Privacy Policy

1. Introduction

Welcome to Nordic Open Research (NOR), operated by Nordic Open Research ApS (“we”, “our”, or “us”).
We are committed to protecting your personal data and respecting your privacy in accordance with the EU General Data Protection Regulation (GDPR).

This Privacy Policy explains how we collect, use, and protect information when you visit our website, submit manuscripts, subscribe to our newsletters, or interact with our publishing and marketing activities.

Our website: www.nordicopenresearch.com
Email: info@nordicopenresearch.com
Company address: Vesterbrogade 74, 1620 Copenhagen, Denmark 

2. Data We Collect

We may collect and process the following categories of personal data:

A. Directly from you

  • Name, email address, institutional affiliation, and ORCID ID (e.g., when submitting or reviewing articles).

  • Billing details for processing publication charges.

  • Contact information when you fill in forms, subscribe to updates, or communicate with us.

B. Automatically through website use

  • IP address, browser type, device information, and general usage statistics (via analytics tools).

  • Cookies and similar technologies (see our Cookie Policy for more details).

3. Purpose and Legal Basis

We process personal data only when we have a valid legal basis under GDPR:

  • Managing manuscript submissions, peer review, and publication (Performance of a contract (Art. 6(1)(b)))
  • Communicating with authors, reviewers, and editors (Legitimate interests (Art. 6(1)(f)))
  • Sending updates, newsletters, or promotional material (Consent (Art. 6(1)(a)))
  • Complying with legal, tax, or regulatory obligations (Legal obligation (Art. 6(1)(c)))

4. Data Sharing and Third Parties

We do not sell or rent personal data.

We may share limited information with:

  • Service providers (e.g., hosting, payment processing, analytics, email delivery).

  • Indexing and archiving services (e.g., CrossRef, DOAJ, Google Scholar, Scopus, etc) for legitimate academic dissemination.

  • Regulatory authorities if required by law.

All third parties are bound by data processing agreements and comply with GDPR requirements.

5. Data Retention

We retain personal data only for as long as necessary:

  • Editorial and publication data: retained permanently as part of the scholarly record.

  • Account and communication data: deleted within 24 months after inactivity or withdrawal of consent.

  • Financial data: retained for up to 5 years to comply with Danish accounting law.

6. Your Data Rights (GDPR Articles 12–23)

You have the following rights regarding your personal data:

  • Right to access – obtain a copy of your personal data

  • Right to rectification – correct inaccurate or incomplete data

  • Right to erasure – request deletion where legally applicable

  • Right to restrict processing – limit how we use your data

  • Right to data portability – request transfer of your data to another controller

  • Right to object – opt out of communications or data use based on legitimate interests

  • Right to withdraw consent – at any time for processing based on consent

To exercise your rights, contact us at: [Insert email address]

7. Data Transfers Outside the EU

If we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards such as:

  • Standard Contractual Clauses (SCCs)

  • Adequacy decisions by the European Commission

8. Security Measures

We implement technical and organizational measures to protect data against unauthorized access, alteration, or loss, including encryption, access control, and secure hosting environments.

9. Cookies

We use cookies to improve user experience and analyze website traffic.
You can manage your cookie preferences or disable them via your browser settings.

10. Updates to This Policy

We may update this Privacy Policy periodically. Any changes will be posted on this page with a revised “Effective date.”

11. Contact

For privacy-related inquiries or GDPR requests, please contact: info@nordicopenresearch.com

If you are not satisfied with our response, you may lodge a complaint with the Danish Data Protection Agency (Datatilsynet):
https://www.datatilsynet.dk/