Privacy Policy

We collect your necessary personal data according to the service you wish to use or obtain, including, for example:

• Basic data of the beneficiary: such as name, ID number, date of birth, and gender.
• Beneficiary account data: includes login data such as usernames and passwords and contact data such as phone numbers, email, and personal address.
• Payment data: includes data collected for the purposes of making payments.
• Cookie data: includes data collected through website records, cookie technologies, or similar technologies.
• Case identification data: includes data about the cases of beneficiaries of the services of the Eastern Province Emirate.
• Personal data provided to the Eastern Province Emirate by other parties.

Some of the personal data that we process is obtained from you directly or indirectly for the following purposes:

• To be able to provide the services of the Eastern Province Emirate and meet its requirements.
• To respond to beneficiaries’ inquiries or resolve their complaints related to the services of the Eastern Province Emirate.
• To develop the level of services provided by the Eastern Province Emirate and improve the beneficiary’s experience and ensure the continuity of providing services with the required quality.
• To ensure the protection of the information and technical services provided that we use to prevent fraud and unauthorized access to the systems of the Eastern Province Emirate.
• To analyze data, prepare statistics, and issue internal reports.
• To send awareness or promotional materials to beneficiaries, with the possibility of canceling this in the event that the owner of the personal data requests it by contacting the Emirate via the means of communication specified in this notice.

The legal justification for collecting and processing your personal data:

According to the Personal Data Protection Law, the legal justification we rely on to collect and process your personal data is:

Your explicit consent: You can withdraw your consent at any time, except for some exceptions specified in the regulations and rules. To do so, you can contact us through the means of communication specified in this notice. The Eastern Province Emirate also has the right, in certain circumstances, to process your personal data without obtaining your consent, in accordance with Article Six of the Personal Data Protection Law.

Achieving the public interest: By attempting to develop and improve joint government procedures, and the determinants and controls for this purpose are the regulations and rules.

Achieving legitimate interests for the Eastern Province Emirate or you: The Personal Data Protection Law and its regulations have specified its requirements.

Implementing an agreement to which the personal data owner is a party.

If the personal data is publicly available or collected from an available source To the public.

To protect your vital interests or to protect you from any harm.

We obtain some personal data directly from the following sources:

• Services: When registering in the official channels of the Eastern Province Emirate for the purpose of using the products or services of the Eastern Province Emirate.
• Communication: When communicating with the Eastern Province Emirate through various electronic channels.
• Opinion polls: When publishing opinion polls, personal data may be collected, as this data is used to conduct analyses and research for the purpose of developing the services provided by the Eastern Province Emirate and improving the beneficiary's experience.

We also obtain some personal data indirectly, from the following sources:

• Cookies data: Some information is collected and stored from website users periodically in order to improve, develop, and manage the website better. This information includes the pages visited on the site, the visitor's Internet Protocol address, browser type and language, date and time of the request, search strategies used in the site's search engines, and others. Cookie data will not be shared with third parties or used for purposes other than those stated in the Privacy Notice unless there is a valid legal and official request otherwise.
• Data provided by the beneficiary through the use of the Eastern Province Emirate smartphone applications.
• Personal data from other parties or other parties acting on behalf of the personal data owner.
• Technical link points with other government agencies.

In accordance with the regulations and rules related to the protection of personal data, we use your personal data on all official websites, channels and means of communication of the Eastern Province Emirate in order to develop the service provided to you, and to carry out the public works of the Eastern Province Emirate according to its assigned competencies, and we may combine personal data / or conduct an analysis of it to evaluate and provide content and services related to you, and we have the right to keep any of your personal data in a file, and use it to contact you through any of the regular means of communication, and we in the Eastern Province Emirate may hide your identity by taking technical and cyber organizational measures in accordance with the latest and best practices in order to avoid any risks to your personal data, as we confirm that we in the Eastern Province Emirate are keen on the systematic and optimal use of your personal data.

The Eastern Province Emirate also applies measures dedicated to complying with the Personal Data Protection Law and its regulations, provided that these measures contribute to implementing the main principles of data protection, which are:

• To be used in a systematic, fair, and transparent manner.
• To be limited to the specific purpose for which it was collected and to the minimum amount of data.
• To be updated continuously, to verify its quality and integrity.
• To be retained when necessary and to be destroyed as soon as its purpose is no longer present.
• To be kept securely. It enhances its privacy.

Your personal data is stored securely on the Emirate's servers inside the Kingdom or government data centers, in accordance with the main national principles for protecting personal data within the geographical borders of the Kingdom of Saudi Arabia, in order to ensure the preservation of the national digital sovereignty of this data, provided that the personal data is disposed of and destroyed in a secure manner that prevents its loss, misuse, or unauthorized access, in accordance with the relevant regulations and instructions.

Under the Personal Data Protection Law, you have the following rights, which depend primarily on the purpose of collecting and processing personal data:

• The right to be informed, including being informed of the legal justification for collecting your personal data and the purpose of collecting it.
• Right to access your personal data: You have the right to access your personal data in the Eastern Province Emirate by submitting a request to access it through the specified means of communication, taking into account that the legal justification is either approval, the legitimate interest of the Eastern Province Emirate, or the implementation of an agreement to which the personal data owner is a party, while emphasizing that the rights of others are not harmed by exercising this right, such as intellectual property rights or trade secrets.
• Right to request access to your personal data: You have the right to submit a request to access your personal data available in the Eastern Province Emirate through the Data Management Office, taking into account that the legal justification is either approval, the legitimate interest of the Eastern Province Emirate, or the implementation of an agreement to which the personal data owner is a party. We provide the personal data to its owner in a commonly used electronic format that is readable and clear. It is possible to provide the personal data owner with a printed copy whenever possible, while emphasizing that the rights of others are not harmed by exercising this right, such as intellectual property rights or trade secrets.
• Right to request correction of your personal data available to the Eastern Province Emirate: You have the right to request that we correct your personal data that you consider to be inaccurate, incorrect or incomplete through the Data Management Office. It will be reviewed and updated and documents or supporting documents will be requested for the request to correct the personal data. You will be notified of this via email within a period not exceeding 30 business days from the date of the request. You also have the right to restrict the processing of your data for a period during which the accuracy of the data can be verified, provided that the restriction request does not conflict with the rules and regulations.
• Right to request the destruction of your personal data available to the Emirate: You have the right to request the destruction of your personal data unless there is a statutory provision specifying a period for retaining personal data, or contractual requirements that you have agreed to, provided that they do not adversely affect your rights or interests.
• The right to withdraw your consent to the processing of your personal data - at any time - unless there are legitimate purposes that require otherwise. This is requested through the specified means of communication, and the Eastern Province Emirate takes the necessary measures to stop processing and request the destruction of personal data from those to whom it was previously disclosed.

We would like to note that some or all of these rights may be subject to certain exceptions and exemptions determined by the system, and they will be evaluated on a case-by-case basis to ensure that they are consistent with those exceptions. This notice specifies how to exercise those legal rights of the personal data owner. For more details about processing your personal data and how to exercise your rights, you can contact us according to the information shown below:

• Name: Personal Data Officer
• Department: Data Management Office
• Telephone number: +966138330000
• Email: DMO@sharqiah.gov.sa

We reserve the right to update the Privacy Notice and its contents from time to time. To the last without notifying you in advance except in the event of material changes, we will notify you of that, so you are obligated to review the developments of this notice, and by using this site or any of our other official channels, you agree to this notice.

The Privacy Notice was last updated on 10/07/2024

We clarify the following regarding the sharing of your personal data:

• Your necessary personal data may be shared with other parties for specific purposes based on a regulatory basis or a justified practical need aimed at achieving a public interest without causing any harm to national interests, the activities of parties, the privacy of individuals, or the safety of the environment, with the exception of data and parties exempted by orders Samia.
• If the data is requested for security purposes or to implement another system or to meet judicial requirements.
• If sharing the data is necessary to protect public health or safety or to protect the life or health of an individual or individuals.
• If sharing the data is necessary to achieve the legitimate interests of the Eastern Province Emirate, unless this violates the rights of the personal data owner or conflicts with his interests and such data is not sensitive data.
• When sharing your personal data, care is taken to share it through a secure and reliable environment in accordance with the requirements of the National Cybersecurity Authority and related regulations, rules and policies. We may take additional steps to ensure the protection of your data by signing a data sharing agreement between the Emirate and other entities in accordance with specific terms and conditions consistent with the data sharing principles and policies issued by the National Cybersecurity Authority.
• We note that the Eastern Province Emirate is not responsible for the data protection mechanisms and methods of those entities and you can refer to their privacy policies With it.

-

The Privacy Notice in the Eastern Province Emirate applies what is stated in the Personal Data Protection System and its implementing regulations, and in accordance with what is stated in the data governance policies issued by the National Data Management Office, and in accordance with the cybersecurity controls for data issued by the National Cybersecurity Authority, and they are considered a primary reference for what the Privacy Notice includes in terms of terms, provisions, and others.

How to submit an inquiry or complaint related to the Privacy Notice:

In the event of any inquiry, complaint, or request regarding your rights related to the processing of your personal data or regarding what is stated in the Privacy Notice in general, you can contact us according to the contact information shown below:

Email: DMO@sharqiah.gov.sa

Expected response time: 3 business days