Privacy Statement

Last update: 02/05/2026

Pensar – Journal of Legal Sciences, a periodical of the University of Fortaleza (UNIFOR), processes the personal data of authors, reviewers, readers, and other users in compliance with the Brazilian General Data Protection Law (LGPD — Law No. 13.709/2018) and with the UNIFOR Privacy and Personal Data Protection Policy.

This statement describes, in specific terms, how the journal collects, uses, shares, and protects personal data within its editorial workflow.

1. Data collected

The journal collects the following personal data:

  • From authors: full name, institutional email, affiliation, ORCID iD, biographical statement, academic data (Lattes when applicable), self-declarations of gender and race/color (voluntary, used for statistical and diversity-monitoring purposes, processed in aggregated and anonymous form), declarations on conflicts of interest, open science, and use of Artificial Intelligence;
  • From reviewers: full name, email, affiliation, ORCID iD, areas of expertise, and review history;
  • From registered readers and users: name, email, and notification preferences;
  • From non-registered visitors: automatically collected browsing data (IP address, browser type, pages accessed, date and time of access) and session cookies necessary for the technical operation of the OJS system.

2. Purposes and legal bases

Personal data is processed exclusively for editorial and scientific purposes, based on the following legal grounds provided for in art. 7 of the LGPD:

  • Consent (art. 7, I): given at the time of registration and submission;
  • Performance of contract (art. 7, V): for the editorial processing and publication of accepted manuscripts;
  • Compliance with legal or regulatory obligation (art. 7, II): for academic record, indexing, and compliance with scientific integrity standards;
  • Legitimate interest (art. 7, IX): for digital preservation, indexing, and long-term scientific dissemination.

3. Data sharing

Personal data may be shared, exclusively for editorial and scientific purposes, with:

  • Ad hoc reviewers (during the peer review process);
  • Editors, editorial board, and the journal's technical team;
  • National and international indexing platforms and databases (DOAJ, Latindex, REDIB, ERIH PLUS, Diadorim, Oasisbr, Miguilim, EBSCO, Periódicos CAPES, Google Scholar, Crossref, ORCID, among others — full list in Indexers);
  • Digital preservation networks (PKP Preservation Network and Rede Cariniana/IBICT).

International transfer: some indexers and preservation networks are based abroad, which constitutes international transfer of personal data under art. 33 of the LGPD. UNIFOR and the journal adopt compliance measures for such transfers, requiring partner institutions to observe equivalent protection standards. More information at International Transfer of Personal Data — UNIFOR.

Data is not shared for commercial purposes.

4. Retention period

Personal data is retained for the period necessary to fulfill editorial purposes, maintain the academic-scientific record, and ensure long-term digital preservation. Due to scientific integrity requirements and perpetual editorial preservation (PKP PN/LOCKSS, Rede Cariniana), metadata associated with published articles is retained indefinitely, even if primary data may eventually be discarded once the purpose has been fulfilled.

5. Rights of data subjects

Under art. 18 of the LGPD, authors, reviewers, readers, and other data subjects may, at any time, exercise the following rights:

  • Confirmation of the existence of data processing;
  • Access to data;
  • Correction of incomplete, inaccurate, or outdated data;
  • Anonymization, blocking, or deletion of unnecessary, excessive data, or data processed in non-compliance with the LGPD;
  • Data portability;
  • Deletion of data processed with consent;
  • Information on entities with which data has been shared;
  • Information on the possibility of not granting consent and its consequences;
  • Withdrawal of consent.

The exercise of these rights can be carried out through the channel indicated in section 7 below.

6. Information security

The journal and UNIFOR adopt appropriate technical and organizational measures to ensure the security and confidentiality of personal data, including access control, authentication, encryption in transit (HTTPS), and backup procedures. In the event of a security incident involving personal data, communication should be made to incidentes@unifor.br, in accordance with UNIFOR's institutional procedure.

7. Data Protection Officer (DPO)

The processing of personal data within the journal is supervised by the UNIFOR Office of Integrity and Personal Data Protection (EIPD), the institutional body responsible for compliance with the LGPD.

Contact channel for data subjects: integridadelgpd@unifor.br

Through this channel, any data subject may request the exercise of the rights provided for in the LGPD, clarify questions about the processing of their data, or submit complaints.

8. Full institutional policy

This specific statement of Pensar is part of the UNIFOR Privacy and Personal Data Protection Policy, which generally governs the processing of personal data by the University.

Related documents