Privacy Policy for Urbanization Platform

This Privacy Policy explains how we collect, use, process, store, and protect your personal data in accordance with the Personal Data Protection Law (PDPL) By accessing and using our platform, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your personal data as described herein.

Definitions:
Law/PDPL: Personal Data Protection Law issued by the royal desire No (M/9) Dated 9/2/1443 AD. Amended by the royal desire No (M/148) Dated 5/9/1444 Ad, and as amended in the future.
Controller: King Salman Foundation.
Personal Data: Any data, regardless of its source or form, that may lead to identifying an individual specifically, or that may directly or indirectly make it possible to identify an individual, including name, personal identification number, addresses, contact numbers, license numbers, records, personal assets, bank and credit card numbers, photos and videos of an individual, and any other data of personal nature.
Collection: The collection of Personal Data by the Foundation in accordance with the provisions of the Law, either from the Data Subject directly, a representative of the Data Subject, any legal guardian over the Data Subject or any other party.
Processing: Any operation carried out on Personal Data by any means, whether manual or automated, including collecting, recording, saving, indexing, organizing, formatting, storing, modifying, updating, consolidating, retrieving, using, disclosing, transmitting, publishing, sharing, linking, blocking, erasing and destroying data. Transfer: The transfer of Personal Data from one place to another for Processing.
Consent: Direct and explicit consent given by the Data Subject in any form that clearly indicates the Data Subject's acceptance of the Processing of their Personal Data in a manner that cannot be interpreted otherwise, and whose obtention can be proven.

  • Data Controller Information

    King Salman Foundation is the entity responsible for processing your personal data. If you have any questions regarding this Privacy Policy, please contact us through the contact information on the Platform.

  • Personal Data We Collect

    We collect and process the following categories of personal data – By way of example –:

    • Contact Information (e.g., name, email address, phone number)
    • Organization Details (e.g., organization name, country, city, registration details)
    • General Information (e.g., background, objectives, project-related details)
    • Application & Participation Data (e.g., program submissions, funding applications, evaluations)
    • Required Documents (e.g., legal registration documents, funding-related statements, organizational structure details)
    • Any Other Information required for engagement with our platform.
  • Legal Basis for Processing

    We process your personal data based on the following legal grounds:

    • Consent: When you voluntarily provide information through applications and forms.
    • Contractual Necessity: To evaluate and process grant applications.
    • Legal Obligation: To comply with Saudi regulations and grant management requirements.
    • Legitimate Interest: To ensure effective urbanization projects and collaborations.
  • Purpose and Legal Basis for Data Processing

    We process your personal data for the following purposes:

    • Submission Administration: To facilitate registration, manage your submission entry, evaluate submissions, and award prizes where applicable.
    • Communication: To send important updates, notifications, and responses related to the submission and to communicate with you regarding your participation.
    • Improvement of Services: To analyze platform usage, assess the effectiveness of the submission, and improve our services and user experience.
    • Legal and Regulatory Compliance: To meet our legal obligations under the Personal Data Protection Law and its implementing regulation and other applicable laws, and to cooperate with relevant regulatory authorities.
    • Security and Fraud Prevention: To protect against unauthorized access, misuse of the platform, and fraudulent activities.
  • Data Retention & Security

    We retain a record of Personal Data Processing activities during all the period Personal Data is being processed in addition to (five years) after the date of end of any Personal Data Processing activity. To ensure data protection, we implement organizational, administrative, and technical security measures in compliance with the Personal Data Protection Law and its implementing regulations.

  • Data Sharing & Disclosure

    Your personal data may be shared with:

    • Regulatory Authorities: If required by law or regulations.
    • Third-Party Service Providers: Who assist in grant processing, project evaluation, or urbanization research.
    • Partner Organizations: If collaboration is required for project implementation.

    We ensure that all recipients of personal data provide sufficient security guarantees and comply with Personal Data Protection Law and its implementing regulation requirements.

  • International Data Transfers

    Personal data may be transferred outside Saudi Arabia only if the receiving country ensures an adequate level of data protection, as per Personal Data Protection Law and its implementing regulation, also Regulation on Personal Data Transfer Outside the Kingdom requirements.

  • Data Subject Rights

    subject in accordance to the Personal Data Protection Law and its regulations, you have the following rights:

    • Right to be informed: to be informed with the legal basis and the purpose of the Collection.
    • Right to Access: having access to your personal data which was collected by the foundation.
    • Right to request to obtain your data: The right to request obtaining your personal data held by the foundation in a readable and clear format.
    • Right to request correcting your data: Request correcting, completing, or updating your personal data.
    • Right to request Destruction of your Personal Data : Requesting destruction of your held by the Controller when such Personal Data is no longer needed by Data Subject to Article )18( of the Personal Data Protection Law.

    To exercise these rights, please contact us through the contact information on the Platform. Requests will be processed in accordance with Personal Data Protection Law and regulations.

  • Data Security

    We are committed to ensuring the security and confidentiality of your personal data. To this end, we implement a variety of technical and organizational measures, including:

    • Encryption: Data is encrypted both in transit and at rest to prevent unauthorized access.
    • Access Controls: Strict access controls and authentication measures are in place to ensure that only authorized personnel can access your data.
    • Regular Audits and Monitoring: We routinely monitor and audit our systems for security vulnerabilities and take corrective action as necessary.
    • Staff Training: Our staff undergo regular training on data protection practices and confidentiality.
  • Data Breach Notification

    In the unlikely event of a data breach that compromises your personal data, we will take immediate action to secure our systems, mitigate any potential harm, and notify you and the relevant authorities in accordance to Personal Data Protection Law and its regulation

  • Cookies & Tracking Technologies

    Our platform may use cookies and similar tracking technologies to enhance user experience. You can manage your cookie preferences through your browser settings.

  • Updates to This Privacy Policy

    We may update this Privacy Policy periodically. Any changes will be communicated through the Platform or via email where applicable.

  • For any questions regarding this Privacy Policy or data protection matters, please contact us.

    Acknowledgment:
    By using the Urbanization Platform, you agree to the terms of this Privacy Policy.