Privacy Policy

1.1 Introduction

This privacy policy represents the Commission's commitment to maintaining the privacy and confidentiality of users' personal data. This policy has been developed to clarify how personal data is collected, processed, and protected in accordance with relevant laws and regulations.

1.2 Objective

This policy aims to:

• • Ensure the protection of users' personal data.
• • Define the legal basis for data collection and processing.
• • Promote transparency regarding data collection and processing methods.
• • Provide means for users to exercise their rights regarding their personal data.

1.3 Scope of Work

This policy applies to all personal data collected and processed by the Higher Commission for Industrial Security, and includes:

• • User data provided through registration or interaction with the Comprehensive Platform.
• • Any data collected automatically during the use of the Comprehensive Platform, such as Cookies and IP addresses.
• • This policy applies to all users who interact with the Comprehensive Platform.

1.4 Definitions

2.1 About the Commission

The Higher Commission for Industrial Security was established by Council of Ministers Resolution No. (707) dated 27/12/1443 AH, which provides high-quality services with the efforts of a professional and experienced team that focuses on performing its duties in a methodology that satisfies the beneficiaries. In its keenness for user data and information, the Commission is committed to maintaining the confidentiality and privacy of this data and using it to achieve the desired level in providing the necessary service to the user in accordance with the terms and conditions applicable in the Kingdom of Saudi Arabia. Using the Comprehensive Platform constitutes the user's approval of the user's privacy policy.

2.2 Consent to Safe Use and Privacy Policy Notice

The Higher Commission for Industrial Security ("the Commission") is committed to the privacy and confidentiality of the personal data of users of the Comprehensive Platform ("the Platform") designated for providing services, and places it at the top of the priority list in accordance with the controls stipulated in the Personal Data Protection Law issued by Royal Decree No. (M/19) 9/2/1443 AH and its implementing regulations.

Personal data is not collected by the Commission except with the knowledge of the data subject and their choice to provide this data. When the data subject registers or uses the Comprehensive Platform, this constitutes implicit consent to the terms of the safe use and privacy policy.

When using the "Comprehensive Platform", the Commission collects various types of personal data, and uses this data collected through registration on the Comprehensive Platform or benefiting from the services provided for conducting research and studies, publishing reports, dashboards, etc. The Commission is committed to not disclosing or sharing any personal data that can be used to identify the data subject, without violating relevant laws and instructions, except after obtaining their consent.

2.3 Privacy Policy Updates

• • The Platform management at the Commission reserves the right to add or change any provisions of the privacy policy, and the Platform management will notify the data subject of this. The Platform management has the right to terminate the data subject's account in case of non-acceptance of any change in the privacy policy, without contradicting relevant laws and regulations.
• • Arabic is the approved language for applying the terms and conditions, and in case of a dispute in interpreting any text in any other language, the text written in Arabic shall be taken.

2.4 Contact Information

• • Name: Alwaleed bin Khalid bin Hurayyil
• • Email: DMO@hcis.gov.sa

2.5 Personal Data Protection Officer

• • Name: Alwaleed bin Khalid bin Hurayyil
• • Email: DMO@hcis.gov.sa

2.6 Data to be Collected and Purpose of Collection

First: Personal Data to be Collected

When using the Comprehensive Platform, various types of personal data are collected, including but not limited to:

• - Full name, national ID, gender, nationality, date of birth, mobile number, email, residential address.
• - Account information: login credentials, passwords (encrypted), and account settings.
• - Technical information: IP address, device type, operating system, browser, and internet connection information.
• - Usage information: browsing patterns, interactions with the platform, and preferences.

Second: Purpose of Collecting Personal Data

• - Personal data is collected to provide appropriate services to the user and to follow up on any inquiries, suggestions, or complaints submitted by the user.
• - Personal data is used for the purposes of completing the registration process and improving the beneficiary's experience.
• - Personal data collected from the user is used to achieve the purposes specified in this policy or the regulatory purposes stipulated in the Personal Data Protection Law.
• - Personal data is used for analysis purposes and issuing reports that serve the necessary work requirements.

2.7 Methods of Collecting Personal Data

• - Data that the personal data subject provides to the Platform through registration is collected.
• - Personal data of the data subject is collected indirectly through cookies collected when visiting the Platform (Cookies).
• - The Platform's servers automatically capture your IP address when you visit the site.

2.8 Processing Personal Data

Personal data is collected and processed based on the consent of the personal data subject, and they can withdraw their consent to collect and process their personal data at any time unless there is another legal basis. To do so, you can contact the Data Management Office at the Higher Commission for Industrial Security.

Via email: DMO@hcis.gov.sa

2.9 Privacy

The Comprehensive Platform provides beneficiaries with access to its electronic services and is committed to facilitating access to these services using the highest safety standards recommended by relevant authorities. The Commission is also committed to preserving and protecting the privacy of beneficiaries' personal data, and the Higher Commission for Industrial Security pledges not to use this data for unlawful purposes.

2.10 Sharing Personal Data

The Commission is committed to not sharing any personal data in its possession. The Commission may disclose personal data collected directly or indirectly to regulatory and legislative authorities to achieve public interest purposes, for security purposes, to implement another law, or to meet judicial requirements, without contradicting relevant laws and instructions.

2.11 Storing Personal Data

The data subject's personal data is stored through secure solutions at the Commission or third parties authorized by the Commission, protected by the best technologies in compliance with the National Cybersecurity Authority's policies and controls and international standards to ensure unauthorized access is prevented and cyber risks are reduced. The data will then be destroyed within three years from the date of storage in a secure manner through which it cannot be viewed or retrieved again according to the Commission's policies.

2.12 Rights of Personal Data Subjects

• • Right to Know: The personal data subject has the right to know how we collect their data, the legal basis for collecting and processing it, how it is processed, stored, and destroyed, and with whom it will be shared. You can view all details through the privacy policy or contact us via the data shown in section four.
• • Right to Access Personal Data: The personal data subject has the right to request a copy of their personal data via the email shown in section four, and will be provided with it free of charge within five business days via email.
• • Right to Correct Personal Data: The personal data subject has the right to request correction of their personal data that they consider inaccurate, incorrect, or incomplete via the email shown in section four, and it will be reviewed and updated within five business days, and the personal data subject will be notified via email.
• • Right to Delete Personal Data: The personal data subject has the right to request deletion of their personal data in certain circumstances unless there is a legal provision specifying a certain retention period or contractual requirements.
• • Right to Withdraw Consent to Process Personal Data: The personal data subject can withdraw consent to process their personal data at any time unless there are legitimate purposes requiring otherwise.
• • Right to Object: The data subject has the right to object to the collection, processing, storage, sharing, or disclosure of their personal data without their explicit consent or if the processing is for direct marketing purposes.
• • Right to Restrict Processing: The data subject has the right to request restriction of processing of their personal data to one or more purposes.

2.13 External Links

The Comprehensive Platform may include other links on the Internet. Accordingly, the Commission is not responsible for the contents of those sites, and the risks of browsing those sites through any link available on the site are the responsibility of the data subject. The data subject can view the privacy policies and contents of those sites that are accessed through any link within those sites.

2.14 Exercising Data Subject Rights

The personal data subject has the right to request access/correction/deletion of their data by contacting via the following email: DMO@hcis.gov.sa

2.15 Termination of Use

The Commission may, at its sole discretion, terminate, restrict, or suspend the user's right to access and use the Platform without notice and for any reason, including violation of the terms and conditions of use or any other behavior that we may consider, at our sole discretion, illegal or harmful to others. In case of termination, you will not be authorized to access this Platform.

2.16 Complaints and Inquiries

In case of complaints or inquiries related to the privacy policy or dealing with personal data, contact the Platform management via the following email: DMO@hcis.gov.sa

2.17 Applicable Law

This policy is subject to relevant laws, regulations, and instructions. In case of a conflict between any of the provisions of this policy and what is stated in relevant laws, regulations, or instructions, the relevant laws, regulations, and instructions and any decisions and instructions issued in this regard shall apply.