Privacy Statement

Turistica – Italian Journal of Tourism (“Journal”, “we”, “us”) processes personal data in connection with the use of this website and the management of submissions, peer review, editorial decisions, and publication activities. Processing is carried out in accordance with Regulation (EU) 2016/679 (“GDPR”) and applicable Italian data protection legislation.

1. Data Controller

The Data Controller is: Turistica - Italian Journal of Tourism, Italy. Contact for privacy matters: editor@turistica.it.

2. Personal data we process

Depending on your role (Reader, Author, Reviewer, Editor) and your use of the website, we may process:

  • Account and contact data (e.g., name, email address, username, affiliation, country, ORCID iD if provided);
  • Submission and editorial-workflow data (e.g., manuscripts, metadata, author details, correspondence with the editorial office, review reports, recommendations, decision history);
  • Technical data (e.g., IP address, timestamps, pages/actions performed, browser/device information, security and application logs);
  • Any additional data you choose to include in communications or files uploaded to the Journal.

3. Purposes and legal bases

We process personal data for the following purposes:

  • To register and manage user accounts and enable access to the editorial platform (GDPR Art. 6(1)(b) and/or Art. 6(1)(f));
  • To manage submissions, peer review, editorial decisions, and publication, including communications with Authors, Reviewers, and Editors (GDPR Art. 6(1)(b) and/or Art. 6(1)(f));
  • To ensure platform security, prevent abuse, and maintain service integrity (GDPR Art. 6(1)(f));
  • To comply with legal obligations applicable to the Journal or the Controller (GDPR Art. 6(1)(c));
  • Only where applicable, to send non-essential communications (e.g., newsletters) (GDPR Art. 6(1)(a) – consent; you may withdraw consent at any time).

4. Recipients of personal data

Personal data are accessed only by persons authorised to manage the Journal workflow (e.g., Editors and editorial staff) and, where necessary, by Reviewers for the purpose of evaluating submissions.

We may use service providers (e.g., hosting, IT maintenance, email delivery) that process personal data on our behalf as “processors” under GDPR. A current list of categories of processors can be requested from the Controller.

We do not sell personal data. We disclose personal data to third parties only where required by law or necessary to provide the service as described above.

5. Publication and dissemination

If your submission is accepted, the article and its metadata will be made publicly available. Authors’ names, affiliations, and other publication metadata will be disseminated through the Journal website and may be harvested/indexed by scholarly discovery, indexing, and preservation services. Please avoid including unnecessary personal data (especially sensitive data) in manuscripts, supplementary files, or public metadata unless strictly required and lawfully shareable.

6. International transfers

Where service providers are located outside the European Economic Area, personal data may be transferred only with appropriate safeguards in accordance with GDPR (e.g., an adequacy decision or Standard Contractual Clauses).

7. Data retention

We retain personal data only for as long as necessary for the purposes described above.

  • Accounts: retained while the account remains active; you may request deletion, subject to retention needs for the editorial record and legal obligations.
  • Submissions and peer-review records: retained as part of the Journal’s editorial and integrity record (including for handling disputes, ethics issues, and audits) and may be archived for long-term preservation.
  • Published content: retained permanently as part of the scholarly record.
  • Technical logs: retained for a limited period in line with security and operational needs, unless required longer to investigate incidents.

8. Cookies and similar technologies

This website uses technical/session cookies necessary for core platform functions (e.g., login, session management, security). Where optional cookies or third-party services are enabled, we provide information and, where required, request your consent through the website interface.

9. Your rights

You may exercise the rights provided by GDPR (as applicable): access, rectification, erasure, restriction, portability, objection, and withdrawal of consent (where processing is based on consent). To exercise your rights, contact: editor@turistica.it.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) and/or seek judicial remedy.

10. Updates to this statement

We may update this Privacy Statement to reflect changes in our practices or legal requirements. The current version will always be available on this website.

Last updated: January 1, 2026