Privacy Policy
Introduction
King Saud bin Abdulaziz University for Health Sciences (KSAU-HS) is a specialized academic institution in the field of health sciences. It offers academic and training programs across various health disciplines, targeting undergraduate and postgraduate students, healthcare practitioners, academic and medical institutions, and researchers. The KSAU-HS portal (ksau-hs.edu.sa) places the confidentiality of its users' and visitors' information as a top priority. Its goal is to provide high-quality services to all beneficiaries while maintaining the highest levels of privacy. Using the University's website, platforms, and applications constitutes the user's acceptance of the Privacy Policy. Based on this acceptance, the University only collects personal data provided voluntarily by the user. The collection is limited to the minimum personal data necessary to fulfill the purposes outlined in this policy.
Personal data: refers to any information - regardless of its source or form - that can identify the user specifically or make them identifiable directly or indirectly. This includes, but is not limited to: (names, national ID numbers, addresses, contact numbers, license numbers, personal property, bank account numbers, credit card numbers, user photos, emails, and other personally identifiable data.)
Sensitive data: refers to any personal information related to an individual's racial or ethnic origin, religious, ideological, or political beliefs. It also includes security and criminal data, biometric data used to identify the individual, genetic data, health data, and data indicating that the individual is of unknown parentage or has one unknown parent.
Contact Information
You can contact us through the contact information below.
|
Responsible Department |
Data Management Department |
|
Address |
Prince Muteb Bin Abdullah Road, Al-Rimayah, Riyadh |
|
Phone Number |
01149299999 |
|
Email |
DQM-DMD@ksau-hs.edu.sa |
Personal Data to be Collected and Purpose
Below are examples of the main types of personal data to be collected and processed:
- User-entered data: Required during registration through University-provided channels (e.g., names, national ID numbers, addresses, contact numbers, user photos, etc.).
- Payment data: (e.g., data collected for payment processing, bank account numbers, and credit card information).
- Exchanged data: During communication with us (e.g., support requests and reports submitted by you).
- Sensitive data: Includes security screening data (from security and judicial entities) for applicants to the University. Your explicit consent is a requirement for processing sensitive data.
Purpose of Collecting Personal Data
Personal data is collected and processed for several purposes, including but not limited to:
- Meeting legal and regulatory requirements.
- Candidate evaluation for jobs, training, and academic opportunities.
- Fulfilling required data for services and electronic transactions.
- Understanding visitor needs to improve products and services.
- Allowing users access to government services and completing transactions.
- Analyzing data and generating reports to meet business requirements such as statistical reports.
- Addressing and resolving inquiries or complaints and improving user experience across all University communication channels.
Methods of Collecting Personal Data
- Personal data entered by the user, which is required when registering through the University-provided channels.
- Personal data collected indirectly via cookies when visiting the website.
Storage and Disposal of Personal Data
Personal data is stored within the Kingdom of Saudi Arabia on servers managed by the General Directorate of Information Technology and Health Informatics at the University. These servers are protected using the best technologies in compliance with the policies and regulations of the National Cybersecurity Authority and international standards to prevent unauthorized access and reduce cybersecurity risks. Data will be securely destroyed once the purpose of collection is fulfilled using safe methods that prevent recovery or access in accordance with University policies.
Legal Grounds for Collecting and Processing Personal Data
KSAU-HS collects and processes personal data based on one of the following legal grounds:
- Explicit consent from the data subject or their legal guardian.
- To fulfill a contractual obligation (including employment, projects, services, etc.).
- To fulfill a legal obligation (including civil, service laws, labor regulations, etc.).
- To protect vital interests (including health and life-related aspects).
- To serve the public interest (including all aspects related to public benefit).
- To achieve legitimate interests or goals (including those specific to the University).
Collection and processing are conducted in accordance with the University’s Personal Data Protection Policy and the Personal Data Protection Law issued by Royal Decree No. (M/19) dated 09/02/1443H and amended by Royal Decree No. (M/148) dated 05/09/1444H.Users may withdraw their consent to the collection and processing of their personal data at any time unless another legal basis applies. To do so, contact the Data Management Department at:
DQM-DMD@ksau-hs.edu.sa
Data Subject Rights
According to the University’s Personal Data Protection Policy, data subjects have the following rights:
- The right to be informed: The data subject has the right to be informed about the purpose of collecting and processing personal data, the legal basis, data content, collection method, storage mechanism, and disclosure recipients. The privacy policy is one of the means through which this right may be exercised.
- The right to access your personal data: The data subject has the right to view their personal data via available channels or by contacting the email provided in the Contact Information section. A response will be provided within thirty (30) days.
- The right to request your personal data: The data subject has the right to request their personal data in a readable and clear format, when technically feasible, via the available channels or by contacting the email provided in the Contact Information section. A response will be provided within thirty (30) days.
- The right to correct your personal data: The data subject has the right to request correction of their personal data if it is found to be inaccurate, incorrect, or incomplete via official University channels or the email provided in the Contact Information section. A response will be provided within thirty (30) days.
- The right to destroy your personal data: The data subject has the right to request destruction of their personal data once the purpose of its collection and processing is fulfilled, as long as this does not conflict with legal grounds and retention periods.
- The right to withdraw your consent to data processing: The data subject may withdraw consent to the collection, processing, storage, sharing, or disclosure of their personal data at any time unless a legal basis requires otherwise.
Sharing Your Personal Data
Personal data will not be disclosed to other entities without the user's consent or a legal basis, except for exempted entities or requests based on royal orders.
Potential Risks and Impacts
There are no foreseeable risks associated with not completing the personal data collection process; however, the impact may include being ineligible for jobs, training, or academic opportunities announced on the University's website.
External Links
This policy applies to the official KSAU-HS portal (ksau-hs.edu.sa) and all platforms providing University services. If you navigate to another website or platform through (ksau-hs.edu.sa)), the University is not responsible for the content, usage, performance, or any issues arising from use of those websites. Users are solely responsible for their actions while browsing external websites through links found on this site and should read the privacy policy of each external site to understand its practices.
Inquiries and Complaints
If you have any complaints or inquiries regarding the Privacy Policy or wish to exercise any of your rights, you may contact the Data Protection Officer via email:
DQM-DMD@ksau-hs.edu.sa
Last Updated
We recommend checking the Privacy Policy periodically for any updates. The last update was on 16/01/2025.
Page Content
Last modified date: 08/08/2025 - 2:13 PM Saudi time