Privacy Policy
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Prof. Dr. Savas Bozbel
European Copyright & Digital Law Review (ECDLR)
Königstr. 72, 90402 Nuremberg
Germany
E-mail: editor@ecdlr.org
2. General information on data processing
The protection of personal data is important to us. Personal data are processed on this website only to the extent necessary for the secure operation of the website, communication with users, editorial activities and the publication of academic content.
Processing is carried out, in particular, on the basis of Article 6(1)(b), (f) and, where consent is obtained, (a) GDPR.
3. Hosting
This website is hosted by STRATO.
When the website is accessed, the hosting provider may process technical connection data, including:
IP address, date and time of access, page or file requested, amount of data transferred, browser type and version, operating system, referrer URL and technical status or error information.
These data are processed to ensure the secure technical provision of the website, system stability, error analysis and protection against misuse and attacks.
The legal basis is Article 6(1)(f) GDPR. The legitimate interest lies in the secure and reliable operation of the website.
Where STRATO processes personal data on our behalf, such processing is carried out in accordance with the applicable requirements for data processing on behalf of a controller.
4. Contact by e-mail
If you contact us by e-mail, the information you provide will be processed in order to handle your enquiry.
This applies in particular to messages sent to:
editor@ecdlr.org
contact@ecdlr.org
submissions@ecdlr.org
Depending on the subject matter, processing is based on Article 6(1)(b) GDPR where the communication relates to the initiation or performance of a contractual or publication relationship, or on Article 6(1)(f) GDPR on the basis of our legitimate interest in handling editorial and general enquiries.
The data will be deleted when they are no longer required for the purpose of the communication, unless statutory retention obligations or legitimate documentation interests require longer storage.
5. Submission of manuscripts
When an article or manuscript is submitted, the following personal data may in particular be processed:
name, academic title, institutional affiliation, e-mail address, ORCID, short biography, manuscript and publication data, and information provided in the course of editorial correspondence.
The processing serves the purpose of reviewing, editing and, where applicable, publishing the submitted contribution.
The legal basis is generally Article 6(1)(b) GDPR. Where additional processing takes place in the context of editorial activities, Article 6(1)(f) GDPR may also apply.
6. Author and contributor profiles
Publicly accessible profiles may be maintained for authors and other contributors to ECDLR.
These profiles may contain, in particular:
name, academic title, profile photo, short biography, institutional affiliation, ORCID and areas of research or professional expertise.
Publication takes place in connection with the academic and editorial activities of ECDLR.
Where publication is based on voluntarily provided information, Article 6(1)(a) GDPR may apply. Where the information forms part of a publication or author relationship, Article 6(1)(b) GDPR may apply.
7. DOI, ORCID and external academic services
ECDLR may display DOI and ORCID information in articles and author profiles.
When users click on such links, they are redirected to websites operated by external providers. From that point onwards, the privacy policies of the respective external provider apply.
The same applies to links to scholarly repositories, publication platforms and comparable external services.
8. PDF files and media files
Scholarly contributions may be made available as PDF files via this website.
When a file is accessed or downloaded, technically necessary server data may be processed in the same way as when the website itself is accessed.
9. WordPress
This website is based on WordPress.
WordPress uses technically necessary functions in the administrative area for login, session management and security.
Where user accounts are created, data such as username, e-mail address, profile information and technical login data may be processed.
The legal basis is Article 6(1)(f) GDPR. The legitimate interest lies in the secure administration and operation of the website.
10. Two-factor authentication
Two-factor authentication may be used for privileged user accounts, in particular administrator accounts.
Technical authentication information is processed in order to protect access to the WordPress administration area against unauthorised access.
The legal basis is Article 6(1)(f) GDPR. The legitimate interest lies in improving the security of the website and the data processed on it.
11. Multilingual functionality
The website is available in several languages.
For the purpose of providing the selected language version, technically necessary information may be stored in the browser or on the user’s device.
This processing serves solely to provide the language version selected by the user.
12. Cookies and similar technologies
According to the current configuration, ECDLR generally uses only cookies or similar technologies that are necessary for the technical operation, administration and security of the website, or for functions expressly requested by users.
Further information is available under “Cookie Settings”.
13. No web analytics or advertising profiling
According to the current configuration, ECDLR does not use advertising or user-tracking services such as Google Analytics or comparable marketing tracking systems.
No automated profiling of visitors for advertising purposes takes place.
14. Recipients of personal data
Personal data are made available only to service providers or other recipients to the extent necessary for the operation of the website, editorial activities, communication or compliance with legal obligations.
Personal data are not disclosed for advertising purposes.
15. Storage period
Personal data are stored only for as long as necessary for the respective processing purpose.
Statutory retention obligations and legitimate documentation or evidentiary interests remain unaffected.
16. Rights of data subjects
Subject to the statutory requirements, data subjects have in particular the right of access, rectification, erasure, restriction of processing, data portability and objection to certain forms of processing.
Where processing is based on consent, consent may be withdrawn at any time with effect for the future.
17. Right to lodge a complaint
Data subjects have the right to lodge a complaint with a competent data protection supervisory authority concerning the processing of their personal data.
18. Changes to this Privacy Policy
This Privacy Policy will be updated if the technical structure of the website, the services used or the applicable legal framework changes.
Last updated: August 2026