This document contains information on the processing of your personal data by the Road and Bridge Research Institute in connection with the use of the journal “Roads and Bridges – Drogi i Mosty” available at Roads and Bridges – Drogi i Mosty (hereinafter referred to as the “Website”), as well as in connection with the management of the publication database and the distribution of the journal’s publishing notifications.
The controller of your personal data is the Road and Bridge Research Institute, with its registered office in Warsaw at ul. Instytutowa 1, 03-302 Warsaw, represented by the Director of the Institute. You may contact the Controller:
The Controller has appointed a Data Protection Officer (hereinafter: DPO), who may be contacted regarding matters related to the processing of personal data. The DPO may be contacted:
In every case of processing your personal data, we do so in accordance with the requirements of the GDPR. We apply technical and organisational measures required by law and adapted to the changing security environment to ensure the security of processing your personal data.
We process your personal data for the following purposes:
| Purpose of data processing | Legal basis for data processing |
| 1. Publication of studies submitted by authors / reviewers |
1.1. Art. 6(1)(b) GDPR – conclusion of a contract (including actions taken prior to its conclusion) and its performance – publication of studies |
| 1.2. Art. 6(1)(f) GDPR – legitimate interest: communication with contact persons in connection with the performance of the contract | |
| 2. Registration of a user account on the website | 2.1. Art. 6(1)(b) GDPR – conclusion of a contract (including actions taken prior to its conclusion) and performance of the contract – creation of a user account |
| 2.2. Art. 6(1)(f) GDPR – legitimate interest: communication with contact persons in connection with the performance of the contract | |
| 3. Receiving inquiries and providing responses (via email, telephone, or postal contact) | 3.1. Art. 6(1)(f) GDPR (legitimate interest – ensuring contact with the controller, receiving inquiries regarding services offered and providing responses) |
| 4. Conducting promotional and marketing activities, including via electronic communication tools (e.g. email) – sending a newsletter on the latest publications | 4.1. Art. 6(1)(f) GDPR (legitimate interest – direct marketing of own services) |
| 4.2. Art. 6(1)(a) GDPR (consent) – if you give consent to receive the newsletter; consent may be withdrawn at any time, and its withdrawal does not affect the lawfulness of processing carried out on the basis of consent prior to its withdrawal | |
| 5. Conducting analytical and statistical activities concerning users’ activity on the Website via cookies or other similar technologies | 5.1. Art. 6(1)(f) GDPR (legitimate interest – conducting analytical and statistical activities concerning the Website for the purpose of developing and improving services) |
| 6. Data archiving | 6.1. Art. 6(1)(c) GDPR (compliance with a legal obligation incumbent on the controller) in connection with the performance of tasks specified in the Act of 14 July 1983 on the national archival resource and archives (Journal of Laws of 2020, item 164, as amended) |
| 7. Pursuing or defending against potential claims | 7.1. Art. 6(1)(f) GDPR (legitimate interest) |
Personal data will be processed for the period necessary to achieve the purposes described above. Depending on the legal basis, this will include in particular:
After the above-mentioned period, personal data will be archived for the period required by law or for the period necessary to establish, pursue, or defend claims – where applicable – and will then be deleted.
Recipients of your personal data include entities providing services to the data controller under data processing agreements, such as IT services (delivery or maintenance of IT systems, technical support services, hosting, website operation); legal, advisory, accounting, postal, and courier services, as well as entities and authorities entitled to receive data under applicable law.
In the case of publication of studies submitted by you, data including the author’s ORCID number, first name, last name, email address, and affiliation will be made available in the Citation Databases indicated on the Website.
In connection with the processing of personal data, you are entitled to the following rights:
Providing data is voluntary, but may be necessary to achieve the purposes for which it is processed, i.e. responding to an inquiry, creating a user account, publishing a submitted study, or using the Website.
When visiting the Website (also referred to as the “Service”), we may collect information from the user such as cookie identifiers, information collected via cookies, or other similar technologies.
Cookies are IT data, in particular text files, stored on the user’s end device and intended for use of the Website’s web pages. Cookies usually contain the name of the website from which they originate, the time they are stored on the end device, and a unique number.
Cookie identifiers, as well as information collected via cookies or similar technologies, may in some cases constitute personal data.
The entity placing cookies on the user’s end device and accessing them is the Website Operator, i.e. LIBCOM Piotr Karwasiński.
Cookies are used in order to:
The Website uses two basic types of cookies: “session cookies” and “persistent cookies”. Session cookies are temporary files stored on the user’s end device until leaving the website or closing the browser. Persistent cookies are stored on the user’s end device for the time specified in the cookie parameters or until deleted by the user.
The following types of cookies are used on the Website:
| Cookie name | Retention period | Purpose |
| OJSSID | Session | User session in the OJS/PKP system (login maintenance, navigation) |
| BOcustomCookieBar | 1 year | Remembering the user’s decision regarding cookie acceptance |
| _ga | 2 years | Google Analytics – user identification |
| _ga_Y3P3VPVD0D | 2 years | Google Analytics – website traffic tracking |
| _ga_Y6F3SZLBR6 | 2 years | Google Analytics – website traffic tracking |
| _gid | 24 hours | Google Analytics – distinguishing users |
| BOcustomCookieBar | 1 year | Remembering the user’s decision regarding cookie acceptance |
| _gat_gtag_UA_56959316_1 | 1 minute | Google Analytics – limiting the number of requests |
| _cf_bm | Several minutes | Cloudflare – protection against bots (SCOPUS) |
| _cfuvid | Session | Cloudflare – recognition of user traffic (SCOPUS) |
| _GRECAPTCHA www.recaptcha.net | 6 months | Google reCAPTCHA – protection of forms against spam and bots |
The user may also change cookie settings at any time in the settings of the web browser. By default, the browser allows cookies to be stored on the user’s end device. These settings may be changed in particular to block automatic cookie handling or to inform about each placement of cookies on the user’s device. Detailed information on the possibilities and methods of handling cookies is available in the browser settings.
External entities may use cookies and similar technologies to collect or receive information from the Website or other places on the Internet and use them to provide measurement services. By managing cookie settings, you can decide whether you consent to the collection and use of information.
The Website uses Google Analytics, an online tool for website statistics and web analytics provided by Google, which gives insight into Website traffic. We use this tool to create statistics for the purpose of adapting the content of our websites to users’ preferences and for continuous optimisation.
You may prevent the installation of cookies by adjusting your browser settings. You may also prevent Google from collecting data generated by cookies and related to the use of the Website by installing a browser add-on blocking Google Analytics scripts available here. More information about Google Analytics can be found here.
Due to the use of Google Analytics, personal data obtained in connection with the use of the Website may be transferred outside the European Economic Area. In such cases, the transfer of personal data is based on standard contractual clauses concluded by the Controller with the tool provider. We encourage you to review the content of the data processing agreement, including the standard contractual clauses forming part thereof.
Information on how Google uses data collected when using the websites and applications of its partners is available here.
Vol. 24 No. 4 (2025)
Opublikowane: 2025-11-13
10.7409