Privacy Policy and Terms of Use
The Ministry of Human Resources and Social Development cares about the confidentiality and privacy of your personal data and recognizes the need for applying the appropriate protection measures in accordance with the relevant laws, regulations, and policies.
This Privacy Notice is intended to help you understand the type of personal data that we may collect about you through the Ministry's various channels, it also explains the purpose for which the data is collected, and how we will keep it safe.
It is important to be aware of how the ministry and its affiliated entities are using your personal data and to know your rights according to the regulations and legislations in The Kingdom of Saudi Arabia.
By using the services provided by the ministry of Human Resources and Social Development, you agree and give your consent to this privacy notice with full knowledge of its legal significance acknowledge.
As amended from time to time according to the Kingdom policies and regulations, we urge you to constantly review the privacy notice.
1.1Contact Information:
Department/ Specialized team | Ministry of Human Resources and Social Development - Data Management Office |
Address | Riyadh – Al Mugharazat District, Imam Saud bin Abdulaziz bin Muhammad Road, P.O Box: 12484, Postal Code: 11157 |
Contact Number | 19911 |
E-mail Address | info@hrsd.gov.sa |
1.2 What is the personal data being collected?
The data collected by the ministry varies, depending on the service being used and will include some or all the following:
- Account Data:
Includes usernames, passwords, contact numbers, emails, and personal address.
- Technical data:
Includes the Internet Protocol (IP) address.
- Financial data:
Includes income data as well as data collected for the purposes of making payments such as account number and credit card number.
- Health data:
Includes personal data related to an individual's health condition, whether physical, mental, psychological, or health services provided to an individual.
- Status definition Data:
May include social status data on beneficiaries receiving services from the Ministry or its affiliated entities.
- Educational:
Includes the educational qualifications data as a beneficiary receiving services of the Ministry or its affiliated entities.
- License data:
Includes the data of government facilities for the beneficiary, including licenses that are subject to the conditions and controls of government licenses.
- Employment data:
Includes the data of your employment as a beneficiary or of one of the establishments owned by the beneficiary.
- Asset and property data:
It includes the data of the asset and property owned by the beneficiary and registered with the government agencies concerned with the supervision of assets and property.
1.3 Data Collection Methods:
The ministry is collecting and processing some of the personal data directly or indirectly, using different methods as follows:
Direct methods include:
- Services: when registering on the official channels of the Ministry of Human Resources and Social Development, including mobile phone applications and various products or services.
- Communication: When communicating with the Ministry of Human Resources and Social Development through customer service channels .
- Polls or surveys.
Indirect methods include:
- Data collected from third parties.
- Cookies.
1.4 The lawful basis and Purpose of which the Personal data is collected:
Processing is necessary for the performance of an operation carried out in the public interest as on which we collect and use your personal data to:
- Enable the ministry and to provide the services and fulfil its requirements.
- Issue of policies and conduct studies that serve work demands.
- Resolve and handle the inquiries and the complaints filed by the beneficiaries.
- Identify the beneficiary's preferences, enhance the level of service, and ensure the continuity of the high-end experience.
- Authenticate the beneficiaries’ identity when registering in different ministry services.
- Meet legal and organizational requirements.
1.5 Personal Data Sharing:
In accordance with the data sharing policy issued by the National Data Management Office, we will not share your personal data with non-governmental parties unless they are authorized to perform specific governmental services, or we have your consent to do so.
Also, we may share necessary personal data with governmental entities for specific purposes and based on a legal basis or justified practical need, or where sharing the personal data aims to achieve a public interest without causing any harm to national interests, entities activities, individuals’ privacy, or the environment safety, excluding the data or entities that is exempted by royal decrees.
Appropriate security controls are applied when sharing your information, to ensure a secure and reliable environment, according to the relevant laws, regulations, and policies.
Where deemed applicable, we may take additional steps to protect your information through signing a formal Data Sharing Agreement between the two parties, in obedience to specific terms and conditions that are compatible with data sharing principles.
1.6 Personal Data International Transfer
In accordance with the applicable laws, your personal data will be stored and processed securely within the geographical borders of the Kingdom of Saudi Arabia, aiming to ensure the preservation of the national digital sovereignty of the data.
However, there may be several cases as described in Article (29) of the Personal Data Protection Law, where your data may be transferred or processed outside the geographical borders of the Kingdom.
1.7 Personal Data Protection:
Securing your personal data and ensuring this data is handled properly is a key priority for us, we make sure that personal data is only made available to those who have a need to see them, one of the methods we follow to achieve this goal is by implementing technical and organisational measures, including, and not limited to the following:
- Controlling access to systems and networks.
- Providing employees with appropriate data protection training.
- Implementing appropriate data security controls such as encryption.
- Deleting & disposing personal data when it it’s no longer needed in accordance with applicable laws and regulations (in compliance with Article 18 of the Personal Data Protection Law).
- Implementing a secure physical environment for your hard copy printed personal data records.
1.8 Your rights associated with your personal data processing:
In accordance with the provision of the Personal Data Protection Law, and as a personal data owner, you shall have the following rights:
- The right to be informed, by notifying you of the legal basis for collecting your personal data, and the purpose thereof, and that your data will not be processed later in a manner inconsistent with the purpose for which it is collected for, or in cases other than those stipulated in Article (10) of the Personal Data Protection Law.
- The right to access your personal data in the ministry to view it and obtain a copy thereof in a format that is clear and identical to the content of the records, free of charge - as determined by the regulations - without prejudice to the stipulations of the Credit Information Law regarding the financial consideration, and without prejudice to the stipulations of Article (9) of the Personal Data Protection Law.
- The right to request correction, completion or updating of your available personal data in the ministry.
- The right to request the destruction of your available personal data in the ministry which is no longer needed, without prejudice to the provisions of Article (18) of the Personal Data Protection Law.
It is important to understand that these rights may be subject to certain exemptions set by the law and will be assessed on a case-by-case basis to ensure they are valid.
1.9 Do you have any inquiries or complaints?
In the event of any inquiries, complaints, or requests regarding your rights or what is stated in this privacy notice in general, you may communicate with the Data Management Office at the Ministry of Human Resources and Social Development via the contact form.
For general inquiries, you can contact the Ministry through the contact information shown below:
Entity Name |
Ministry of Human Resources and Social Development |
Address |
Riyadh - Al Mugharzat district, Prince Saud bin Abdul Aziz bin Mohammed branch road |
Contact Center Number |
19911 |
|
We recommend that you periodically review the Privacy Policy for any updates. The Privacy Policy was last updated on November 14, 2024.
The ministry is keen to limit the collection and processing of personal data to the minimum necessary to perform its duties and provide the required services.
The Ministry collects the following personal data through its website:
• Personal Identity Data: Name, date of birth, national identity number or residence number.
• Contact Data: Phone number, email address.
• Personal Account Data: Password used to log in to the beneficiary's page.
• Cookie Data": Data collected through website logs and cookie technologies, such as your Internet Protocol address, which is the (IP) address used to connect your personal computer to the Internet.
The ministry collects personal data directly through the electronic forms you submit on the website, and indirectly through the use of (Cookies) technologies, and interconnection with other entities, in cases that require processing requests related to the owner of the personal data, in accordance with the provisions of the relevant regulations and legislation.
The legal basis on which the Ministry relies to process personal data is to fulfill the regulatory obligations and requirements entrusted to it, in order to achieve any of the following purposes:
- Authenticating the identity of users and their contact information.
- Enabling the Ministry of Human Resources and Social Development to perform the tasks and responsibilities entrusted to it and provide services pursuant to the relevant laws and regulations.
- Understanding the user's needs and striving to develop them, including but not limited to: receiving and processing inquiries, requests, and complaints.
- Raising the level of service performance, developing it, improving the user experience, and ensuring the continuity of providing services with the required quality.
The personal data collected from you is processed directly or indirectly to carry out the tasks and responsibilities assigned to the Ministry and in a manner that achieves the purposes specified in this policy. Personal data will only be processed by those authorized to do so in accordance with their competencies, and according to what is determined by the approved policies for this purpose.
The Ministry is committed to the data sharing policies and controls issued by the regulatory authorities, and does not share personal data with any party outside the Ministry except in accordance with the disclosure cases specified in the Personal Data Protection Law and its implementing regulations, whether by obtaining your prior consent or disclosing in accordance with the purposes and cases specified by the Law.
Your personal data is stored and kept securely at the headquarters of the Ministry of Human Resources and Social Development or on its approved servers within the Kingdom of Saudi Arabia. The best security standards and practices related to ensuring data security and protection are applied, such as access control management processes, data classification and encryption, and regular security assessment procedures.
The data is retained based on the time periods necessary to fulfill the Ministry's regulatory obligations and until the purpose of processing it is completed, after which it is destroyed in a secure manner that prevents the data from being accessed or recovered again, in accordance with the provisions of Article (18) of the Personal Data Protection Law.
Under the Personal Data Protection Law, the owner of personal data has the following rights:
- The Right to Know: This includes informing you of the methods of collecting your personal data, the legal basis for collecting it, the mechanism for processing it, and all other details related to the processing of your personal data by clarifying them in this policy.
- The Right to Access and Obtain Your Personal Data: You have the right to request access to your personal data and obtain a copy of it in a clear, readable format that matches the content of the records - whenever technically possible - in accordance with what is determined by the relevant laws and regulations, without prejudice to the restrictions and exceptions contained therein, and taking into account any periods imposed by the Ministry to exercise or restrict this right.
- The Right to Request Correction of Your Personal Data: You have the right to request correction of your personal data that you believe is inaccurate, incorrect, or incomplete.
- The Right to Request Destruction of Your Personal Data: You have the right to request the destruction of your personal data that is no longer needed, unless there is a legal basis that specifies a period for retaining personal data in accordance with the provisions of Article (18) of the Personal Data Protection Law.
- The Right to Withdraw Your Consent to the Processing of Your Personal Data: You have the right to withdraw your consent to the processing of your personal data, unless there are legitimate purposes or legal justifications that require otherwise.
To submit a request regarding your rights mentioned above, you can do so by accessing the link Personal Data Owner Request Form، You will receive a response within thirty (30) days from the date the complete request is received.
In the event of a complaint or objection regarding the processing of your personal data, you can contact the Privacy Management Team at the Ministry of Human Resources and Social Development at the following email address: DP.DMO@HRSD.GOV.SA
For more information about the relevant laws and regulations referred to in this policy, you can go to one of the following links: