|
Type |
Data | |
|
Direct identifiers |
Indirect identifiers | |
|
Employees |
Full name National ID Personal photo Employee number Phone number Bank account number Fingerprint National address Certifications and documents details Employment contract |
Age Gender Salary Job ranking Job title Place of employment Date of birth Place of birth End of service
|
|
Students |
Full name National ID University ID number Academic transcript Certifications details GPA |
Age Gender Specialization Date of birth Place of birth
|
|
Scholarship students |
Full name National ID Personal photo Phone number Bank account number National address Certifications and documents details passport number |
Age Gender Specialization Date of birth Place of birth Study country Scholarship end date
|
|
Faculty members |
Full name National ID Personal photo employee number Phone number Bank account number National address Certifications and documents details University housing location Employment contract |
Age Gender Salary Academic degree Job title Place of employment Date of birth Place of birth End of service |
The main purposes for which personal data is used, including collecting and processing beneficiary data to improve and enhance the university's services, are:
Organizational and administrative purposes.
Completing requests and services for students, employees, or trainees.
Conducting analysis and statistics for decision-makers.
Sending awareness messages or messages related to the services provided.
Meeting judicial or security requirements.
Personal data is also used to complete the student admission process and follow-up on their educational journey, and to provide employers with your data after graduation.(students’)
Authenticating the user's identity when registering for university services.
Responding to requests and inquiries from beneficiaries.
Developing and improving the beneficiary experience.
Enabling and providing university services.
Preparing studies that serve the university.
Some of the personal data we process is obtained from you directly or indirectly, as stated above, using direct and indirect means for the following purposes:
The primary purposes for which personal data is used are to collect and process beneficiary data to improve and enhance the university's services:
Organizational and administrative purposes.
Completing requests and services for students, employees, or trainees.
Conducting analysis and statistics for decision-makers.
Sending awareness messages or messages related to the services provided.
Fulfilling judicial or security requirements.
Personal data is also used to complete the student admission process and follow-up on their educational journey, and to provide employers with your data after graduation.
Authenticating the user's identity when registering for university services.
Responding to requests and inquiries from beneficiaries.
Developing and improving the beneficiary experience.
Empowering and providing university services.
Preparing studies that serve the university.
Personal data collected, whether directly or indirectly, is used for the following purposes:
The primary purposes for which personal data of beneficiaries is collected and processed, with the aim of improving and enhancing the quality of the University’s services, include:
Personal data shall be accessible only to authorized University employees whose roles require such access in order to provide services. Where personal data is shared, the University ensures that it is exchanged within a secure and trusted environment, and in accordance with applicable laws, regulating policies. The University takes additional measures to safeguard personal data by executing data-sharing agreements with third parties under specific terms and conditions aligned with the principles of data sharing and exchange adopted by the University. Such sharing is carried out strictly for legitimate purposes, that are legally based or justified operational needs, aimed at serving the public interest without compromising individual privacy.
Data Sharing at the University
Data sharing within the University is conducted according to whether the sharing is internal or external:
In accordance with the Personal Data Protection System at the University of Tabuk, and in compliance with the Personal Data Protection Law and its implementing regulations, the legal basis we rely on for processing this data includes one or more of the following justifications:
(The applicable legal basis or bases may be selected from those outlined in the regulations).
Your explicit consent is required, and you may withdraw this consent at any time. However, withdrawal will not affect processing operations carried out under other legitimate legal bases. To do so, (In order to withdraw) please contact the Data Governance Unit or the University's Data Protection Officer using the contact information provided below.
Personal data will not be processed without taking adequate steps to ensure its accuracy, completeness, currency, and relevance to the purpose for which it was collected. The University applies the highest security standards to protect data and information. Sensitive data, and any data that must be kept confidential under legal requirements, is encrypted and subject to additional controls and procedures. In accordance with the Personal Data Protection Policy, the University collects and processes personal data based on the following regulatory foundations:
Your personal data is stored, processed, retained, and destroyed in a secure manner that prevents its loss, misuse, or unauthorized access, in accordance with the regulations and policies in effect at the University. This is done within the geographical boundaries of the Kingdom to ensure the preservation of national digital sovereignty over this data
|
Location |
Storage Method |
|
Within the university boundaries |
|
Under the Personal Data Protection Law, you have the following rights, which primarily depend on the purpose of collecting and processing your personal data:
Right to be Informed:
You have the right to know how we collect your personal data, the legal basis for its collection and processing, how it will be processed, stored, and destroyed, and to whom it will be disclosed. You can review all details through the Privacy Policy or contact us using the information provided below.
Right of Access to Your Personal Data:
You have the right to review your personal data and obtain a copy of it in a clear format identical to the contents of our records, free of charge – in accordance with applicable regulations – without prejudice to (Article 9) of the Personal Data Protection Law. (A request for a copy of personal data can be submitted, and the beneficiary will be provided with it within 30 days via the email registered in the request. If we need additional time to process the request, the beneficiary will be informed along with the expected time frame for completion.)
To exercise your right to access personal data or the right to have personal data destroyed, please submit your request via email, including your name, contact information, and details of the request. If the request is submitted on behalf of another person, an authorization signed by that person must be provided.
Right to Rectify Your Personal Data:
You have the right to request the correction of your personal data if you believe it is inaccurate, incorrect, or incomplete, by contacting the responsible department within the university. The data will be reviewed and updated within a specified period, and the beneficiary will be notified accordingly.
Right to Request the Destruction of Your Personal Data:
You are entitled to request the destruction of your personal data held by us when it is no longer necessary, without prejudice to the provisions of Article 18 of the Personal Data Protection Law. Once such a request is submitted, we reserve the right to assess its feasibility and determine whether the data can be destroyed without compromising our ability to provide future services or fulfill any regulatory obligations.
Right to Withdraw Consent for Processing Personal Data:
You have the right to revoke your consent to the processing of your personal data at any time, except where continued processing is required by law. Unless otherwise stipulated by law, you will not be required to pay any fees to exercise these rights. If a request to exercise any of these rights is submitted, you will receive a response within thirty (30) calendar days from the date of complete receipt of the request. Further information regarding the processing of personal data and the exercise of data subject rights may be obtained by contacting the Personal Data Protection Officer at the University of Tabuk, using the contact information provided at the end of this policy.
Implementation and Monitoring: The implementation of privacy and personal data protection policies shall be overseen by the Data Governance Unit in coordination with relevant departments, including the resolution of any disputes that may arise in this context. Personal data shall be assessed and classified by the owning departments based on its sensitivity, in accordance with the Privacy Classification Document. Appropriate controls shall then be applied in alignment with established policies and procedures to ensure the protection of such data.
Departments engaged in operational, consulting, or supply agreements with business partners, contractors, suppliers, or consultants shall be responsible for monitoring and auditing compliance with all applicable policies of the University of Tabuk. Additionally, the Data Governance Unit shall provide training to employees to support the effective implementation of this policy.
Contact information
|
Department\ Specialized Team |
Address:
|
Phone no.
|
Email:
|
|
Dr. Haifa Eid Abu Shuail |
Tabuk |
0144561211 |
In case of some concerns or not abiding by personal data protection system, you can file a complaint to personal data protection officer run by personal data protection office using one of the following channels:
|
Department\ Specialized Team |
Address |
Phone no.
|
|
|
Dr. Haifa Eid Abu Shuail |
Tabuk |
0144561211 | |
|
Data Governance Unit |
Tabuk-University City, Pharmacy Collegr Building 40 |
0144561211 |
If you are not satisfied with our procedures in complaint processing, or our reply within 30 days, you may file a complaint to the Saudi Data and AI Authority using Data Governance Platform
