Privacy Policy

Marcom Arabia Privacy Policy

Issued May 16, 2024
Effective Jun 01, 2024
_{Reference Document: PRJ02-AP108 v1.0}

1. PURPOSE

Marcom is committed to the protection of personal data. This policy governs the handling of personal data collected through our website, ensuring compliance with the Personal Data Protection Law of Saudi Arabia and the UAE's Federal Decree-Law No. 45 of 2021 on Personal Data Protection.

2. SCOPE

This policy applies to all personal data processed by Marcom, collected through the website from users residing in or outside Saudi Arabia and the UAE.

3. POLICY STATEMENT

This policy describes the roles of using data in terms of:

Data Collection.
Data Usage.
Data Security.
Data Access and Correction.
Contact MARCOM.

In this Policy, the following verbal forms are used:

“shall” indicates a requirement;
“should” indicates a recommendation;
“may” indicates a permission;
“can” indicates a possibility or a capability.

4 DATA COLLECTION

Types of Data Collected: We collect personal data including, but not limited to, names, addresses, email addresses, payment information, and geographical locations.
Method of Collection: Data is collected through online forms, cookies, and during user interactions such as event registrations and blog posts.
Transparency and Notification
- Before Collecting Personal Data
  - Saudi Law: Informed about the purpose of data collection and potential disclosures as required by Article 4 of the PDPL. Users will be specifically informed about:
    - The purpose of data collection.
    - The entities to which their personal data may be disclosed.
    - The purposes for such disclosures.
  - UAE Law: Explicit consent is obtained before collecting personal data, in compliance with Article 9 of the Federal Decree-Law. Users are provided with information about:
    - The specifics of the personal data being collected.
    - The purpose of the data processing.
    - The rights of the data subject concerning their personal data.
- Consent Requirements:
  - Saudi Law: As dictated by Article 5 of the PDPL, explicit consent must be obtained for any processing activities that are not exempted by law.
  - UAE Law: According to Article 6 of the Federal Decree-Law, consent must be specific, informed, and an unequivocal affirmative action that indicates agreement to the processing of personal data.
- Notification of Data Subject Rights:
  - Saudi Law: In accordance with Article 4 of the PDPL, data subjects are informed of their rights to access, correct, and request the deletion of their data.
  - UAE Law: Under Articles 13 to 18 of the Federal Decree-Law, data subjects are informed about their comprehensive rights including access, rectification, erasure, and the right to object to data processing.
- Disclosure of Data Transfers:
  - Saudi Law: Conditions under which personal data may be transferred outside the kingdom are outlined in Article 15 of the PDPL, requiring adequate protection measures.
  - UAE Law: Article 22 of the Federal Decree-Law details the conditions for cross-border processing and sharing of personal data, ensuring adequate protection measures are in place.

5 DATA USAGE

Purposes for Data Collection:
- We collect personal data for several specific purposes, including facilitating online registrations, improving website content, managing customer interactions, and communicating with subscribers regarding our services and events.
Direct Marketing:
- Saudi Law: According to Article 10 of the PDPL, personal data may be used for direct marketing purposes only with the explicit consent of the data subject. We ensure that all marketing activities are conducted in compliance with this requirement.
- UAE Law: In line with Article 21 of the Federal Decree-Law, personal data will be used for marketing only after obtaining clear and explicit consent from the data subjects. This includes providing detailed information about the nature of marketing and the frequency of communications.
- Personal data may also be used to analyze website usage patterns and user preferences to enhance the usability and effectiveness of our website. This analysis is conducted in a way that ensures the anonymity and privacy of our users.
Analytical Use:
- Personal data may also be used to analyze website usage patterns and user preferences to enhance the usability and effectiveness of our website. This analysis is conducted in a way that ensures the anonymity and privacy of our users.
Legal Compliance and Law Enforcement:
- Saudi Law: Under Article 5 of the PDPL, we may process personal data without prior consent if it is necessary for compliance with a legal obligation to which we are subject.
- UAE Law: As stipulated in Article 4 of the Federal Decree-Law, personal data may be processed if it is necessary for compliance with a legal obligation or for the performance of a task carried out in the public interest.
Data Minimization and Limitation:
- We adhere to the principles of data minimization and limitation, ensuring that only the data necessary for the specified purposes are collected and processed, as required by Article 4 of the PDPL and Article 5 of the Federal Decree-Law.

6 DATA SECURITY

Security Measures: Implementing robust measures including 256-bit encryption to protect personal data from unauthorized access, alteration, and destruction.
Data Integrity: Ensuring data accuracy, completeness, and timeliness as required by Article 14 of the PDPL and Article 5 of the Federal Decree-Law.

7 DATA ACCESS AND CORRECTION

Updating Information: Individuals have the right to access, correct, or update their personal data at any time without charge.
Modification and Deletion: Data subjects may request modifications or deletion of their personal data in compliance with Article 5 of the PDPL and Articles 15 and 17 of the Federal Decree-Law.

8 RIGHTS OF DATA SUBJECTS

Comprehensive Rights: Data subjects have rights to access, correction, deletion, and restriction of processing as detailed in Articles 4 and 5 of the PDPL and Articles 13 to 18 of the Federal Decree-Law.
Consent Withdrawal: Data subjects have the right to withdraw consent at any time, as stipulated in Article 5 of the PDPL and Article 6 of the Federal Decree-Law, affecting the processing of their personal data.

9 DATA SHARING

Sharing Practices: Personal data may be shared with third-party service providers under strict confidentiality agreements to assist with our business operations.
Legal Compliance: We may also disclose personal data to comply with legal obligations or in response to lawful requests by public authorities.
Transfers: Any transfer of personal data outside of Saudi Arabia and UAE will comply with PDPL and Federal Decree-Law requirements, ensuring an adequate level of data protection.

10 CONTACT INFORMATION

For inquiries, exercising data subject rights, or concerns regarding our privacy practices, please contact:

Address: Marcom Building, 1st Floor, Northern Ring Road Exit 6, Abu Bakr Assidiqu Road, Al Ghat Street, Riyadh, Saudi Arabia.
Email: data.privacy@marcomarabia.net
Phone: +966 1 2002722

11 CHANGES TO THE POLICY

This policy is reviewed periodically and may be updated to reflect changes in our practices or in response to legislative changes. Users will be notified of significant changes.

12 EFFECTIVE DATE

This policy is effective as of 2024-06-01.