Preamble
AlMaarefa University is committed to protecting the confidentiality and privacy of data belonging to users of its website and ensuring that such data is used to provide services efficiently in accordance with the laws and regulations in force in the Kingdom of Saudi Arabia. The University’s website may collect certain personal data from users. Using the website constitutes implicit consent to this Privacy Notice. Personal data refers to any information that can identify a person directly or indirectly, or makes it possible to determine their identity.
Article 1: Definitions
The following terms and expressions, wherever mentioned in this notice, shall have the meanings assigned to them below unless the context indicates otherwise:
The governing regulations of AlMaarefa University issued in accordance with the laws and regulations applicable in the Kingdom of Saudi Arabia.
AlMaarefa University.
The Board of Directors of AlMaarefa University.
The President of AlMaarefa University.
The office responsible for overseeing and managing data governance within the University.
Any information related to a natural person that can identify them directly or indirectly, such as name, identification number, or location data.
A document that explains how the University or its website collects and processes user data.
Anyone working for the University in any capacity, whether permanent or temporary, including faculty members, staff, and students enrolled for educational or research purposes.
Article 2: Scope of the Notice
This notice applies to all affiliates of AlMaarefa University across all categories. The Data Management Office is responsible for implementing and monitoring compliance with this notice and may take appropriate measures to disseminate and communicate it across the University after approval according to applicable procedures.
Article 3: Objectives of the Privacy Notice
This notice aims to:
- Enhance transparency and ensure users are aware of how their data is managed.
- Protect user privacy in compliance with applicable laws and regulations.
- Prevent misuse or unauthorized access to data.
- Ensure compliance with the requirements of the Data Management Office and related legislative and regulatory obligations.
Article 4: Personal Data Collected
Privacy is a top priority for AlMaarefa University; therefore, the privacy notice is prepared clearly and understandably to allow users to know the nature of personal data collected. The University may collect some personal data when a user requests a service through the University website. The data collected may include:
Article 5: Methods of Collecting Personal Data
Personal data is collected when users provide it to the website while requesting a service after reviewing and agreeing to the Privacy Notice. The University does not collect personal data solely through visiting the website without using its services.
Article 6: Processing Personal Data and Purpose of Collection
The University processes personal data obtained for the following purposes:
- Verifying user identity and contact information and linking data to services provided on the website.
- Tracking requests, processing them, and responding appropriately.
- Facilitating communication with beneficiaries of the University’s services.
Article 7: Method of Using Personal Data
AlMaarefa University does not use collected personal data, whether directly or indirectly, except in a manner that achieves the purposes specified in this notice or the statutory purposes defined under the Personal Data Protection Law and its executive regulations, in addition to regulations and rules approved by the University’s Board of Directors.
Article 8: Storage and Disposal of Personal Data
Personal data is stored within the University on dedicated servers, using the best security measures in accordance with the standards set by the National Cybersecurity Authority to prevent unauthorized access and minimize cyber risks. Personal data is securely disposed of once the purpose for which it was collected has been fulfilled, ensuring it cannot be recovered.
Article 9: Collection and Processing of Personal Data
Processing personal data is a legitimate interest of AlMaarefa University, helping improve the user experience and verify identities for website services. This legal basis applies only to data voluntarily provided by users, excluding processing required by laws and regulations in force in the Kingdom of Saudi Arabia or by decisions or regulations issued by the University’s Board of Directors.
The University processes personal data only after obtaining the user’s explicit and prior consent, in accordance with applicable regulations and procedures.
Article 10: Sharing Personal Data with External Parties
AlMaarefa University does not disclose personal data to external parties except with prior consent from the data subject or when legally required under the Personal Data Protection Law and its executive regulations, in addition to decisions or regulations issued by the University’s Board of Directors.
Article 11: External Links
The University website may provide links to external websites to meet user needs and facilitate access to additional information or services. The University is not responsible for the content of these external sites, and users are responsible for all actions taken while visiting such linked websites.
Article 12: General Provisions
- This notice is effective from the date of approval by the University’s Board of Directors, and any conflicting provisions are repealed.
- The Board of Directors has the authority to interpret the text of this notice and may review and amend it as needed.
- Any matter not specifically addressed in this notice is subject to the University’s regulations, internal bylaws, and relevant policies.
- The University President has the authority to issue executive procedures necessary to implement this notice.
Article 13: Contact and Inquiries
For any inquiries regarding the Privacy Policy, please contact our official channels: