ASTRA Group ("AG") is committed to protecting personal data and safeguarding the privacy of individuals who interact with its services and systems. AG applies the necessary administrative and technical measures in compliance with relevant regulations, laws, and policies to ensure that personal data is handled appropriately. Personal data will only be shared or disclosed in accordance with legal obligations and legitimate business purposes. AG also ensures that your data is protected in line with regulations set by the National Cybersecurity Authority.
This Privacy Notice is intended to help individuals, including employees, vendors, and customers, understand the type of personal data we collect and process through various channels, the reasons for collecting and processing it, what we do with it, and with whom we may share it.
By using AG’s services or accessing its platforms, you acknowledge and consent to this Privacy Notice and any substantive changes made to it. We encourage you to periodically review the Privacy Notice to stay informed.
You may withdraw consent at any time unless there is another legislative basis, by sending an email to the Data Protection Officer ([email protected]).
Personal Data refers to any information that can be used to identify you, directly or indirectly, either alone or when combined with other information. This may include but is not limited to:
Processing refers to any operation performed on personal data, such as collecting, using, storing, sharing, modifying, printing, copying, archiving, deleting, or disclosing it.
AG processes personal data in accordance with the Personal Data Protection Law and its amendments. The following legal bases may apply when processing your personal data:
AG may process your personal data for various business-related reasons, including but not limited to:
Collection and processing of your personal data is mandatory to enable AG to implement its tasks to provide you with a high level of services. Please be aware that if you do not complete collecting your personal data, you will not be able to get services that provides, regarding the manner we use to collect your personal data, whether directly from you, or indirectly from third parties, for example Absher Platform, the Ministry of Human Resources and Social Development. If your personal data changes, please keep us updated by contacting our Personal Data Protection Officer at [email protected]
outlined in this Privacy Notice. However, in specific situations, we may collect data from other sources or process it for additional purposes, including:
This Privacy Notice provides information about your rights. Under certain circumstances and in accordance with the Law, you may exercise the following rights:
| 1. | Right to be informed: | you are entitled to be informed of the valid legal or practical justification for collecting your Personal Data, and the purpose thereof, and that your Personal Data should not be processed later in a manner inconsistent with the purpose for which it was collected, or in cases other than those specified in section 5 of the Notice herein. |
| 2. | Right to have access to your Personal Data: | you are entitled to have access to your Personal Data that is available to us, which includes accessing it, and obtaining a copy thereof in a format that is clear and identical to the content of the records. |
| 3. | Right to request correction, completion or updating: | you are entitled to request correction, completion or updating of your Personal Data which is available to us. |
| 4. | Right to be notified | In the event of a data breach involving a leak, damage, or unauthorized access to your personal data, the data controller is legally obligated to promptly notify both the relevant regulatory authority and you, (the data subject), if the breach poses a risk to your Personal Data. |
| 5. | Right to request erasure (destruction): | you are entitled to request erasure (destruction) of your Personal Data available to us, which is no longer required by us (subject to compliance of the requirements of the Law). |
| 6. | Lodge complaints – You have a right to lodge a complaint with the regulator. | If you wish to raise a complaint on how we have handled your personal Data ,you can contact our DPO at [email protected] who will investigate the matter. We hope that we can address any concerns you may have, but you can always contact the competent authority for lodging complaints. |
Please contact us if you would like to know more about the above rights or if you would like to exercise any of these rights.
In certain circumstances, AG may need to transfer your personal data outside the Kingdom of Saudi Arabia. If such a transfer is required, AG will ensure compliance with applicable legal requirements and obtain the necessary approvals from regulatory authorities, as required by the Personal Data Protection Law.
AG prioritizes the protection of your personal data and complies with all applicable data protection laws. We implement policies and regulations to ensure that personal data is handled securely. Access to personal data is restricted to authorized personnel who require it to perform their job functions, in accordance with AG’s internal policies.
with the relevant laws, regulations and policies. We may take additional steps to ensure the protection of your data by signing an agreement to share data between the AG and other parties according to specific terms and conditions consistent to the principles of data sharing.
We will arrange safe storage of your Personal Data in systems and servers of the AG. The servers are protected and governed according to the regulations issued by the National Cybersecurity Authority and the Saudi Data and Artificial Intelligence Authority. Personal data will only be available to AG employees who need to view and use it in accordance with the employees’ tasks and responsibilities.
Your personal data will be retained for as long as necessary to fulfill the purposes outlined here and as required by law, after which it will be securely disposed of.
If we no longer need your Personal Data and if we do not have any legal basis to hold it further, we will arrange its erasure, anonymization or return to you (unless we must return it to any other entity based on our legal obligations). We will ensure that:
For any inquiries please feel free to reach out to our Data Protection Officer (DPO): [email protected]
I acknowledge that I have read, understand, and agree to the terms of the Privacy Notice as it explains how my personal data will be used, and that I am aware about my rights.
I agree to use my personal data in accordance with the Privacy Notice. I acknowledge that the AG will use my personal data for the purposes described in the Privacy Notice. I understand that I can withdraw consent to use my personal data at any time.