Notice on the collection, use, protection, and retention of personal data, and the rights of data subjects under the Saudi Arabia Personal Data Protection Law (PDPL).
COMATEC Saudi Arabia Limited is committed to conducting its business in accordance with all applicable Data Protection laws and to respecting your privacy and protecting your personal information in line with the highest standards of ethical conduct. This document explains what personal data we collect about you, why we collect it, whom we share it with, how long we keep it, and what rights you have in relation to that personal data.
The Personal Data Protection Law (PDPL) aims to protect individuals' personal data privacy and regulate organizations' collection, processing, disclosure, or retention of personal data. It has been issued pursuant to Royal Decree No. M/19 dated 09/02/1443 (16/09/2021) and amended pursuant to Royal Decree No. M/148 dated 05/09/1444 (27/03/2023).
COMATEC Saudi Arabia Limited as a Data Controller processes personal data as per the principles stated in the PDPL. This includes ensuring that there is a legal basis for processing personal data, as well as ensuring that personal data is processed consensually, fairly, lawfully, transparently, and securely. In addition, safeguards are put in place to protect personal data from loss, damage, or destruction.
We collect your personal data from the following sources:
Typically, we process the following categories of information:
| Type | Details |
|---|---|
| Personal | Name, nationality, photograph, gender, birth date, place of birth, religion, family information. |
| Contact | Email address, residential address, original/home country/permanent address, contact telephone number. |
| Identity | National ID, Iqama Number, Passport number, Driver license, Visa, and any other government issued document. |
| Financial | Bank account number, loans, bank requests, payroll, expenses, deductions. |
| Security | Criminal or security history reported in a background check. |
| Education and Employment | Employer, title, level of education, educational institutions attended, degrees, professional certifications, prior experience and employers. |
| CCTV/Video | Surveillance of our premises for 30 days. |
| Communications | Phone numbers called and received and duration of calls. In some cases, recording of online meetings with audio and/or video. |
| Biometric | Face and fingerprints for access control systems. |
| Health | Medical history and conditions, insurance and insurance related queries and cases, certain leave requests, and work-related injuries. |
| Transactions | Emails on company account, pages, documents, files and information stored or accessed on company servers, company provided online services, or company provided applications, limited tracking of site names accessed through company provided internet connections or company provided devices. |
| Type | Details |
|---|---|
| Employee |
|
| Candidates |
|
| Clients |
|
| Vendors |
|
| Visitors |
|
| Website users |
|
We do not use personal data for unsolicited marketing or sales purposes. We do not sell or monetize your personal data in any way.
Mandatory data will be marked as such and it needs to be provided in order to engage with COMATEC Saudi Arabia Limited. Failure to provide required information may prevent COMATEC Saudi Arabia Limited from establishing an association with the person.
Personal data may be used in automated processes for triggering events based on specific data and dates (for example, renewal of documentation). It may also be used to integrate and share personal data amongst different systems. COMATEC Saudi Arabia Limited does not use any personal data for profiling or automated decision-making.
COMATEC Saudi Arabia Limited will retain your personal data for any period as mandated by the regulations, necessary for the purpose for which your personal data was collected, required by law, or where we may need it for our legitimate purposes such as maintaining records for analysis or audit purposes, responding to queries or complaints, defending or taking legal action, and responding to requests from government.
If you exercise your option to be removed from our records, we may keep a basic record of your request to ensure that the action has been carried out.
COMATEC Saudi Arabia Limited implements internal technical and organizational measures to keep personal data safe and secure, including encryption, anonymization, and physical security measures. We require our staff and any third parties who carry out work on our behalf to comply with strict compliance standards, including agreeing to contractual obligations to protect any personal data.
When we collect personal data, we provide a safe, secure and confidential environment to ensure that your personal data remains private, used only for the purposes it was requested for, and accessible only to those authorized to process it. We have a legal obligation to keep your personal data confidential, except in circumstances where the disclosure of your personal data is imposed by a legal authority, or where the disclosure is made with your explicit consent or through a representative nominated by you.
We use a range of measures to keep your personal data secure and protected against unlawful processing, accidental loss, destruction and damage.
When we interact with external service providers, we require them to provide the same data protection standards to be assured.
If we become aware that a breach in the security of personal data has taken place, we will communicate with those affected and the relevant authorities to inform them and to try to remedy the breach.
| Type | Details |
|---|---|
| Subsidiary | For the same purpose stated in this document. |
| Recruiter |
|
| Travel agency | To arrange travel documents and reservations. |
| Vendor |
|
| Banks | Issue payments. |
| Emergency contact | Provide details of an emergency incident. |
| Government |
|
| Social Media |
|
| Legal | If requested by court, arbitration body, or law enforcement. |
| Other | If you request it and provide explicit consent. |
We are headquartered in Riyadh, Kingdom of Saudi Arabia. We may transfer your personal data to other countries where we may have service providers.
When we transfer personal data, we ensure it has an appropriate level of protection by including contractual clauses to assure confidentiality and privacy.
We do not provide services to, and do not knowingly solicit data from, persons under the age of 18. Employees of COMATEC Saudi Arabia Limited may provide information about their children to obtain services from COMATEC Saudi Arabia Limited, such as medical insurance or visa issuance.
Consistent with the Personal Data Protection Law, COMATEC Saudi Arabia Limited may disclose personal data if:
The PDPL provides you with certain rights regarding our processing of your personal data. COMATEC Saudi Arabia Limited will make a good faith effort to honor the rights of personal data owners and to fulfill legitimate and appropriate requests:
To know more about your rights, or if there is any question, issue, or request regarding this Personal Data Privacy and Protection notice, please send an email to privacy@comatec.com.sa.
Cookies are pieces of information that a website transfers to a customer's device to track browsing activity in order to improve the user experience. Cookies are used both on websites and in mobile applications. COMATEC Saudi Arabia Limited cookies cannot look into a customer's device to obtain information about them, and cannot read any material or file kept on that device. Only when a user logs in is the cookie associated with a specific user profile, at which point the data collected is associated with his or her personal data.
COMATEC Saudi Arabia Limited collects the following information when customers use its website or mobile applications:
Any individual who suspects that a Personal Data Breach has occurred due to the theft or exposure of Personal Data must immediately notify COMATEC Saudi Arabia Limited, providing a description of what occurred. Anybody found to have violated this document may be subject to disciplinary action, including termination of employment and termination of contract services.
COMATEC Saudi Arabia Limited reserves the right to make changes to this document at any time and for any reason. Any changes or modifications will be effective immediately upon posting the updated document. You are encouraged to periodically review this document to stay informed of updates. You will be deemed to have been made aware of, to be subject to, and to have accepted the changes in any revised document by your continued use of COMATEC Saudi Arabia Limited's sites and services after the date such revised document is updated.