Believing in the importance of personal data and its confidentiality, this notice has been prepared to support the beneficiary in understanding the nature of the data that the Qassim Region Municipality collects by accessing the Municipality's website or the digital services provided by the Municipality. The Qassim Region Municipality is committed to maintaining the confidentiality of personal data to ensure and preserve the rights of data owners, and the Municipality complies with the national data governance policies issued by the Saudi Data and Artificial Intelligence Authority (SDAIA) and the basic legislation to protect the rights and privacy of individuals with regard to their personal data, which is subjected Personal Data Protection Law and its implementing regulations .

ArticleOne:YourAcceptanceofthePrivacyNotice

This Privacy Notice is an integral part of the terms and conditions of use of the Municipality's website. Your visit to the Qassim Region Municipality website and your use of its services means that you have read and agreed to what is stated in this Privacy Notice

Article Two: Changes to the Privacy Notice

Qassim Region Municipality reserves the right to make any changes to the Privacy Notice from time to time without the need to provide notice. Therefore, we recommend that you read and review the notice posted on the Municipality's website periodically to stay informed of the changes. Any changes or modifications will be effective immediately upon posting the updated notice.

Effective from the date of modification:

This notice was last updated on (7 Rajab 1446 AH corresponding to January 7, 2025 AD).

Article Three: Personal Data to be Collected and Processed

The data we collect and process about you is based on the products or services the Municipality provides. We typically process the following categories of personal data that you provide to us:

The details	Data type
Name, gender, date of birth.	Personal data
Email address, residential address (national address) or work address, and contact phone number.	Contact information
National ID number, residence number and any other similar documents.	Identity data
Data you provide to us by filling in any of our forms or by communicating with us, whether face to face, by telephone, by email, online or otherwise.	Correspondence
The user may sometimes be asked to agree to determine his geographical location, in order to benefit from some of the services provided on the Qassim Region Municipality website and its applications on smart devices.	Geographical location
Connection Identification Files: Information sent by the browser used by the user when visiting the website, which is saved on the user's device and aims to collect statistics about the user's visit to the Municipality's website based on the Internet Protocol (IP) address on the personal device. This data is used to improve the user's experience in using the website. Examples of the information that the browser automatically collects: IP address, time of entry to the site, pages you visited.	Technical data

Article Four: Methods of collecting your personal data

The collection and processing of your personal data

The collection and processing of your personal data is necessary to provide the highest level of service. The Municipality collects and processes some personal data, which is obtained directly or indirectly, for example, but not limited to:

1. Data provided by the user

A. Data required when registering on the website, services, and applications affiliated with the Municipality or provided by the Municipality when you create your user file, including but not limited to personal data, contact information, and national address.
B. Data exchanged through the Secretariat's communication with website users and service beneficiaries, such as requests submitted for customer support services, inquiries, comments, and complaints received from you.

2. Data collected automatically

A. Technical data including your Internet Protocol address (IP), which is the address used to connect your personal computer to the Internet, geographical location, and connection Identification Files.
B. The Municipality's website may include external links to other websites, and these links may collect data about users by providing them with their services or connection Identification Files settings. User interaction with these sites is subject to the privacy notices provided by those service providers.
C. Data provided to us through government integration platforms with government agencies for the purposes of data integration and sharing, in accordance with the data sharing policy issued by the National Data and Artificial Intelligence Authority (SDAIA).

Article Five: Purpose of collecting and processing personal data

Qassim Region Municipality seeks to raise the level of performance of its services provided to beneficiaries by collecting and processing personal data directly or indirectly for the following purposes :

1-Enable and provide the services of the Qassim Region Municipality and meet its requirements .

. 2-Prepare, issue and update policies that serve the Qassim Region Municipality.

. 3-Respond to inquiries from beneficiaries of the Municipality's services.

. 4-Raise the level of service performance, develop and improve the beneficiary's experience, and ensure the continuity of providing services with the required quality.

. 5-Authenticate the user's identity when registering for the various Municipality services.

. 6-Meet some legal and regulatory requirements.

. 7-Monitor and detect violations of the terms of use, in addition to other and potential abuses when using the site or one of its services.

. 8-Analyze data, prepare statistics and issue internal reports.

. 9-Maintain and improve the performance of the site and the services provided, and the security of its software, systems and network.

. 10-Publish awareness campaigns about the Municipality or its affiliated programs and announce electronic participations.

Article Six: Potential effects and risks resulting from failure to complete the personal data collection procedure

Services are not provided through the website unless the beneficiary's identity is verified.

The lack of personal data leads to not benefiting from the site's services.
Not enabling the site to customize services to improve the beneficiary's experience.

Article Seven: Use of Your Personal Data

Under the rules and regulations related to the protection of personal data, we have the right to retain any of your personal data and use it to contact you through any of the regular means of communication. We can work to conceal your identity by taking updated organizational and technical measures to avoid any risks to your personal data.

At the Qassim Region Municipality, we confirm our commitment to the systematic and optimal use of your personal data. Personal data is used to complete the registration process, finalize service provision procedures, and improve the beneficiary experience.

Principles for Personal Data Use:

To be used in a systematic, fair, and transparent manner.
To be limited to the specific purpose of its collection and to the minimum amount of data.
To be updated continuously, to verify its quality and integrity.
To be retained when necessary, and to be destroyed immediately after its purpose is no longer there.
To be kept in a secure manner that enhances its privacy.

Article 8: Sharing your personal data

Your necessary personal data may be shared with other government agencies for specific purposes based on a regulatory basis or a justified practical need aimed at achieving the public interest without causing any harm to national interests, the activities of the agencies, the privacy of individuals, or the safety of the environment. Your personal data will only be available to authorized employees of the Municipality who need to view it to provide services. We may share your data with entities with which the Municipality cooperates based on agreements or memoranda of understanding to exchange data, for legitimate purposes, including providing services, and care is taken to share it in a secure and reliable environment and in accordance with the main principles and general rules for data sharing issued by the Saudi Data and Artificial Intelligence Authority (SDAIA).

Article Nine: The legal basis for processing your personal data

In accordance with the Personal Data Protection Law and its implementing regulations and the Personal Data Protection Policy issued by the National Data Management Office, the legal basis on which we rely to process this data is : :

. 1-The explicit consent provided by the user to collect and process his personal data through his approval of the privacy notice.

. 2-Fulfilling an official request from a government agency in accordance with its powers stipulated in national laws and regulations.

3-Achieving a legitimate interest to improve our services unless this violates the rights of the personal data owner or conflicts with his interests and such data is not sensitive data.

. 4-Preserving the vital interests of the personal data owner or protecting him from any harm.

5-Achieving the public interest by attempting to develop and improve joint government procedures, and the determinants and controls for this purpose are the systems and regulations.

Article 10: Storage of your personal data

In accordance with the general rules for transferring personal data outside geographical borders, your personal data will be stored and processed in a secure manner within the geographical borders of the Kingdom of Saudi Arabia, as your personal data will be protected with the best technologies in accordance with the policies and controls of the National Cybersecurity Authority and international standards to ensure that there is no unauthorized access and to reduce cyber risks, in order to ensure the preservation of the national digital sovereignty of this data, with the exception of the cases stipulated in Article (Twenty-Nine) of the Personal Data Protection Law when it is necessary to transfer or process data outside the geographical borders of the Kingdom. The Qassim Region Municipality will dispose of and destroy personal data in a secure manner that prevents its loss, misuse, or unauthorized access, in accordance with the relevant regulations and instructions. However, it may retain this data after the purpose of its collection has ended .

Article Eleven: Your Rights Regarding the Processing of Your Personal Data

Qassim Region Municipality places the protection of personal data of beneficiaries of its services at the top of its list of priorities. The municipality makes efforts to provide high-quality service to beneficiaries, and you have the following rights::

. 1-The right to be informed, including being informed of the legal justification for collecting your personal data and the purpose of collecting it.

2-The right to access your personal data in accordance with the controls and procedures specified by the regulations, without prejudice to what is stated in Article (Nine) of the Personal Data Protection System.

3-The right to request to obtain your personal data in a readable and clear format, in accordance with the controls and procedures specified by the regulations.

. 4-The right to request to correct, complete, or update your personal data.

5-The right to request the destruction of your personal data that is no longer needed, without prejudice to what is stipulated in Article (Eighteen) of the Personal Data Protection System.

We would like to note that some or all of these rights may be subject to certain exceptions and exemptions specified by the Personal Data Protection Law, and they will be evaluated on a case-by-case basis to ensure their compliance with those exceptions. This notice specifies how to exercise those statutory rights of the data subject.

Article Eleven: Personal Data Protection Officer

Name: Data Management Office, Qassim Region Municipality

. Email: Dmo@qassim.gov.sa

Article Twelve: Complaints and Inquiries

In case of any complaints or inquiries related to the privacy policy or handling of personal data, please contact the Personal Data Protection Officer : via email (Dmo@qassim.gov.sa)

Article Thirteen: Relevant Legislative References

For more information on the referenced policies and laws mentioned in this notice, you can visit one of the following links:

Privacy Policy