Introduction
(Health Holding Company), referred to here as (Health Holding), is committed to respecting the privacy of users' personal data or sensitive personal data they share with (Health Holding) in accordance with the Personal Data Protection Law and its regulations, as well as applicable data protection standards in the Kingdom of Saudi Arabia. Health Holding will use the user's personal data only to provide the services requested from Health Holding.
This notice applies to all users and visitors (hereinafter referred to as 'the user' or 'the personal data owner') who have access to or use the (Health Holding) website.
The purpose of this notice is to inform the user of the following:
The type of data that (Health Holding) may collect about the user when using the (Health Holding) website, and the purpose of collecting it.
The use of the data collected from the user and the parties with whom the data is shared.
The user's rights regarding their personal data.
Collection of Personal Data
(Health Holding) may obtain data about the user when they use the (Health Holding) website.
Types of Personal Data Collected by (Health Holding)
Data provided by the user to (Health Holding)
(Health Holding) may collect personal data directly from the user as part of providing services on the website, which may include email, mobile phone number, job position, first name, last name, CV, date of birth, nationality, or any other personal data the user provides to (Health Holding) through the website.
Automatically Collected Data
(Health Holding) may automatically collect certain personal data sent by the user's browser each time they visit the website, such as data collected through cookies or other tracking technologies. For more information about Health Holding's use of cookies, please read Health Holding's Cookie Notice.
Methods of Collecting Personal Data
(Health Holding) may generally collect the user's personal data either directly or indirectly. This can occur through the user's interaction with the (Health Holding) website, other social media platforms, phones, email, or correspondence with (Health Holding).
Use of Personal Data
(Health Holding) may use the user’s data collected directly or indirectly to perform its duties and responsibilities as an organization, such as:
Creating a user account – if necessary – allowing the user to log in with a username and password and access the various services provided by the website.
Data provided by the user during the account registration process, their CV, jobs they applied for, and messages sent or received from this website or a third party.
Responding to user inquiries that may require making their personal data visible to the support team at (Health Holding).
Conducting quality checks to enhance the services provided by (Health Holding).
Disclosure of Personal Data
(Health Holding) will not share the user's data with third parties for marketing purposes. Health Holding reserves the right to disclose the user's personal data in the following cases:
When the user consents to the disclosure of their personal data.
When personal data is collected from a publicly available source.
Upon request by a public authority, provided that the request is for the public interest, security purposes, or to implement other laws, or to meet legal requirements in accordance with the provisions of the Personal Data Protection Law of Saudi Arabia.
When disclosure is necessary to protect health, public safety, or the life or health of specific individuals.
When disclosure is done in a way that does not reveal the user’s or other individuals' identity.
When disclosure is necessary to achieve the legitimate interests of (Health Holding), provided that this does not infringe on the user’s rights or conflict with their interests.
Rights of Personal Data Owners
(Health Holding) makes every effort to provide high-quality services to all personal data owners, ensuring their rights within the limits specified in the Personal Data Protection Law and other systems, as follows:
The right to be informed: The personal data owner has the right to be informed when their personal data is collected and used, including the reasons and methods for collecting their personal data, the purposes for processing it, the retention periods, with whom it will be shared, and the security measures (Health Holding) has taken to protect this data and individual user rights.
The right to request access: The personal data owner has the right to access their personal data in a clear and readable manner. They also have the right to obtain a copy of the data, with (Health Holding) reserving the right not to process the request in certain cases outlined in the law.
The right to update: The personal data owner has the right to request the correction, completion, or modification of their data.
The right to erasure: The personal data owner has the right to request the erasure of their personal data under the following circumstances:
a. If the personal data owner deems that (Health Holding) no longer needs the data for the purposes for which it was collected.
b. If the personal data owner validly objects to (Health Holding)'s use of their personal data.
c. If (Health Holding)'s use of the personal data owner’s data violates the law or its other legal obligations.
d. If the personal data owner withdraws their consent to the collection and processing of their personal data, and their consent is the sole legal basis for processing.
The right to withdraw consent: The personal data owner has the right to withdraw their consent to the collection and processing of their personal data, unless legal or judicial requirements state otherwise.
The right to lodge a complaint: The personal data owner has the right to file a complaint with the competent authorities if they feel their rights have not been respected. They can submit a request to exercise their rights through the following steps:
Download and complete the Personal Data Owner Request Form. (Contact Us Form)
Send the form to the email address (info@health.sa)
Legal Bases for Processing Personal Data
The following are the legal bases for processing personal data. Any processing activity that meets one of the following conditions is considered lawful in accordance with the applicable regulations in the Kingdom of Saudi Arabia:
The user's consent to process their personal data for a specific purpose. (Health Holding) will inform them, and (Health Holding) may process the user's personal data without obtaining their consent in the following cases:
a. If the processing serves a specific interest for the user and it is impossible or difficult to contact them.
b. If the processing is based on a preliminary contractual agreement with the user, or is in accordance with applicable laws.
c. If the processing is for judicial or security purposes by a public authority.
d. If the personal data is publicly available or collected from a public source.
Seeking to achieve a legitimate interest for (Health Holding) or the user.
Serving the public interest or fulfilling an official request from an authority according to its roles.
Executing an agreement to which the user is a party.
Personal Data Security
(Health Holding) will take appropriate steps to protect the personal data shared by the user with (Health Holding). We also implement measures to protect the personal data you provide against accidental or unlawful destruction, unauthorized access, loss, alteration, or disclosure. However, we cannot guarantee that such incidents will not occur, and (Health Holding) cannot be held responsible for unauthorized or accidental access beyond its control. (Health Holding) periodically reviews its security measures to keep up with regulatory changes.
Complaints and Inquiries
The Personal Data Protection Officer at (Health Holding) can be reached via email at (info@health.sa) to address any questions or concerns regarding this privacy notice.