Data Collection and Use
The National Committee does not collect any personal data except with the knowledge and consent of the data subject, and the data is used only to achieve the purposes for which it was collected, such as providing services, communicating, or improving the quality of performance. Your use of the website constitutes your consent to the Privacy Policy and any updates made to it.
Data Protection
The National Committee takes the necessary organizational and technical measures to protect personal data from loss, unauthorized access, misuse, or unlawful disclosure, including but not limited to:
- Applying high standards of information security and technical systems.
- Continuously updating protection procedures and controls.
- Training employees and raising their awareness of the importance of data confidentiality.
- Collecting the minimum amount of data necessary to achieve the purpose.
- Complying with the requirements of the National Cybersecurity Authority, including the encryption and protection of data.
User Responsibility
Users of the website are advised to regularly review the Privacy Policy to be aware of any updates made to
it, noting that the National Committee is not obligated to provide prior notice of such updates.
The National Committee bears no responsibility for any direct or indirect damages that may arise from the use
of the website or the inability to use it. This Policy constitutes an integral part of the terms and
conditions of use of the website.
First: Definitions
Data Subject: The individual to whom the personal data relates.
Legal Basis: The legal ground for collecting and processing the data.
Data Processing: Any operation performed on the data, such as collection, storage, modification, disclosure, or destruction.
Second: Purpose and Legal Bases
The National Committee collects and processes personal data to fulfil its statutory functions, provide its services, serve the public interest, and comply with the relevant regulations and instructions, without prejudice to the rights of data subjects.
Third: Types of Data Collected
The data that the National Committee may collect includes the following:
- Data provided voluntarily by the user upon registration or when benefiting from the services, such as name, means of contact, and qualifications.
- Data arising from communication with the National Committee (enquiries, complaints, requests).
- Data obtained from government entities or other lawful sources when required.
Fourth: Disclosure of Data
The National Committee may disclose personal data to the competent government entities, to data processors, or pursuant to lawful agreements, in a manner that does not conflict with the applicable regulations.
Fifth: Data Retention
The National Committee retains personal data securely within the Kingdom of Saudi Arabia or through approved technical solutions, in accordance with the statutory retention periods or as needed to achieve the legitimate purposes.
Sixth: External Links
The website may contain links to external websites. The National Committee bears no responsibility for the privacy policies or content of those websites.
Seventh: Rights of Data Subjects
- The right to be informed of how their data is collected and the purposes for which it is used.
- The right to access their data and obtain a copy of it.
- The right to correct or update their data.
- The right to request the deletion of their data in accordance with the statutory controls.
- The right to withdraw consent to the processing of the data, unless another legal basis exists.
Requests to exercise these rights will be responded to within a period not exceeding ten working days from the date the request is completed.
Legal Guardian
In the event that the data subject lacks or has limited legal capacity, the legal guardian shall exercise the rights established by law in a manner that serves the interest of the data subject, in accordance with the approved controls.