Privacy Statement

Principles and Compliance

The Journal of Applied Education processes personal data in accordance with the General Data Protection Law (LGPD — Law No. 13,709/2018), adopting measures to ensure the confidentiality, integrity, and availability of information.

Data Collected and its Purposes 

The data requested for submission and registration (e.g., name, email, affiliation, degree, Lattes, ORCID, country, login/password) is collected exclusively for editorial purposes: submission management, editorial communication, review organization, indexing, and compliance with legal or administrative obligations.

Legal Basis

Processing is based, as applicable, on the data subject's consent (submission and use of the system) and the execution of activities necessary for the provision of the editorial service (legitimate interest and execution of the editorial contract).

Sharing and Third Parties

Data is accessible only to the editorial team, reviewers (to the extent necessary and with anonymization where applicable), providers of the OJS editorial platform, and future indexing/aggregation services when the article is published. It will not be shared with third parties for commercial purposes without express consent.

Retention and Deletion

Personal information will be retained for as long as necessary for editorial purposes, to comply with legal obligations, or until the data subject requests deletion. Requests for deletion or modification of data can be submitted to the journal's data protection officer (see contact information); when there is a legal obligation to retain data, the requester will be informed.

Data Subject Rights

Data subjects may exercise the rights provided for in the LGPD: access, correction, portability, deletion, revocation of consent, and objection to processing, by submitting a request by email. The journal is committed to responding to requests within the legal timeframe and clarifying procedures for exercising rights.

Security and Incidents

The journal adopts technical and administrative measures to protect data. In the event of a security incident involving personal data, the team will notify the affected parties and take mitigation measures in accordance with applicable legislation.