.

Published bibliographic information may be collected and retained by external scholarly information services in accordance with their respective policies.

The dissemination of such data will comply with the journal's editorial policies and applicable data protection legislation.

7. Confidentiality of Editorial Processes

Unpublished manuscripts, peer-review reports, and communications relating to editorial processes will be treated with appropriate confidentiality.

Access to this information will be restricted to individuals who need to participate in editorial management, in accordance with their responsibilities and the journal's peer-review policies.

Reviewers' identifying information will not be made public as a result of their participation in confidential peer-review processes unless an appropriate legal basis exists and the applicable editorial policies are respected.

8. Data Recipients and Technology Service Providers

Personal data may be processed by technology service providers involved in the hosting, maintenance, technical support, and operation of the editorial platform, under the conditions established by applicable legislation.

Bibliographic data intended for public dissemination may also be shared with scholarly identification and dissemination services.

The identification of service providers, the conditions governing access to personal data, and any potential international data transfers must be verified with the data protection officer or responsible data protection service.

9. Data Retention

Personal data will be retained for as long as necessary to fulfil the purposes for which they were collected and to comply with applicable legal, academic, and editorial obligations.

Retention periods will take into account the need to preserve editorial records, ensure the traceability of peer-review processes, and maintain the integrity of the scholarly record.

The deletion of a user account will not necessarily entail the deletion of data that must be retained to comply with a legal obligation or on another applicable legal basis.

Specific retention periods and the criteria applicable to each category of data must be determined and validated by the responsible data protection service.

10. Rights of Data Subjects

Data subjects may exercise the rights available to them under applicable legislation, including, where relevant:

  • The right of access to their personal data.

  • The right to rectification of inaccurate data.

  • The right to erasure.

  • The right to object to processing.

  • The right to restriction of processing.

  • The right to data portability.

Data subjects may also withdraw their consent where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.

Contact and procedure for exercising these rights: administracion@cretateologia.es

Data subjects may lodge complaints with the competent supervisory authority in accordance with the applicable legal framework.

11. Information Security

CRETA will implement appropriate technical and organisational measures to protect personal data against loss, alteration, unauthorised access, improper disclosure, or any other form of unlawful processing.

Users must maintain the confidentiality of their login credentials and report any security incidents of which they become aware.

12. Updates to This Statement

CRETA may update this statement to reflect regulatory, technical, or organisational changes relating to the management of Resonancias Catequéticas.

Any amendments will be published on the journal's website.

Last updated: 18/10/2026