Privacy Policy
Explore how Sramana Publications protects your personal information and respects your privacy. This policy outlines what data we collect, how we use it, and the steps we take to keep your information secure and confidential—ensuring a transparent and trustworthy experience for all our authors and visitors.
Effective Date: June 30, 2025
Last Reviewed: June 30, 2025
Data Controller: Sramana Publications,
[H.No. 793, DDA FLAT, POCKET-1, DWARKA SECTOR-14, DELHI-110078]
Data Processor: Wix.com Ltd, 40 Nemal St., Tel‑Aviv, Israel
1. Legal Basis & Data Collection
-
User-submitted data (name, email, phone, manuscript files, author bio): processed under GDPR Art. 6(1)(b) (contract), Art. 6(1)(a) (consent), DPDP Sec. 14, CCPA §1798.100 et seq.
-
Automated data (IP address, browser metadata): processed under GDPR Art. 6(1)(f) (legitimate interest) via Wix analytics, solely for Site functionality.
2. Controller–Processor Relationship
-
Sramana Publications controls purpose and use of data.
-
Wix.com acts as processor under GDPR Art. 28 and DPDP Sec. 17, hosting and storing data in compliance with Wix’s Terms and EU-US Data Privacy Framework.
3. Purposes of Processing
Data is used for:
-
Submission evaluation and author communication (contractual necessity)
-
Contact form responses (consent)
-
Secure and functional website operation (legitimate interest)
-
Compliance with laws (e.g. manuscript retention under GDPR Art. 5(1)(e), DPDP Sec. 19)
4. Cookies & Tracking
-
We use essential and functional cookies managed by Wix.
-
No third-party advertising or tracking cookies are deployed.
-
Cookie consent is managed via banner compliant with GDPR Art. 7 and PECR Reg. 6(2). Users can opt in or opt out.
5. Data Retention
-
Manuscript/submission data: retained up to 12 months post-final decision.
-
Contact form submissions: retained up to 6 months.
-
Cookie data: lifespan stated in Cookie Policy; users may revoke consent anytime.
6. International Data Transfers
-
Data stored via Wix across multiple regions, using:
-
EU–US Data Privacy Framework certification
-
Standard Contractual Clauses (SCCs) under GDPR Art. 46
-
-
Processed in compliance with DPDP Sec. 21 (transfers outside India with due safeguards).
7. Data Subject Rights
Users may exercise:
-
Access (GDPR Art. 15; CCPA; DPDP Sec. 18)
-
Rectification (Art. 16; DPDP Sec. 15)
-
Erasure (Art. 17; DPDP Sec. 18)
-
Restriction of processing (Art. 18)
-
Data portability (Art. 20; CCPA)
-
Withdraw consent anytime (Art. 7(3); DPDP Sec. 15)
-
Object to processing (Art. 21)
-
Lodge complaints with supervisory authorities
8. Children’s Privacy
Site is not directed at minors under 16 years (or lower local age). Parents must consent for data from minors, per GDPR Art. 8 and DPDP Sec. 9.
9. Security Measures
-
Encryption via TLS in transit (Art. 32 GDPR)
-
Wix SOC‑2 compliant hosting
-
Periodic security audits and breach monitoring
10. Data Breach Response
In case of personal data breach:
-
Notify supervisory authority within 72 hours per GDPR Art. 33
-
Notify affected individuals if high risk (Art. 34)
-
Coordinate with Wix as the data processor
11. Third‑Party Links
External sites linked from this Site are not governed by this policy. Please consult their privacy statements.
12. Policy Amendments
Subject to change per legal or operational updates. We’ll post revisions with updated dates. Continued use of our Site constitutes acceptance.
13. Contact Information
Data Protection Officer
Visit Contact Page