Elsevier Privacy Policy

DATED 2021-07-21 · VERSION 20210801_rev01 · COMPARED WITH 20210501_rev01 · ARCHIVE SNAPSHOT

Full text changes — 20210501_rev01 to 20210801_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

+Last updated: January 6, 2021
+Last updated: July 21, 2021
 Elsevier is committed to maintaining your confidence and trust with respect to your privacy. This privacy policy explains how we collect, use and share your personal information.
 ## About our privacy policy
+This privacy policy applies to our websites, apps and other services, including programs and events, that refer or link to this privacy policy (each, a "Service"). This policy may be supplemented by additional privacy statements, terms or notices provided to you. The Elsevier company that owns or administers the Service, as identified therein, is the primary controller of your personal information provided to, or collected by or for, the Service.
+This privacy policy applies to our websites, apps and other services, including programs and events, that refer or link to this privacy policy (each, a "Service"). This policy may be supplemented by additional privacy statements, terms or notices provided to you or by the Service. The Elsevier company that owns or administers the Service, as identified therein, is the primary controller of your personal information provided to, or collected by or for, the Service.
 - [Information we collect](https://www.elsevier.com/legal/privacy-policy)
 - [How we use your information](https://www.elsevier.com/legal/privacy-policy)
 - [Sharing of your information](https://www.elsevier.com/legal/privacy-policy)
 - [Your personal account](https://www.elsevier.com/legal/privacy-policy)
 - [Administrator data](https://www.elsevier.com/legal/privacy-policy)
 - Institutional user ID.
 ### Data from other sources
 We also may obtain contact details and other information about you from other entities within RELX and from third parties, including:
+- Social networks when that you grant permission to the Service to access your data on one or more networks;
+- Social networks that you grant permission to the Service to access your data on one or more networks;
 - Service providers that help us determine a location in order to customize certain products to your location;
 - Partners with which we offer co-branded services or engage in joint marketing activities; and/or
+- Publicly available sources and data suppliers from which we obtain data to validate or supplement the information we hold and to support the Service.
+- Publicly available sources and data suppliers to validate or supplement the information we hold or to support the Service.
 ### Device and usage data
 The Service may automatically collect information about how you and your device interact with the Service, such as:
 - Computer, device and connection information, such as IP address, browser type and version, operating system and other software installed on your device, unique device identifier and other technical identifiers, error reports and performance data;
 We may also disclose to your institution or other third parties non-personally identifiable information, such as anonymous usage data reports and aggregated information, subject to any applicable legal or contractual obligations.
 ### Our group companies and service providers
 Depending on the Service provided, we share your personal information with our:
+- Affiliates, trading names and divisions within the Elsevier group of companies (for a list, visit [http://www.elsevier.com/locations](https://www.elsevier.com/about/locations)) and certain RELX companies that provide technology, customer service and other shared services functions; and/or
+- Affiliates, trading names and divisions within the Elsevier group of companies (for a list, visit [https://www.elsevier.com/locations](https://www.elsevier.com/about/locations)) and certain RELX companies that provide technology, customer service and other shared services functions; and/or
 - Suppliers and service providers, including editors, reviewers, payment processors, customer support, email service providers, access and authentication service providers, event venues and service providers, mailing houses, shipping agents and IT service providers;
 to process the information as necessary to provide the Service, complete a transaction or fulfill your request or otherwise on our behalf based on our instructions and in compliance with this privacy policy and any other appropriate confidentiality and security measures.
 ### Your choices
+We may also share your personal information with our group companies and with sponsors, joint venture partners and other third parties, including entities for which we are acting as an agent, licensee, application host or publisher, such as societies, that wish to send you information about their products and services that may be of interest to you as determined by your choices in managing your communications preferences and other settings.
+We may also share your personal information with our group companies and with sponsors, joint venture partners and other third parties, including entities for which we are acting as an agent, licensee, application host or publisher, such as societies, that wish to send you invitations, surveys, programs or information about their products and services that may be of interest to you as determined by your choices in managing your communications preferences and other settings.
 The Service may let you post and share personal information, comments, messages, materials and other content. Any such information that you disclose publicly or in discussion fora in the Service may be collected and used by others, may be indexed by search engines, and might not be able to be removed. Please be careful when disclosing personal information in these public areas.
 ### Legal reasons
 We also will disclose your personal information if we have a good faith belief that such disclosure is necessary to:
 ## Accessing and updating your information
 The Service may allow registered users to directly access their account information and make corrections or updates at any time.
 Keeping such information up to date is solely the responsibility of the user. Registered users may also close their account directly through the Service or by contacting the Service's customer support.
+You have the right under European and certain other privacy and data protection laws, as may be applicable, to request free of charge:
+You have the right under certain privacy and data protection laws, as may be applicable, to request free of charge:
 - Access to and correction and deletion of your personal information;
 - Restriction of our processing of your personal information, or to object to our processing; and/or
 - Portability of your personal information.
 If you wish to exercise any of these rights, please contact us through the [Elsevier Privacy Support Hub](https://service.elsevier.com/app/contact/supporthub/privacysupport). We will respond to your request consistent with applicable laws. To protect your privacy and security, we may require you to verify your identity. You may designate an authorized agent to make a request on your behalf subject to proof of identity and authorization.
 ## Data security
 We take precautions to safeguard your personal information against loss, theft and misuse and unauthorized access, disclosure, alteration and destruction through the use of appropriate technical and organizational measures.
 ## Locations of processing
+Your personal information may be stored and processed in your region or another country where Elsevier companies and their service providers maintain servers and facilities, including Australia, France, Germany, India, Ireland, the Netherlands, the Philippines, Singapore, the United Kingdom, and the United States. We take steps, including through contracts, to ensure that the information continues to be protected wherever it is located in a manner consistent with the standards of protection required under applicable law.
+Your personal information may be stored and processed in your region or another country where Elsevier companies and their service providers maintain servers and facilities, including Australia, China, France, Germany, India, Ireland, the Netherlands, the Philippines, Singapore, the United Kingdom, and the United States. We take steps, including through contracts, to ensure that the information continues to be protected wherever it is located in a manner consistent with the standards of protection required under applicable law.
 Certain U.S. entities within the Elsevier group of companies have certified certain of their services to the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks as set forth by the U.S. Department of Commerce. Please view these entities' [Privacy Shield Notice here](https://www.relx.com/~/media/Files/R/RELX-Group/documents/privacy-shield-notice.pdf). To learn more about the Privacy Shield program, and to view these entities' certification, please visit [www.privacyshield.gov](https://www.privacyshield.gov/welcome) .
 [Scroll to top of page](https://www.elsevier.com/legal/privacy-policy)
 ## Grounds for processing
+When we collect from you any personal information within the scope of European data protection laws, we do so:
+When we process any personal information within the scope of certain privacy and data protection laws, we do so:
 - where necessary to provide the Service, fulfill a transaction or otherwise perform a contract with you or at your request prior to entering into a contract;
 - where necessary for our compliance with applicable law or other legal obligation;
 - where necessary for the performance of a task carried out in the public interest;
 - where applicable, with your consent; and/or
 - as necessary to operate our business, protect the security of our systems, customers and users, detect or prevent fraud, or fulfill our other legitimate interests as described in the sections above, except where our interests are overridden by your privacy rights.
 [Scroll to top of page](https://www.elsevier.com/legal/privacy-policy)
 ## Service-specific details
 Please read the service-specific details below for additional information about certain Elsevier services.
+### Editorial Manager for Reviewers
+Most Elsevier journals use [Editorial Manager](https://www.elsevier.com/authors/login-to-editorial-manager) to manage the peer review process. When you review for such a journal, you need to create or confirm an Editorial Manager account. In support of the review process, this account requires certain information from you as reviewer, such as your name and email address. Some journals may require or provide you the option to add other information, such as postal address, institutional affiliation, telephone number, or ORCID ID.
+To help optimally match a submitted manuscript with a reviewer, Editorial Manager may process additional information, such as your subject area expertise, publication history, and review history, including your previous review comments.
+When a submission that you reviewed is transferred from one Elsevier journal to another Elsevier journal via the Elsevier [Article Transfer Service](https://www.elsevier.com/authors/submit-your-paper/submit-and-revise/article-transfer-service), the transferring journal may also transfer your account details and associated review comments.
+To optimize performance and secure the integrity of the peer review process, Elsevier also monitors geography-based traffic and usage data. To deliver Editorial Manager services, your data may be processed by affiliates and service providers that perform services such as website hosting and IT support.
+You can always manage your marketing communication preferences in your Editorial Manager account or by visiting the [Elsevier Preference Center](https://preferences.elsevier.com/) at any time.
 ### Mendeley
 When you create a Mendeley account, you have a personal library that you can fill with research information and materials, like manuscripts, articles, and other content.
 With a Mendeley account, you can create and participate in private groups, to communicate and share research information and materials, including annotations and comments, with other Mendeley users. Your membership of and contributions to a private group will always be displayed to all members of that group.