Main Page Privacy policy

Privacy policy

What is the Privacy Policy?

The Saudi Water Authority is concerned with all aspects of the water system at the supervisory and regulatory level and provides strategic support to the sector through regulatory control and supervision, sustainable water management, service improvement, capacity building and economic growth, innovation and technology, and environmental protection.

The authority's role in promoting the sustainability of the water and environment sector and performing several roles are:

- Consumer Protection:

Through regulating water resources and ensuring their sustainable use, monitoring the quality of services provided, working to raise community awareness about the importance of water conservation, and providing various communication channels to receive complaints and feedback.

- Supervision of Strategic Directions Implementation:

Integration with national strategies, programs for localizing the water sector industry and increasing local content, programs for applying environmental and social standards and quality of life, and programs to enhance research, innovation and international cooperation for water solutions.

- Water Sector Regulation:

Issuing licenses, permits and guidelines related to entities and operational assets, determining specifications and controls for water quality and associated services, and regulating commercial agreements in the water sector.

- Water Security Planning and Management:

Integration of water supply chain projects and services and maximizing benefits, ensuring the availability of water security requirements and developing necessary plans and programs, and monitoring and analyzing data and measuring the performance of services and projects.

Based on the Authority's concern for the importance of protecting personal data related to users and visitors, this document was prepared in accordance with the Personal Data Protection Law and its executive regulations for the purpose of clarifying the mechanism for collecting personal data and how it is handled by the Authority.

What personal data will be collected?

Personal data, wherever mentioned, refers to data that is shared with the Authority for the purpose of providing a specific service, including:

First: Complaints and Reports Data:

- Full name, national ID or residence number, phone number, region, relevant authority, complaint number, complaint subject, file attachments*, location, type (water/sewage), leakage amount, description*, leakage image.

Second: Billing Account Data:

- Customer category, meter size (mm), number of units, sewage connection, billing cycle (days), water consumption.

Third: Electronic Data:

- IP address, electronic account information: username, email, password, geographic location information.

Fourth: Data Used in Cooperative Training Applications:

- Personal data: Name, mobile number, email, date of birth, city, nationality, ID number, gender.

- Training data: Training letter from university, academic qualification (academic qualification, university name, expected graduation year, specialization, GPA), CV file*.

Fifth: Data Used in Job Applications (Recent Graduates):

- Personal data: Name, date of birth, gender, ID/residence/passport number, ID type*, nationality, address*, city, mobile number, email.

- Job data: Job title, language, certificates, skills and academic qualifications, CV file.

Sixth: Data Used in Job Applications (Experienced):

- Personal data: Name, date of birth, gender, ID/residence/passport number, ID type*, nationality, address*, mobile number, email.

- Job data: Job title, previous work experience, employment history, languages, certificates, skills, professional and academic qualifications, years of experience, CV file, expected salary*.

- Post-employment data: Employee family record, parents' ID, father's family record, bank account number, national address, medical records or health conditions (for employees), recent personal photo.

Seventh: Social Data:

- Information about social status (such as marital status, number of children)*.

Note: All fields ending with "*" are optional (not mandatory).

What is the legal basis for collecting and processing personal data?

In accordance with the Personal Data Protection Law in the Kingdom of Saudi Arabia and its executive regulations, the Saudi Water Authority relies on the following legal bases for collecting and processing personal data:

1. Compliance with regulations and bylaws:

- Personal data collection is carried out in accordance with the Personal Data Protection Law and its executive regulations.

- Personal data is collected to ensure compliance with relevant laws and regulations, such as compliance monitoring, fee collection, and issuance of licenses.

2. Fulfillment of duties and responsibilities:

- Data is collected and processed to fulfill the duties and responsibilities assigned to the Authority, such as providing services, programs, and initiatives offered by the Authority through its official website and affiliated sites. This includes issuing licenses, improving beneficiary experience, and ensuring the quality of services provided.

3. Achievement of development goals:

- Personal data is collected and processed to support the water strategy that aligns with Saudi Vision 2030, including achieving developmental and economic goals.

4. Explicit consent:

- Personal data is collected and processed based on explicit consent from the data owner or their legal representative.

- In specific cases, personal data is collected and processed based on public interest or security purposes, in accordance with the Personal Data Protection Law and its executive regulations.

5. Responding to official requests:

- Personal data is collected and processed when receiving an official request from an authorized government entity in cases related to public interest or security purposes, in accordance with relevant regulations and laws followed in the Kingdom of Saudi Arabia.

6. Implementation of agreements:

- Personal data is collected and processed when the data owner is a party to an agreement with the Authority, and this is done in accordance with the terms of the agreement and relevant regulations.

7. Conducting studies and research:

- Personal data is collected and processed for conducting surveys, interviews, and issuing statistical reports that serve work requirements and improve services, including studying and developing the water sector in the Kingdom of Saudi Arabia.

What are the methods of collecting personal data and the purpose of its collection?

The Authority is committed to processing personal data in accordance with the provisions of the Personal Data Protection Law and its executive regulations. The collection and processing of personal data is considered necessary to provide the best level of services.

• Personal data is collected by the Authority directly or indirectly:

Direct Collection:

- Direct collection from the data owner or their legal representative through providing services, initiatives, programs, or licenses. For example, but not limited to (name, phone number, username, academic qualification, national address, ID number, commercial registration, license number).

Indirect Collection:

- Indirect collection through servers and cookies to improve user experience. For example, but not limited to (statistics of user visits to the Authority's website).

What are the consequences of not providing personal data?

Our inability to provide services including but not limited to (complaints and reports, billing accounts, training, employment).

Preventing access to certain features, or affecting the user experience and ensuring compliance with regulatory requirements.

How is personal data processed?

The personal data collected is processed to perform the tasks and responsibilities assigned to the Authority and in a manner that achieves the purposes specified in this document. Personal data will not be processed except by those authorized to do so according to their competencies, and according to what is specified by the approved policies for this purpose. Failure to collect your personal data may affect your ability to benefit from the services provided by the Authority.

Is personal data shared?

The Authority is committed to the Personal Data Protection Law and its executive regulations and the data sharing policies and controls issued by regulatory authorities. Personal data will not be shared or disclosed to any party outside the Authority except in accordance with the disclosure cases specified in the Personal Data Protection Law and its executive regulations.

How is your personal data stored, retained, and destroyed?

Secure Storage:

Your personal data is securely stored at the Authority's headquarters or on approved servers within the Kingdom of Saudi Arabia, with the application of the highest security standards such as encryption and access management.

Retention Period:

The Authority retains data for the period necessary to achieve the purposes for which it was collected, or to fulfill legal and regulatory obligations.

Data Destruction:

After the purpose of data collection has ended or the legal period has expired, data is destroyed securely in a way that does not allow it to be retrieved or accessed again.

Exceptional Cases:

The Authority may retain data for longer periods in specific cases, such as the existence of a legal requirement or data being associated with regulatory matters.

What are the rights of personal data subjects?

Users enjoy the following rights:

1.

Right to Know:

You have the right to know how we collect personal data, the legal basis for its collection, how it is processed, stored, destroyed, and to whom it will be disclosed.

2.

Right to Access:

You can request to view your personal data.

3.

Right to Rectification:

You can request to correct any inaccurate data, and it will be reviewed, updated, and you will be notified within thirty days.

4.

Right to Erasure:

You can request the deletion of your data after the purpose for which it was collected has ended, in a manner that does not conflict with regulatory requirements and destruction restrictions.

5.

Right to Object:

You can object to the processing of your data in certain cases.

6.

Right to Withdraw Consent:

You can withdraw your consent to the processing of your data at any time, unless there are regulatory requirements that require otherwise.

To implement any of these rights, please contact us via email: [email protected]

Would you like to contact us?

If you have any inquiries regarding the Privacy Notice, need assistance, or wish to file a complaint, please contact us through the Unified Contact Center for Corporate Services:

Authority Name:
Saudi Water Authority
Address:
Kingdom of Saudi Arabia - Riyadh - Prince Mohammed bin Abdulaziz Road
PO Box:
5968 Riyadh 11432 Olaya
Page Visitors: 0

Last update date: