Privacy Statement

Privacy Statement

Scientific Journal of Nursing Research (SJNR) · Journal Information and Data Protection Policy

Scientific Journal of Nursing Research (SJNR) is a peer-reviewed, open-access scholarly journal published by the Department of Nursing, Poltekkes Kemenkes Pontianak, Indonesia.

SJNR is committed to respecting individual privacy, protecting personal information, maintaining the confidentiality of scholarly communications, and ensuring that personal data are processed responsibly, lawfully, fairly, and transparently throughout its academic publishing activities.

The journal may collect and process personal information for manuscript submission, editorial assessment, peer review, scholarly publication, research integrity procedures, digital preservation, and necessary journal communications.

SJNR recognizes that the responsible management of personal information is essential to maintaining the trust of authors, reviewers, editors, researchers, readers, and other individuals who interact with its publishing platform.

Particular attention is given to the protection of confidential manuscripts, reviewer identities, unpublished research data, and sensitive information relating to patients or research participants in nursing and healthcare studies.

This Privacy Statement is informed by internationally recognized principles of responsible scholarly publishing and the applicable provisions of Law of the Republic of Indonesia Number 27 of 2022 concerning Personal Data Protection (Undang-Undang Nomor 27 Tahun 2022 tentang Pelindungan Data Pribadi).

SJNR is committed to processing personal information only for specified, explicit, and legitimate purposes, using appropriate safeguards, and respecting the rights of individuals under applicable law.

Personal information collected for journal administration and scholarly publishing must not be sold, commercially exploited, or disclosed for unrelated marketing purposes.

This statement explains the categories of information processed by the journal, the purposes of processing, publication-related disclosures, confidentiality requirements, external services, security arrangements, data retention principles, and procedures for privacy enquiries.

On This Page

  1. Information Provided to the Journal

  2. Purposes of Use

  3. Information Published with Articles

  4. Confidentiality and Necessary Disclosure

  5. External Services and Website Technologies

  6. Security and Retention

  7. Privacy Requests and Contact


1. Information Provided to the Journal

Scientific Journal of Nursing Research may collect and process personal information provided directly by users or generated through legitimate interactions with its online publishing system.

The categories of information depend on the individual's role, including author, co-author, reviewer, editor, reader, or other authorized participant in journal activities.

1.1. Account Registration and User Profile Information

Information provided through journal registration and user profiles may include:

  • Full name and academic title, where applicable.

  • Username and registered email address.

  • Institutional affiliation and department.

  • Country and professional location.

  • Academic or professional qualifications.

  • ORCID identifier.

  • Research interests and areas of expertise.

  • Professional biography or academic profile.

  • Contact telephone number or correspondence details, when requested.

  • Assigned journal roles, including author, reviewer, or editor.

  • Account preferences and journal notification settings.

Users are expected to provide accurate and current information relevant to their participation in the journal.

Only information reasonably necessary for journal administration, scholarly communication, and publication management should be requested.

The journal should avoid collecting unnecessary personal identifiers, residential addresses, identity documents, or other information unrelated to legitimate publishing requirements.

1.2. Manuscript Submission and Authorship Information

When authors submit manuscripts, the journal may process information necessary to identify contributors, assess submissions, and manage the publication process.

Such information may include:

  • Author and co-author names.

  • Institutional affiliations.

  • Corresponding author information.

  • ORCID identifiers.

  • Authorship and contributorship statements.

  • Funding and sponsorship declarations.

  • Conflict of interest declarations.

  • Research ethics approval information.

  • Manuscript files and supplementary materials.

  • Editorial correspondence and revision histories.

  • Responses to reviewer comments.

  • Documentation relevant to research integrity or publication ethics.

The corresponding author is responsible for ensuring that co-authors are appropriately informed about the submission and the intended processing and publication of their professional information.

The journal may contact co-authors when necessary to verify authorship, investigate ethical concerns, or resolve publication-related questions.

1.3. Reviewer and Editorial Information

For peer reviewers and editorial personnel, SJNR may process professional information necessary to support qualified and independent scholarly assessment.

Such information may include:

  • Names and professional affiliations.

  • Email addresses and contact details.

  • Academic qualifications and subject expertise.

  • Reviewing interests and professional profiles.

  • Reviewer invitations, acceptance, and decline records.

  • Assigned manuscripts.

  • Confidential reviewer reports and recommendations.

  • Editorial assessments and decisions.

  • Conflict of interest declarations.

  • Relevant editorial correspondence.

Reviewer information and reports must be handled in accordance with the journal's double-blind peer review procedures.

Reviewer identities must not be disclosed to manuscript authors when such disclosure would compromise the journal's established anonymity arrangements, except where an applicable policy and lawful authorization specifically permit it.

1.4. Reader and Website Interaction Information

Individuals browsing the journal website may generate limited technical information necessary for website operation, security, and performance monitoring.

Depending on the website configuration, such information may include:

  • Internet Protocol (IP) address.

  • Browser type and version.

  • Device and operating system information.

  • Date and time of website access.

  • Requested pages and downloaded files.

  • Session identifiers.

  • Cookies or similar technical identifiers.

  • Referring websites or navigation information.

  • Technical error or security logs.

The precise information collected depends on the services and technical features enabled on the journal's publishing platform.

Where third-party analytics or embedded services are used, their data-processing activities must be assessed and described appropriately.

1.5. Financial and Administrative Information

If SJNR formally implements publication fees or other authorized paid services, limited information may be processed for legitimate financial administration.

Such information may include:

  • Billing names and institutional information.

  • Invoice or receipt details.

  • Payment references and transaction confirmations.

  • Records of applicable charges, payments, refunds, or waivers.

  • Correspondence concerning financial administration.

The journal must not request unnecessary banking credentials, account passwords, payment authentication codes, or unrelated financial documents.

Any financial information must be processed only through authorized administrative arrangements and according to applicable financial and data protection requirements.

1.6. Information Relating to Research Participants

SJNR publishes research in nursing and healthcare, including studies involving patients, healthcare professionals, students, families, and community members.

Submitted manuscripts may contain information concerning clinical characteristics, health outcomes, nursing interventions, and research participant experiences.

Authors are responsible for ensuring that participant information is collected, analyzed, reported, and submitted in accordance with applicable research ethics approval, consent requirements, privacy protections, and legal obligations.

Information relating to an identifiable individual's physical or mental health, medical treatment, genetic characteristics, or other sensitive conditions requires particular protection.

Authors must not submit identifiable patient records or unnecessary sensitive personal data as manuscript files or publicly accessible supplementary materials.

Where sensitive documentation is legitimately required for confidential editorial assessment, the journal must establish an appropriate secure and authorized method for handling it.


2. Purposes of Use

Scientific Journal of Nursing Research processes personal information for legitimate activities necessary to administer the journal, evaluate scholarly submissions, publish research, protect publication integrity, and maintain its online publishing system.

Personal information must not be processed for purposes incompatible with those for which it was obtained unless an appropriate lawful basis exists.

2.1. User Account Administration

Personal information may be used to:

  • Create and administer journal user accounts.

  • Verify account access and user roles.

  • Maintain accurate user profiles.

  • Manage account preferences.

  • Support authentication and authorized system access.

  • Respond to account-related enquiries.

User credentials must be protected through appropriate security controls.

Passwords and other authentication information must not be disclosed to unauthorized individuals.

2.2. Manuscript Submission and Editorial Management

Personal information may be processed to:

  • Receive and register manuscript submissions.

  • Verify compliance with submission requirements.

  • Communicate with corresponding authors and co-authors.

  • Assign manuscripts to authorized editors.

  • Coordinate peer review and revision procedures.

  • Record editorial recommendations and decisions.

  • Prepare accepted manuscripts for publication.

  • Maintain a reliable record of editorial processing.

Editorial records should be accessible only to personnel who require the information for their assigned responsibilities.

2.3. Peer Review Administration

Reviewer and author information may be used to:

  • Identify reviewers with relevant academic expertise.

  • Assess potential conflicts of interest.

  • Issue and manage review invitations.

  • Coordinate confidential peer review.

  • Communicate reviewer recommendations to authorized editors.

  • Maintain review histories and editorial accountability records.

The journal must preserve the confidentiality of reviewer identities and unpublished manuscript materials in accordance with its Peer Review Process.

2.4. Scholarly Publication and Dissemination

Information may be processed to prepare, publish, distribute, and maintain scholarly articles.

Such activities may include:

  • Verification of authorship and affiliation information.

  • Preparation of article metadata.

  • Assignment or registration of persistent identifiers.

  • Dissemination through indexing and discovery services.

  • Publication of funding and competing interest declarations.

  • Digital archiving and preservation.

  • Maintenance of the permanent scholarly record.

Information intended for publication must be clearly distinguished from confidential information collected exclusively for editorial administration.

2.5. Research Integrity and Publication Ethics

SJNR may process relevant personal information when necessary to:

  • Verify authorship or contributorship.

  • Assess competing interests.

  • Examine concerns about plagiarism or duplicate publication.

  • Investigate credible allegations of research misconduct.

  • Address complaints or editorial appeals.

  • Manage corrections, expressions of concern, and retractions.

  • Communicate with relevant institutions or research ethics bodies where appropriate.

Information processed for these purposes must be limited to what is reasonably necessary and handled confidentially.

An allegation of misconduct does not automatically justify unrestricted disclosure of an individual's personal information.

2.6. Financial Administration

Where applicable, personal information may be used for authorized invoicing, payment verification, financial records, refunds, and related administrative requirements.

Such processing must be proportionate and consistent with the journal's officially approved financial arrangements.

Financial information must not be used to improperly influence manuscript acceptance, reviewer recommendations, or editorial decisions.

2.7. Journal Communications and Notifications

The journal may communicate with users about:

  • Manuscript submissions and editorial decisions.

  • Peer review invitations and assignments.

  • Publication production and author proofs.

  • Corrections or other publication integrity matters.

  • Relevant updates to journal policies.

  • Journal issue announcements and notifications selected by users.

Optional promotional communication must be distinguished from communications necessary for an ongoing editorial or administrative relationship.

Users should be able to decline non-essential promotional communications without affecting their manuscript evaluation or access to published articles.

2.8. Lawful Grounds for Processing

Personal information must be processed on an appropriate legal basis under applicable data protection law.

Depending on the purpose and circumstances, processing may be justified by valid consent, contractual necessity, compliance with legal obligations, the performance of an authorized public or institutional function, legitimate interests recognized by applicable law, or another legally permitted basis.

The journal must not assume that all processing activities rely on consent alone.

Where consent is required, it must be obtained and managed in accordance with applicable legal requirements.

The institution responsible for determining the purposes and means of personal data processing must establish and document the appropriate legal basis for its processing activities.


3. Information Published with Articles

Scientific publication necessarily requires certain information to become publicly accessible as part of the scholarly record.

SJNR is committed to ensuring that publication-related disclosure is transparent, relevant, and limited to information appropriate for academic attribution and accountability.

3.1. Publicly Available Author Information

Published articles and associated metadata may include:

  • Author names.

  • Institutional affiliations.

  • ORCID identifiers, where provided and applicable.

  • Designated corresponding author email address.

  • Authorship and contributorship statements.

  • Funding and acknowledgment statements.

  • Relevant conflicts of interest.

  • Research ethics statements.

  • Article titles, abstracts, keywords, and bibliographic information.

Such information may be necessary for attribution, citation, research discovery, scholarly accountability, and publication integrity.

3.2. Author Review Before Publication

Authors should be given an appropriate opportunity to verify publication metadata before final publication.

Authors are responsible for checking the accuracy of:

  • Names and name order.

  • Institutional affiliations.

  • ORCID identifiers.

  • Correspondence information.

  • Funding statements.

  • Contributorship declarations.

  • Conflicts of interest.

Authors should inform the editorial office of any privacy or safety concern before publication.

Unnecessary private telephone numbers, residential addresses, identity document numbers, and other sensitive identifiers should not appear in published article metadata.

3.3. Public Dissemination and Indexing

Once published, article information may be disseminated to scholarly discovery and indexing systems, DOI registration services, academic databases, institutional repositories, and preservation services.

Public article metadata may consequently be searchable through external systems and retained beyond the journal's own website.

The journal should take reasonable steps to ensure the accuracy of information supplied to such services.

However, changes made to SJNR's website may not automatically remove or update copies already indexed, archived, or lawfully redistributed elsewhere.

3.4. Protection of Research Participant Information

Research involving human participants must protect privacy, confidentiality, dignity, and applicable participant rights.

Authors must ensure that publication of clinical information complies with relevant ethical and legal requirements.

Particular care must be taken with:

  • Clinical case reports.

  • Patient photographs and diagnostic images.

  • Medical histories and clinical records.

  • Rare diseases or unusual patient characteristics.

  • Small participant groups that may permit re-identification.

  • Genetic or biometric information.

  • Information relating to children or vulnerable populations.

Removing a participant's name does not necessarily make information anonymous when other identifying characteristics remain.

Where an individual could reasonably be identified, publication must be supported by an appropriate lawful and ethical basis, including valid publication consent where required.

3.5. Confidential Editorial Records

Publication of an article does not make the journal's entire editorial record public.

The following information remains confidential unless legitimate authorization or applicable obligations require disclosure:

  • User account passwords and authentication information.

  • Unpublished manuscript versions.

  • Confidential reviewer identities.

  • Private reviewer reports.

  • Internal editorial deliberations.

  • Unpublished research data.

  • Confidential complaints and investigation records.

  • Non-public author correspondence.

  • Restricted financial and administrative information.

Access to such records must be controlled according to assigned responsibilities.

3.6. Corrections and the Permanent Scholarly Record

SJNR recognizes that published articles and essential bibliographic information form part of the permanent scholarly record.

Requests to modify published author information must be evaluated in light of factual accuracy, privacy, authorship integrity, and applicable law.

Where a substantive correction is warranted, it should be made transparently in accordance with the journal's Correction and Retraction Policy.

Closing a journal account does not automatically remove an individual's name from articles they have legitimately authored or from records that must be retained for scholarly accountability.


4. Confidentiality and Necessary Disclosure

Scientific Journal of Nursing Research is committed to maintaining the confidentiality of non-public personal information, unpublished manuscripts, editorial correspondence, and research-related materials.

Access must be restricted to individuals who are appropriately authorized and have a legitimate need to process the information.

4.1. Access Control and Confidentiality

Access to personal information and editorial records should be based on assigned journal responsibilities.

Authorized personnel may include:

  • Editors and editorial administrators.

  • Assigned peer reviewers.

  • Authorized journal production personnel.

  • Technical administrators responsible for system security.

  • Institutional personnel with legitimate administrative or compliance responsibilities.

Access must be limited to the information necessary for each role.

Administrative or technical access does not provide unrestricted authority to disclose confidential manuscripts, reviewer identities, or personal information.

4.2. Confidentiality in Double-Blind Peer Review

SJNR implements a double-blind peer review system.

Authors and reviewers must respect the journal's established anonymity requirements.

Manuscript files provided to reviewers should not contain unnecessary identifying information that would compromise anonymous review.

Editors should take appropriate steps to prevent inadvertent disclosure of reviewer identities or confidential author information.

Reviewers must not:

  • Disclose unpublished manuscripts.

  • Share confidential review materials without authorization.

  • Use unpublished research findings for personal benefit.

  • Contact authors outside authorized editorial procedures.

  • Upload confidential manuscripts to unauthorized services.

If a reviewer discovers information that creates a conflict of interest, the reviewer must notify the handling editor.

4.3. Necessary Disclosure to Authorized Parties

Limited personal information may be disclosed where necessary for legitimate publishing activities.

Such disclosure may involve:

  • Authorized publishing service providers.

  • Hosting and technical maintenance providers.

  • Relevant DOI registration or indexing services.

  • Digital preservation services.

  • Institutional administrators responsible for compliance.

  • Research institutions or ethics committees addressing documented integrity concerns.

  • Competent authorities where disclosure is required by applicable law.

Any disclosure must be limited to information relevant to the legitimate purpose.

Where required, appropriate confidentiality, security, and data-processing arrangements must be established.

Personal information must not be sold or shared for unrelated commercial marketing purposes.

4.4. Research Ethics and Patient Confidentiality

As a nursing research journal, SJNR places particular importance on protecting identifiable health information.

Authors must not disclose confidential patient information without an appropriate legal and ethical basis.

Ethical approval, institutional permission, and informed consent should be documented where required by the relevant research design and applicable requirements.

Authors should use anonymization or appropriate de-identification techniques whenever feasible.

Confidential research participant information must not be disclosed to reviewers, editors, or external organizations beyond what is necessary for legitimate scientific assessment.

4.5. Supplementary Files and Research Data

Authors should ensure that supplementary files do not unintentionally disclose personal or sensitive information.

Data intended for public sharing must be appropriately prepared and assessed for re-identification risks.

Restrictions may be necessary for:

  • Individual patient records.

  • Detailed clinical datasets.

  • Identifiable interview transcripts.

  • Audio and video recordings.

  • Images containing identifying characteristics.

  • Genetic or biometric information.

  • Sensitive information involving minors.

Where data cannot be shared publicly, authors may provide a Data Availability Statement explaining relevant restrictions and, where appropriate, a lawful mechanism for controlled access.

4.6. Artificial Intelligence and Confidential Information

SJNR requires authors, editors, reviewers, and editorial personnel to comply with the journal's Artificial Intelligence Usage Policy.

Confidential manuscripts, unpublished data, reviewer reports, private editorial correspondence, identifying author information, and other restricted materials must not be entered into unauthorized artificial intelligence systems.

In particular, confidential content must not be uploaded to AI systems that may retain, reuse, disclose, or use the information for model training in violation of the journal's confidentiality requirements.

Any proposed use of an external AI-assisted service involving personal or confidential information must be assessed for authorization, data protection, confidentiality, and compliance with the journal's established policies.

Human responsibility for research integrity, editorial judgment, and personal data protection must be maintained.

4.7. Disclosure Required by Law

Where disclosure is required by applicable law or a valid direction from a competent authority, SJNR and its responsible institution will assess the request and provide information only to the extent legally required or permitted.

Appropriate measures should be taken to protect unrelated confidential information and the rights of affected individuals.


5. External Services and Website Technologies

Scientific Journal of Nursing Research operates through an online journal publishing platform and may rely on supporting technical services to provide access, authentication, communication, publication management, security, and website functionality.

Such services may involve limited processing of personal or technical information.

5.1. Open Journal Systems

SJNR uses Open Journal Systems (OJS) for journal administration and scholarly publishing.

The system supports activities such as:

  • User account registration.

  • Manuscript submissions.

  • Editorial assignments.

  • Peer review management.

  • Editorial correspondence.

  • Publication metadata management.

  • Journal issue administration.

  • Access to published articles.

Information submitted through OJS must be managed according to authorized user roles, applicable institutional responsibilities, and relevant data protection requirements.

5.2. Cookies and Session Information

The journal website may use cookies or similar technologies to support:

  • Login sessions and user authentication.

  • Navigation and website functionality.

  • User preferences.

  • System security.

  • Technical performance.

Some cookies may be necessary for the basic operation of the publishing platform.

Other cookies or tracking technologies, where used, should be evaluated according to their purposes and applicable consent or notice requirements.

Users may manage or block cookies through their browser settings.

Disabling essential cookies may affect login functionality, manuscript submission, or other website features.

5.3. Website Analytics and Visitor Statistics

SJNR may use website statistics and analytics services to understand website traffic, article access, and the technical performance of its publishing platform.

Depending on the service and configuration, such technologies may process IP addresses, device information, browser characteristics, referring pages, access timestamps, or cookies.

Where external analytics services are used, the journal should disclose their identities and relevant data-processing practices.

Analytics information should be used for legitimate website administration and scholarly communication purposes rather than unauthorized profiling or unrelated commercial marketing.

5.4. External Forms and Embedded Services

The website may contain links to or embedded content from external platforms, including:

  • Online forms.

  • Academic reference services.

  • ORCID or DOI services.

  • Research indexing platforms.

  • Document hosting services.

  • Visitor counters.

  • Other scholarly or technical resources.

External services may process information according to their own privacy policies and technical arrangements.

Users should review the relevant privacy information before submitting personal data to an external platform.

SJNR remains responsible for properly assessing the services it selects to process journal-related information on its behalf.

5.5. Hosting and Technical Service Providers

The journal's online operations may require hosting, system maintenance, email delivery, backup, or other technical support.

Where external service providers process personal information on behalf of the responsible institution, appropriate contractual, organizational, and technical safeguards should be established.

Providers must not independently use confidential editorial data for unrelated purposes without a valid legal basis and appropriate authorization.

5.6. Cross-Border Processing and Data Transfers

Some legitimate scholarly publishing services may operate outside Indonesia or process information through infrastructure located in another jurisdiction.

Any cross-border transfer of personal data must comply with applicable Indonesian personal data protection requirements and appropriate safeguards.

The responsible institution should assess the destination, receiving party, purpose, and legal conditions of a transfer before transferring personal information.

Where required, individuals should receive relevant information about the transfer and the applicable safeguards.

The journal must not assume that use of an internationally accessible platform automatically authorizes unrestricted transfer of confidential personal information.

5.7. Third-Party Privacy Responsibilities

Links to external websites do not necessarily mean that SJNR controls those websites or their independent data-processing activities.

However, when a third-party service is selected to perform journal operations or process information on behalf of the journal, appropriate due diligence and oversight remain necessary.

The journal should periodically review externally provided technologies and update its privacy information when material changes occur.


6. Security and Retention

Scientific Journal of Nursing Research recognizes that protecting personal information requires appropriate technical, organizational, and administrative safeguards.

Security arrangements should be proportionate to the nature of the information processed, the risks involved, and the responsibilities of the journal and its publishing institution.

6.1. Information Security Measures

The journal and responsible technical administrators should implement and maintain appropriate safeguards, which may include:

  • Role-based access restrictions.

  • Secure user authentication.

  • Appropriate password protection.

  • Encrypted connections and transmission where applicable.

  • System maintenance and security updates.

  • Protection against unauthorized access.

  • Secure data storage and backup procedures.

  • Monitoring of relevant security events.

  • Access management when editorial personnel change roles.

  • Procedures for responding to suspected security incidents.

The implementation of specific safeguards must be verified through actual system configuration and institutional procedures.

Security controls must be periodically reviewed and improved as technology and identified risks change.

6.2. Responsibilities of Users

Users are responsible for protecting their account credentials and avoiding unauthorized sharing of passwords.

Users should promptly notify the editorial office if they suspect:

  • Unauthorized account access.

  • Compromised credentials.

  • Unexpected changes to account information.

  • Exposure of confidential manuscript materials.

  • Improper disclosure of personal information.

Users should not send passwords, authentication codes, or unnecessary sensitive information through ordinary email correspondence.

6.3. Personal Data Retention

Personal information should be retained only for as long as necessary to fulfill legitimate publishing, administrative, legal, and research-integrity purposes.

The appropriate retention period may depend on the category of information and applicable obligations.

Examples include:

Information CategoryRetention Principle
Active user account information Retained as necessary to manage the account and related journal activities
Submitted manuscripts Retained according to editorial accountability and institutional records requirements
Peer review and editorial records Retained as necessary to document editorial decisions and address legitimate concerns
Published articles and essential metadata Normally preserved as part of the permanent scholarly record
Financial records, if applicable Retained according to relevant financial and institutional obligations
Website logs and technical records Retained for a documented period appropriate to security and operational needs
Promotional mailing information Retained only while a valid basis for the communication exists
Confidential research-integrity records Retained according to applicable investigation, legal, and institutional requirements

The institution responsible for data processing should establish documented retention periods and procedures appropriate to each category.

Information that is no longer needed should be securely deleted, anonymized, or otherwise handled according to applicable law and legitimate retention obligations.

6.4. Published Research and Permanent Records

Published scholarly articles and their essential bibliographic metadata are ordinarily retained as part of the permanent scientific record.

The journal recognizes that research integrity, citation accuracy, publication history, and academic accountability may require continued retention of certain information.

Account closure or the withdrawal of optional communications does not automatically require the removal of legitimate published authorship information.

Where published personal information presents a serious privacy concern, the journal will assess the request under applicable law and its established correction and content-removal procedures.

6.5. Security Incident Management

SJNR and its responsible institutional personnel should maintain procedures for identifying, documenting, investigating, containing, and responding to suspected personal data security incidents.

Such incidents may include:

  • Unauthorized access to user accounts.

  • Exposure of confidential manuscript files.

  • Unauthorized disclosure of reviewer identities.

  • Loss or compromise of personal information.

  • Accidental public release of restricted documents.

  • Compromise of identifiable patient information.

  • Unauthorized alteration or extraction of journal database records.

When an incident occurs, appropriate action should be taken to limit further exposure, assess the affected information, preserve relevant evidence, and implement corrective measures.

6.6. Personal Data Breach Notification

Where an incident constitutes a personal data protection failure subject to notification under Indonesian law, the responsible personal data controller must comply with the applicable notification requirements.

Under Article 46 of Law Number 27 of 2022, qualifying personal data protection failures require written notification to affected data subjects and the competent institution within the legally prescribed period of 3 × 24 hours.

The notification must include the information required by applicable law, including the personal data affected, the circumstances of the incident, and relevant response or recovery measures.

The journal's editorial office must coordinate promptly with the responsible institutional authority and technical personnel when a suspected incident is identified.

Users should not be asked to provide additional sensitive information through insecure channels when reporting a possible breach.

6.7. Secure Disposal and Account Closure

Where deletion or disposal is appropriate, personal information should be securely removed or anonymized using methods suited to its sensitivity and storage location.

The journal should distinguish between:

  • Information that may be deleted following a valid request.

  • Information required for ongoing editorial activities.

  • Information subject to legal or institutional retention obligations.

  • Information forming part of the permanent scholarly record.

Deletion must not be used to conceal publication misconduct, manipulate editorial histories, or compromise legitimate scholarly accountability.

6.8. Periodic Security and Privacy Review

The journal's responsible management should periodically evaluate its information-handling practices.

Reviews may include:

  • User access and permissions.

  • Security updates and system maintenance.

  • Data retention practices.

  • External service providers.

  • Website analytics technologies.

  • Confidential editorial records.

  • Backup and recovery arrangements.

  • Compliance with applicable privacy obligations.

Findings should inform appropriate corrective actions and improvements.


7. Privacy Requests and Contact

Scientific Journal of Nursing Research recognizes the importance of enabling individuals to exercise their applicable rights concerning personal information.

Users may contact the editorial office to request information about the handling of their personal data or to raise concerns regarding privacy and confidentiality.

7.1. Rights Concerning Personal Information

Subject to applicable Indonesian law and relevant legal limitations, individuals may have rights to:

  • Obtain information about the collection and use of their personal data.

  • Access personal information held about them.

  • Request correction or completion of inaccurate information.

  • Request deletion or termination of processing where legally applicable.

  • Withdraw consent where processing depends on consent.

  • Object to or restrict certain processing activities where applicable.

  • Request relevant information concerning disclosures or processing arrangements.

  • Exercise other rights provided under applicable personal data protection law.

The availability and scope of a particular right depend on the legal basis for processing, the nature of the information, and applicable statutory exceptions.

A request does not automatically override legitimate requirements for scientific attribution, editorial accountability, legal compliance, or preservation of the scholarly record.

7.2. Requests for Access or Correction

Users may request access to personal data concerning them or correction of inaccurate account information.

Requests should identify the information concerned and explain the requested action.

Where appropriate, the editorial office may ask the individual to verify their identity before disclosing or modifying personal information.

Identity verification must be proportionate and should not require unnecessary sensitive documentation.

7.3. Account Closure and Data Deletion

Users may request closure of their journal account or deletion of personal information that is no longer required for legitimate purposes.

The journal will assess such requests according to applicable privacy law, ongoing editorial responsibilities, retention obligations, and the integrity of published scholarly records.

Where full deletion cannot lawfully or appropriately be completed, the journal should explain the reason and consider whether restricted processing, anonymization, or another proportionate measure is available.

7.4. Communication Preferences

Users may request changes to optional journal notification or promotional communication preferences.

Requests to discontinue non-essential promotional communications should be honored promptly.

Declining optional communications will not adversely affect the scientific assessment of an active manuscript.

Essential correspondence related to ongoing submissions, reviewer assignments, publication production, and research-integrity matters may continue where necessary and lawfully justified.

7.5. Reporting Privacy Concerns

Individuals should promptly report suspected unauthorized disclosure, misuse, or exposure of personal information.

A report should, where possible, identify:

  • The affected account, article, manuscript, or communication.

  • The nature of the suspected issue.

  • The date or approximate period of the incident.

  • The information believed to be affected.

  • Any relevant supporting details.

Reports must not include unnecessary passwords, patient identifiers, or confidential clinical documents.

The journal may request further information through an appropriate secure procedure when necessary.

7.6. Handling Privacy Requests

Privacy-related requests will be evaluated by the responsible editorial or institutional personnel according to their assigned authority.

Where appropriate, requests may be referred to the institution's authorized data protection, information technology, or administrative personnel.

Responses must comply with applicable legal requirements and relevant response periods.

If a request cannot be fully fulfilled, the responsible personnel should explain the grounds for the decision and any available alternative measures.

The journal must handle privacy complaints fairly, professionally, and without inappropriate retaliation.

7.7. Editorial Office

For privacy enquiries, requests concerning personal information, or reports of suspected confidentiality breaches, please contact:

Scientific Journal of Nursing Research (SJNR)

Department of Nursing
Poltekkes Kemenkes Pontianak
Jl. 28 Oktober, Siantan Hulu, Pontianak Utara
Pontianak, West Kalimantan 78124, Indonesia

Principal Contact: Alvi Roelanda
Email: ejournalpoltekkespnt@gmail.com
Telephone: +62 831-8866-5170

Support Contact: Erni Juniartati
Email: ernijuniartati@gmail.com

Official Contact Page:
https://ejournal.poltekkes-pontianak.ac.id/index.php/SJNR/about/contact

Journal Website:
https://ejournal.poltekkes-pontianak.ac.id/index.php/SJNR/index

7.8. Policy Review and Updates

SJNR will periodically review this Privacy Statement to reflect relevant changes in:

  • Journal administration and editorial procedures.

  • Personal data protection laws and institutional requirements.

  • Online publishing technologies.

  • External service providers.

  • Website analytics and communication systems.

  • Information security practices.

  • Research ethics and scholarly publishing standards.

Material changes should be communicated through the journal's official website and, where appropriate or legally required, directly to affected users.

Any revised policy must accurately describe the journal's actual data-processing practices and must not retrospectively justify previously unauthorized uses of personal information.

The journal is committed to continuously improving its privacy safeguards and maintaining the trust of the academic, scientific, and healthcare communities.

Privacy protection is an essential component of research integrity, responsible scholarly communication, and ethical nursing research.


Scientific Journal of Nursing Research (SJNR)

Published by the Department of Nursing
Poltekkes Kemenkes Pontianak, Indonesia

P-ISSN: 2655-0024
E-ISSN: 2655-6731

Publication Model: Open Access
Peer Review: Double-Blind Peer Review

Data Protection Framework: Law of the Republic of Indonesia Number 27 of 2022 concerning Personal Data Protection

Official Website:
https://ejournal.poltekkes-pontianak.ac.id/index.php/SJNR/index