GMR_Logo

Privacy Statement

★

Privacy Statement

Last Updated: February 8, 2026

Goliterati Management Review (GMR) is committed to protecting the privacy of all users, including authors, reviewers, editors, and readers. This statement outlines how we collect, use, and safeguard personal information in accordance with applicable data protection regulations.

This journal and its services are intended for academic professionals and are not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors.

1

Data Collection & Usage

GMR collects personal information exclusively for the purposes of editorial management, peer review, and academic publication. This includes:

  • Names and email addresses
  • Institutional affiliations
  • ORCID iDs and other author identifiers
  • Submission and review history

This data is necessary to process manuscripts, communicate with authors and reviewers, and maintain the integrity of the scholarly record.

Peer Review Confidentiality: GMR employs double-blind peer review. Reviewer identities are kept strictly confidential and are not disclosed to authors or the public. Reviewer data (names, email addresses, review history) is accessible only to authorized editorial staff and is not shared with third parties.

Legal Basis for Processing

In accordance with GDPR (EU 2016/679) and Indonesian Personal Data Protection Law (UU PDP No. 27/2022), GMR processes personal data on the following legal bases:

  • Consent: Authors and users provide explicit consent during registration and manuscript submission (GDPR Art. 6(1)(a); UU PDP Art. 20(2)(a)).
  • Legitimate Interest: Maintaining the integrity of the scholarly record, managing peer review, and operating the journal (GDPR Art. 6(1)(f)).
  • Legal Obligation: Compliance with record-keeping, audit, and archiving requirements (GDPR Art. 6(1)(c)).

Consent is obtained through explicit checkboxes during user registration and manuscript submission on our OJS platform.

2

Third-Party Sharing

We do not sell, rent, or trade personal data. However, as an open-access scholarly journal, article metadata is shared with the following services:

Indexing Services

Google Scholar, Crossref, DOAJ, Dimensions, Semantic Scholar, BASE, and OpenAIRE.

Identifier Providers

Crossref for DOI registration and ORCID for author identification.

Digital Archives

LOCKSS, CLOCKSS, and PKP PN for long-term preservation of scholarly content.

Consent: By submitting a manuscript, authors consent to this standard academic dissemination of their work and associated metadata.

International Data Transfers: As part of academic dissemination, article metadata and limited personal data (e.g., author and editor names) may be transferred to indexing, archiving, and publishing services located outside Indonesia. These transfers are necessary for the legitimate purposes of scholarly communication. We ensure that adequate safeguards are in place in accordance with UU PDP Art. 56 and GDPR Art. 46.

3

Data Retention

In compliance with global standards and best practices, GMR retains data as follows:

User Accounts

Retained while active. Inactive accounts (more than 3 years without activity) may be anonymized upon request.

Submitted Manuscripts

Retained for 7 years after editorial decision for audit trails and verification purposes.

Published Articles: Author metadata associated with published articles is retained indefinitely as part of the permanent scholarly record.

4

Cookies & Analytics

This website uses essential cookies for user authentication and session management. We may use anonymous analytics tools to understand usage patterns and improve our services.

  • Essential Cookies: Required for login sessions and security.
  • Analytics: Anonymous usage data; no personally identifiable information is shared.
  • No Tracking: We do not use advertising or third-party tracking cookies.
5

Data Security

GMR implements robust technical and organizational measures to protect your data:

Encryption

All data transmission secured via HTTPS/TLS protocols.

Access Control

Data access restricted to authorized editorial and technical staff only.

Regular Backups

Secure, encrypted backups performed regularly to prevent data loss.

Breach Response

Affected users notified within 72 hours of any confirmed security breach.

6

User Rights

In accordance with GDPR, Indonesian data protection regulations (UU PDP No. 27/2022), and international best practices, you have the following rights:

  • Right to Access: Request a copy of your personal data held by GMR.
  • Right to Correction: Request correction of inaccurate or incomplete data.
  • Right to Deletion: Request account deletion (note: metadata in published articles cannot be removed from the scholarly record).
  • Right to Withdraw Consent: Opt out of non-essential communications at any time.

Response Time: We will respond to all data-related requests within 30 days.

Right to Lodge a Complaint: If you believe your data protection rights have been violated, you have the right to lodge a complaint with the relevant supervisory authority. In Indonesia, complaints may be directed to the Ministry of Communication and Digital (Kementerian Komunikasi dan Digital / Komdigi) or the designated supervisory body under UU PDP (once established). In the EU, complaints may be filed with your local Data Protection Authority.

7

Policy Updates

This Privacy Statement may be updated periodically to reflect changes in our practices or legal requirements. Users will be notified of significant changes via email or website announcement. Continued use of our services after such changes constitutes acceptance of the updated policy.

8

Contact for Privacy Inquiries

For questions, concerns, or requests related to your personal data, please contact us:

Data Controller

Literati Global Network
Perum Biinmafo, TTU, NTT, 85617 — Indonesia

Privacy Contact

support@goliterati.com

Editorial Office

editor@goliterati.com

Editor-in-Chief

Nurul Huda, S.E., M.M.
University of Timor, Indonesia