Article One: Introduction
In accordance with the Personal Data Protection Law issued by Royal Decree No. (M/19) dated 9/2/1443H, amended by Royal Decree No. (M/148) dated 5/9/1444H, and its executive regulations, Jouf Region Municipality is keen to provide municipal services that meet the needs of beneficiaries and visitors, while providing a safe digital environment that respects user privacy.
This Privacy Policy aims to inform the user of the general rules relating to how personal data is collected and processed, the rights of the data subject, the mechanism for exercising these rights, the personal data collected and the methods of collection, the purposes for which it is used, in addition to the legal bases for collecting and processing personal data.
In commitment to maintaining the confidentiality and privacy of personal data, Jouf Region Municipality handles it in accordance with relevant regulations, bylaws, policies, and controls, including those issued by the Saudi Data and AI Authority (SDAIA).
Use of the Jouf Region Municipality website and its e-services is subject to the provisions of the applicable Privacy Policy, taking into account cases where the law requires obtaining the consent of the data subject.
Article Two: Personal Data to be Collected and Purpose of Collection
First: Personal Data to be Collected
Jouf Region Municipality collects personal data of website visitors and users of its services, platforms, and applications, directly or indirectly, including but not limited to:
- Personal data and information provided by the user: Such as name, ID number, address, contact information, date of birth, and other personal data, depending on the nature of the e-service used.
- Cookies data: Data collected through website logs, cookies, and related technologies (see Article Fourteen for more details).
- Personal data received from other sources: Jouf Region Municipality may receive personal data from government entities or other parties, when necessary to provide services or fulfill related legal or security requirements.
By providing his/her personal data and information through the Jouf Region Municipality website and its e-services and applications, the user acknowledges the accuracy of the data provided. The Municipality collects and processes data in accordance with the legal bases and purposes specified in this policy and relevant regulations.
Second: Purpose of Collecting Personal Data
Personal data is collected and used, depending on the nature of the service, to achieve legitimate purposes, including following up on requests, inquiries, suggestions, and complaints submitted by users, and providing, developing, and improving the quality of e-services.
Article Three: Methods of Data Collection
Personal data is collected through:
- Directly: Through data provided by the data subject to the Municipality when registering, using e-services, or communicating with the Municipality.
- Indirectly: Through cookies and related technologies when visiting the website, in accordance with applicable settings and policies.
Article Four: Use of Personal Data
Jouf Region Municipality collects, processes, and uses personal data for legitimate purposes consistent with relevant regulations and bylaws, including but not limited to:
- Following up on requests, inquiries, suggestions, and complaints submitted by the user.
- Providing e-services and completing related requests.
- Verifying user identity when needed.
- Monitoring and detecting any use that violates the terms and conditions of the website and e-services.
- Improving website and e-services performance and system and network security.
- Developing and improving the quality of services provided to beneficiaries.
Article Five: Storage and Destruction of Personal Data
Jouf Region Municipality stores personal data in a secure and reliable environment and takes appropriate administrative, organizational, and technical measures to protect personal data from unauthorized access, modification, disclosure, or loss, in accordance with relevant regulations, bylaws, and controls.
Personal data is retained for the period necessary to achieve the purposes for which it was collected, or as required by relevant regulations and bylaws, and is destroyed securely when the purpose of retention ends, unless there is a legal basis requiring retention for a longer period.
Article Six: Legal Basis for Collecting and Processing Personal Data
First: Legal Basis
Personal data is collected and processed in accordance with the legal bases stipulated in the Personal Data Protection Law, its executive regulations, and relevant regulations and bylaws, including cases where processing is based on the consent of the data subject, when legally required.
The user may inquire about the processing of his/her personal data or exercise related rights through the official communication channels available on the Jouf Region Municipality website.
Second: Data Processing
Processing of personal data means any operation performed on personal data by any means, manual or automated, including collection, recording, preservation, indexing, arrangement, coordination, storage, modification, updating, merging, retrieval, use, disclosure, transfer, publication, sharing, interconnection, blocking, erasure, and destruction.
Article Seven: Rights of Data Subjects
The data subject enjoys the rights granted under the Personal Data Protection Law and its executive regulations, including:
- Right to be informed: The data subject has the right to know the legal basis for collecting and processing his/her personal data, the purpose, how it is processed, stored, and destroyed, and the parties with whom it may be shared, in accordance with regulations.
- Right of access: The data subject has the right to request access to his/her personal data and obtain a copy of it in accordance with the legally specified controls, procedures, and timeframes.
- Right to request correction: The data subject has the right to request correction, completion, or updating of his/her personal data if it is inaccurate, incorrect, or incomplete, in accordance with approved controls and procedures.
- Right to request destruction: The data subject has the right to request destruction of his/her personal data in cases specified by the law, unless there is a legal basis requiring its retention.
- Right to withdraw consent: The data subject has the right to withdraw consent to the processing of his/her personal data when processing is based on consent, unless there is another legal basis requiring continued processing.
The data subject may exercise his/her rights through the official communication channels available on the Jouf Region Municipality website.
Article Eight: Data Sharing
Personal data collected through the Jouf Region Municipality website and its e-services is not shared or exchanged with other parties except in accordance with the cases and provisions stipulated in the Personal Data Protection Law, its executive regulations, and relevant regulations and bylaws.
Article Nine: External Links
The Jouf Region Municipality website and its e-services may from time to time contain links to other websites or platforms that may not be affiliated with the Municipality.
When navigating to any of these websites or platforms, it is advisable to review their privacy policies, as the Municipality bears no responsibility for the methods of collecting, processing, or protecting personal data used by those websites or platforms outside its scope of management.
Article Ten: Exercising the Rights of the Data Subject
The data subject has the right to request the exercise of his/her rights related to personal data, including access, correction, or destruction, in accordance with relevant regulations and bylaws.
Requests and inquiries related to personal data may be submitted through the official communication channels available on the Jouf Region Municipality website.
Article Eleven: Personal Data Protection Officer
Personal data is processed at Jouf Region Municipality in accordance with relevant regulations, bylaws, policies, and controls. Requests and inquiries from data subjects are handled through the Municipality's approved official communication channels.
Article Twelve: Complaints and Inquiries
In case of any complaints or inquiries related to the Privacy Policy or how personal data is handled, the user may contact Jouf Region Municipality through the official communication channels available on the website.
If the complaint is not addressed or the data subject is not satisfied with how it was handled, he/she may resort to the competent authority in accordance with the procedures and channels approved by the Saudi Data and AI Authority (SDAIA).
Article Thirteen: Privacy Policy Updates
Jouf Region Municipality is keen to review and update the Privacy Policy periodically in line with relevant regulations, bylaws, policies, and controls.
Any updates will be published on this page, and the updated version becomes effective from the date of publication, so it is advisable to review the Privacy Policy periodically to learn about its latest version.
Article Fourteen: Cookies Policy
First: What are Cookies?
Cookies are small text files stored on the user's device (computer or mobile) when visiting the Jouf Region Municipality website. They are used to remember user preferences, improve browsing experience, and analyze website performance. These files do not contain any information that directly identifies personal identity, nor are they used to run malicious software or transmit viruses.
Second: Types of Cookies Used
The Jouf Region Municipality website uses the following types of cookies:
- Essential Cookies: Necessary for the proper functioning of the website and cannot be disabled. Used to save sessions, verify security, and perform basic functions such as navigation and access to protected areas.
- Functional Cookies: Used to remember user preferences such as language (Arabic/English), theme (light/dark), and other personal settings, improving user experience upon returning to the website.
- Analytical Cookies: Used to collect anonymous statistical information about how visitors use the website, such as the number of visits, most visited pages, and browsing duration, with the aim of improving website performance and developing its content.
- Marketing Cookies: These files — if used — may be used to track the effectiveness of awareness or official advertising campaigns of Jouf Region Municipality, and to display content more relevant to visitor interests.
Third: Cookie Retention Period
- Session Cookies: Deleted automatically when the browser is closed.
- Persistent Cookies: Remain on the user's device for a specified period (ranging from days to months) or until manually deleted.
Fourth: How to Control Cookies
The user can manage or delete cookies through the browser settings. The method of management varies depending on the browser type. It should be noted that disabling some cookies — especially essential ones — may affect certain website features or e-services.
Fifth: Consent to Use Cookies
The user's continued use of the Jouf Region Municipality website constitutes explicit consent to the use of cookies in accordance with this Article. If the user does not agree, they may adjust browser settings to reject cookies or discontinue use of the website.