Privacy Policy

The Thai Journal of Leisure and Recreation (TJLR) is committed to protecting the personal data of authors, reviewers, editors, website users, and other relevant individuals. The journal collects, uses, discloses, and retains personal data only to the extent necessary for its operations, in accordance with the Personal Data Protection Act B.E. 2562 (2019) and other applicable laws.

1. Data Controller

The Thai Association for Leisure and Recreation (TALR), as the publisher of TJLR, acts as the data controller for the journal’s operations and may authorize the Editor, Editorial Board, and relevant personnel to process personal data within the scope of their responsibilities and under appropriate data-protection safeguards. Inquiries concerning personal data and requests to exercise data-subject rights may be submitted through the contact information provided on the journal’s “Contact Us” page.

2. Personal Data Collected

The journal may collect personal data necessary for its operations, including names, institutional affiliations, academic positions, contact information, user account information, ORCID iDs, educational backgrounds and areas of expertise, manuscripts and supporting documents, review reports, revision and communication histories, complaints and appeals, as well as IP addresses, website usage data, cookies, and technical information automatically recorded by the ThaiJO system or the journal’s website. Such data may be obtained directly from data subjects, corresponding authors, authorized persons, the ThaiJO system, academic databases, or reliable publicly available sources. When personal data relating to co-authors or other individuals are provided, the person providing the data must have an appropriate right or legal basis to do so.

3. Purposes and Legal Bases for Processing

The journal processes personal data for user registration and account administration; manuscript submission, screening, review, revision, and editorial decision-making; communication with relevant parties; reviewer selection and invitation; publication-ethics, originality, and similarity checks; investigation of complaints or alleged misconduct; article publication; DOI registration; preparation of bibliographic and indexing information; management of complaints and appeals; corrections, expressions of concern, and retractions; preservation of the scholarly record; prevention of system misuse; and system security. Processing is based, as appropriate, on steps taken at the request of a data subject before entering into an agreement or the performance of an agreement, compliance with legal obligations, legitimate interests, or consent, with due regard for the rights and freedoms of data subjects. Failure to provide necessary information may prevent the journal from creating a user account, accepting or reviewing a manuscript, publishing an article, or providing related services.

4. Disclosure and Transfer of Personal Data

The journal does not sell, exchange, rent, or use personal data for marketing purposes unrelated to its operations. Personal data are disclosed only as necessary to the Editorial Board, reviewers, ThaiJO administrators, technology service providers, DOI registration agencies, repositories, indexing databases, similarity-checking services, article production and publishing service providers, advisers or experts involved in handling complaints or misconduct, and authorities empowered by law. Authors’ names, affiliations, ORCID iDs, academic information, and contribution information may be published as part of an article and the scholarly record. Reviewer identities are kept confidential in accordance with the journal’s Peer Review Policy unless disclosure is required by law or expressly authorized by the data subject. DOI registration, indexing, ORCID services, online publication, and the use of systems or service providers located outside Thailand may involve the transfer, storage, or access of certain personal data outside Thailand. Such processing will be undertaken only as necessary and with safeguards required by applicable law.

5. Data Retention and Security

The journal retains personal data only for as long as necessary for manuscript processing; investigation of ethical concerns, complaints, or misconduct; the establishment, exercise, or defense of legal claims; preservation of the scholarly record; and compliance with applicable laws. Retention periods are determined according to the nature of the data, purposes of processing, retrospective verification needs, applicable limitation periods, and legal requirements. Appropriate technical and organizational measures are implemented to protect personal data against loss, unauthorized access, use, alteration, or disclosure. When personal data are no longer required, they will be deleted, destroyed, or anonymized as appropriate. Published articles, bibliographic information, DOIs, correction notices, expressions of concern, retraction notices, and records necessary to preserve the accuracy and integrity of the scholarly record may be retained on a long-term basis. In the event of a personal data breach, the journal will investigate, contain, and remedy the incident, assess the risks, and notify the competent authority or affected data subjects as required by law.

6. Rights of Data Subjects

Subject to the conditions and exceptions provided by applicable law, data subjects may request access to or copies of their personal data; correction of inaccurate or outdated information; deletion, destruction, or anonymization; restriction of or objection to processing; data portability; withdrawal of consent; and submission of complaints to the competent authority. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn. Certain rights may be restricted where the data remain necessary for manuscript processing, reviewer confidentiality, investigation of complaints or misconduct, preservation of the accuracy and integrity of the scholarly record, compliance with legal obligations, or the establishment, exercise, or defense of legal claims.

7. Contact and Policy Updates

Data subjects may submit inquiries concerning the use of personal data, requests to exercise their rights, personal data breach reports, or complaints through the channels provided on the journal’s “Contact Us” page. The journal may request additional information only as necessary to verify identity and prevent unauthorized disclosure. If the journal’s website or the ThaiJO system uses technologies that store or access information on users’ devices beyond what is strictly necessary for basic system operation, the journal or system provider will provide relevant information and obtain consent where required by law. Users may control or refuse such storage through browser settings or tools provided by the system, although disabling certain functions may affect website functionality. The journal may update this Privacy Policy when its operating procedures, systems, service providers, platform requirements, or applicable laws change, and the revised policy will be published on the journal’s website.