Introduction:
The Ministry of National Guard portal, Sang.gov.sa, places the utmost importance on the confidentiality of its users' and visitors' information. The goal is to deliver high-quality services to all users while safeguarding privacy. This Privacy Policy is designed to help users understand the nature of the personal data collected and the purpose for its collection and processing. It is essential for users to be aware of how the Ministry of National Guard handles their personal data and their rights regarding its processing, in accordance with the relevant laws and regulations in the Kingdom of Saudi Arabia. This policy, along with the information provided below, forms part of the terms of use for the Ministry's electronic portal and its affiliated platforms.
1.Scope of the Privacy Policy:
The Privacy Policy is designed to establish the necessary controls to protect personal data within the Ministry of National Guard, while promoting the responsible and effective use of personal data in the context of government dealings and procedures. Personal data is collected and processed in compliance with the relevant laws and regulations of the Kingdom of Saudi Arabia. This policy applies to all employees, workers, contractors, experts, consultants, temporary staff, job and project applicants, and anyone interacting with the Ministry’s electronic platforms, including cloud services. All individuals involved with the Ministry must adhere to this policy. The Privacy Policy covers all personal data produced, received, or handled by the Ministry of National Guard.
2.Ownership of the Privacy Policy:
The Data Management Office at the Ministry of National Guard is responsible for the ownership of the Privacy Policy and for issuing any updated versions.
3.Data Collected:
a- Personal Data
The following are examples of the primary types of personal data collected:
- Data entered by the user: Required during registration on the Ministry’s platforms (e.g., names, personal identification numbers, addresses, contact numbers, user images, etc.).
- Payment Data: Includes data collected for payment processing purposes, such as bank account numbers and credit card information.
- Data exchanged during communication: (e.g. customer support requests and reports submitted by users).
b- Cookies
The website may store what are known as "cookies" on users' computers when they visit the portal. Cookies are small pieces of data that uniquely identify users as individuals. They can also be used to improve the experience on the website and to gain a better understanding of the portal's user base.
Most browsers are initially configured to accept cookies. However, users can adjust their browser settings to reject all cookies or to receive a notification when cookies are being sent. Please note that some services offered on this portal may not function properly if cookies are refused. Additionally, the Ministry may or may not link the information stored in cookies with any personally identifiable information provided by users on the site.
c- Geolocation
At times, users may be asked to consent to the collection of their geolocation data in order to access certain services provided through the portal and its application.
4.Methods of Collecting Personal Data:
Some of the personal data processed is collected either directly or indirectly through various methods, including:
a- Direct Collection of Personal Data:
Products or Services: When registering on the Ministry’s official platforms and using its products or services.
Communication: When interacting with the Ministry through the electronic portal or mobile applications.
Surveys: When conducting surveys, personal data may be collected. This data is used for analysis, research, and to improve the services provided by the Ministry of National Guard, as well as to enhance the customer experience. Additional information may be requested to meet development requirements.
b- Indirect Collection of Personal Data
Cookie Data:
Cookies collect data regarding your usage of our site, including the date and time of your visit, as well as the type of web browser you use. Personal data may also be obtained from other governmental or non-governmental sources, including, but not limited to: Absher services, NAFATH, banks, Yaqeen, telecommunications, and others.
5.How Personal Data is Collected:
When you visit the electronic portal Sang.gov.sa, the portal’s server automatically records your Internet Protocol (IP) address. (The IP address is a unique number assigned to the device you are using, which enables other devices connected to the internet to determine the destination of outgoing data. The server also collects some information, such as the type of browser and search engine, the date and time of your visit, and the URL of any website that referred you to the portal, but this is done without identifying your personal identity.
6.Links to Other Websites and Third Parties on the Internet:
This policy applies to Sang.gov.sa portal and all platforms associated with the services of the Ministry of National Guard. If you access another website or platform through (www.sang.gov.sa), you must review the privacy policy of that website or platform to understand its applicable information security measures and privacy practices.
7.Consent Management and Exercising Data Subject Rights
8.Legal Basis for the Collection and Processing of Personal Data by the Ministry of National Guard:
The Ministry of National Guard collects and processes personal data in accordance with data protection regulations and its approved internal policies, as endorsed by His Royal Highness, the Minister of National Guard. These policies include, but are not limited to, the Ministry’s Personal Data Protection Policy, the Personal Data Protection Policy of the National Data Management Office, and the Personal Data Protection Law issued by Royal Decree No. (M/19) dated September 17, 2021. This collection and processing are based on several legal grounds, including consent, vital interests, achieved interests, legitimate interests, and contractual obligations.
9.Acceptance of the Privacy Policy:
By using the Ministry of National Guard’s electronic portal, www.sang.gov.sa, platforms, and applications, you explicitly agree to the Privacy Policy. Your acceptance of this policy signifies your consent to the following: the collection, processing, storage, disclosure, and sharing of your personal data with government entities in accordance with legal and regulatory requirements, as well as the policies, controls, and conditions governing the portal and associated platforms. Users of the Ministry’s services, visitors to the electronic portal, and all platform users are required to regularly review the Privacy Policy and related policies to stay informed of any updates. Please note that the Ministry of National Guard is not obligated to announce updates to this policy. By continuing to use the portal, you acknowledge and accept the Privacy Policy, including any future updates or revisions. Moreover, you are solely responsible for ensuring the accuracy, completeness, and validity of any data you provide through this portal.
10.Purpose of Collecting Personal Data:
Personal data is collected and used for various purposes, including but not limited to:
- Complying with legal and regulatory obligations through the collection and processing of personal data.
- Obtaining necessary information to deliver electronic services and facilitate administrative procedures.
- Identifying the needs of visitors to improve products and services.
- Enabling users to access government services and complete administrative procedures.
- Conducting data analysis and preparing reports to meet operational requirements, such as statistical reporting.
- Responding to inquiries or complaints and enhancing the visitor experience across all communication channels provided by the Ministry.
11.Data Subject Rights Regarding Personal Data Processing:
Under the Personal Data Protection Policy issued by the Data Management Office at the Ministry, data subjects have the following rights, which are primarily based on the purpose of collecting and processing personal data:
- Right to be Informed: The data subject has the right to be informed about the purpose of collecting and processing their personal data, the legal basis for such processing, the types of data to be processed, the method of collection, the means of storage, and to whom the data will be disclosed. (The Privacy Policy is one of the means through which the data subject can exercise this right.)
- Right of Access to Personal Data: The data subject has the right to request a copy of their personal data through the available channels or via the contact email provided below. A response will be given within five (5) business days.
- Right to Rectify Personal Data: The data subject has the right to request the correction of any inaccurate, incorrect, or incomplete personal data. This can be done through the approved channels at the Ministry or via the contact email provided below. A response will be given within five (5) business days.
- Right to Erasure: The data subject has the right to request the deletion of their personal data once the purpose for its collection and processing has been fulfilled, under certain conditions, provided that it does not conflict with legal bases, legitimate interests, or the legal retention period.
- Right to Object: The data subject has the right to object to the (collection, processing, storage, sharing, or disclosure) of their personal data without their explicit or implicit consent, or if the processing is for direct marketing purposes.
- Right to Restrict Processing: The data subject has the right to request a restriction on the processing of their personal data for one or more purposes.
-
- Right to Data Portability: The data subject has the right to request the transfer of their personal data (being processed), which has been collected directly from them with their explicit consent, to any third party for a fee determined by the Ministry.
For more details on the processing of your personal data and how to exercise your rights, you can refer to the Personal Data Protection System issued by Royal Decree No. (M/19) dated September, 17, 2021 the Personal Data Protection Policy issued by the National Data Management Office, and the Personal Data Protection Policy approved by the Ministry's Data Management Office. Alternatively, you can contact the Data Management Office at the Ministry of National Guard.
12.Sharing of Personal Data:
Personal data is shared in specific ways and for legitimate purposes, based on legal grounds or a justified operational need aimed at serving the public interest, without compromising national interests, the activities of entities, individuals' privacy, or environmental integrity. Exceptions apply to data and entities exempted by royal decrees.
13. Obligations of the Ministry of National Guard:
The Ministry of National Guard is committed to implementing the highest security measures to protect the information you provide. The website encrypts sensitive data (such as personal information) or any data that must be kept confidential, in compliance with regulatory requirements, ensuring the protection of personal data from leakage, damage, loss, theft, misuse, alteration, or unauthorized access, in accordance with the directives of the National Cybersecurity Authority and other relevant bodies. It is important to note that personal data will be stored and processed within the geographical boundaries of the Kingdom to maintain national digital sovereignty over this data. Processing outside the Kingdom will only occur with written consent from the relevant regulatory authorities. Personal data will be retained as long as there is a legitimate purpose for its use and will be securely disposed of once no longer needed, ensuring it is not lost, misused, or accessed without authorization, in compliance with applicable laws and regulations.
14. Responsibility:
The Ministry of National Guard shall not be held liable under any circumstances for any direct, indirect, incidental, consequential, special, or exceptional damages arising from the use or inability to use this portal. It is the responsibility of the users of the portal and other electronic platforms to provide accurate data and ensure it is kept up to date.
15.For Inquiries, Complaints, or Objections:
If you have any complaints or inquiries regarding the Privacy Policy or wish to exercise any of the data subject rights, you can contact the Portal Management via email:
Dmo@sang.gov.sa.
16.Personal Data Protection Legislation:
17.Relevant Legislation: