This Privacy Policy describes how Debsa Built Environment® ("Debsa," "we," "us," or"our") collects, uses, processes, and protects your personal data when you visit andinteract with our website [debsa.com.sa].
We are committed to safeguarding your privacy and ensuring that your personal datais handled in compliance with the Personal Data Protection Law (Royal Decree No.M/19 dated 09/02/1443H, as amended) and other applicable laws and regulations inthe Kingdom of Saudi Arabia ("KSA").

1. Scope and Applicability

This Privacy Policy applies to any processing of personal data carried out by Debsa inthe KSA and to the processing of personal data of individuals residing in the KSA,regardless of where such processing takes place.

2. Legal Basis for Processing

We will only collect and process your personal data when we have a lawful basis to doso. This typically includes:
‍
● Obtaining your explicit consent for specific purposes.
● Processing necessary for the performance of a contract with you or to take stepsat your request before entering into a contract.
● Processing necessary for compliance with a legal obligation.
● Processing necessary to protect your vital interests or the vital interests ofanother individual.
● Processing necessary for the exercise of official authority or for the performanceof a task carried out in the public interest.
● Processing necessary for the purposes of legitimate interests pursued by Debsaor a third party, provided that such interests are not overridden by yourfundamental rights and freedoms.Where consent is the legal basis, you have the right to withdraw your consent at anytime, without affecting the lawfulness of processing based on consent before itswithdrawal.

3. Types of Personal Data Collected

We may collect various types of personal data from you, depending on yourinteraction with our website. This may include:
‍
● Identifiers: Such as your name, username, or similar identifiers.
● Contact Information: Such as your email address, postal address, and telephonenumber.
● Technical Data: Such as your Internet Protocol (IP) address, browser type andversion, time zone setting and location, browser plug-in types and versions,operating system and platform, and other technology on the devices you use toaccess our website.
● Usage Data: Information about how you use our website, products, and services.
● Marketing and Communications Data: Your preferences in receiving marketingfrom us and your communication preferences.
● Career Application Data: Information provided when applying for a job, such asresume/CV, cover letter, employment history, educational background, andcontact details.We will only collect personal data that is necessary and relevant for the purposes forwhich it is processed.

4. How We Collect Your Personal Data

We use different methods to collect data from and about you, including through:

● Direct Interactions: You may provide us with your personal data by filling informs on our website or by corresponding with us by post, phone, email, orotherwise. This includes personal data you provide when you:
‍
○ Inquire about our services.
○ Subscribe to our publications.
○ Request marketing materials to be sent to you.
○ Provide feedback or contact us.
○ Apply for a job through our careers section.
‍
● Automated Technologies or Interactions: As you interact with our website, wemay automatically collect Technical Data about your equipment, browsingactions, and patterns. We collect this personal data by using cookies, server logs,and other similar technologies.
● Third Parties: We may receive personal data about you from various third parties[e.g., analytics providers, search information providers, recruitment agencies].

5. Purpose of Data Processing

We process your personal data for the following purposes:
‍
● To provide you with information about our services and respond to your inquiries.
● To manage our relationship with you, which may include notifying you aboutchanges to our terms or privacy policy.
● To administer and protect our business and this website (includingtroubleshooting, data analysis, testing, system maintenance, support, reporting,and hosting of data).
● To use data analytics to improve our website, products/services, marketing,customer relationships, and experiences.
● To send you marketing and promotional communications (where you haveconsented to receive them).
● To process and evaluate job applications submitted through the careers section.
● To comply with our legal and regulatory obligations.We will not process your personal data in a manner inconsistent with the purposes forwhich it was collected.

6. Data Minimization

We are committed to the principle of data minimization. We will only collect andprocess personal data that is adequate, relevant, and limited to what is necessary inrelation to the purposes for which it is processed.

7. Data Retention and Destruction

We will retain your personal data only for as long as necessary to fulfill the purposesfor which it was collected, including for the purposes of satisfying any legal,accounting, or reporting requirements.To determine the appropriate retention period for personal data, we consider theamount, nature, and sensitivity of the personal data, the potential risk of harm fromunauthorized use or disclosure of your personal data, the purposes for which weprocess your personal data and whether we can achieve those purposes throughother means, and the applicable legal requirements.Once the purpose for which the data was collected is fulfilled and legal retentionperiods expire, we will securely destroy your personal data in accordance withapplicable regulations.

8. Your Data Protection Rights

Under the Personal Data Protection Law, you have certain rights regarding yourpersonal data. These rights include:

● The Right to be Informed: You have the right to be informed about the legalbasis and purpose for collecting your personal data, the identity and address ofthe data controller, the entities to which your data may be disclosed, and whetheryour data will be transferred outside the KSA.
● The Right to Access: You have the right to request access to your personal dataheld by us and obtain a copy in a clear and readable format.
● The Right to Rectification: You have the right to request that we correct,complete, or update your personal data if it is inaccurate or incomplete.
● The Right to Request Destruction: You have the right to request the destructionof your personal data in certain circumstances, such as when the data is nolonger necessary for the purpose for which it was collected.
● The Right to Withdraw Consent: Where the legal basis for processing isconsent, you have the right to withdraw your consent at any time.To exercise any of these rights, please contact us using the details provided in the"Contact Us" section below. We may need to request specific information from you tohelp us confirm your identity and ensure your right to access your personal data (or toexercise any of your other rights). This is a security measure to ensure that personaldata is not disclosed to any person who has no right to receive it.

9. Data Sharing and Disclosure

We may share your personal data with trusted third parties in accordance with thepurposes outlined in this Privacy Policy and as permitted by law. These third partiesmay include:
‍
● Service providers who assist us in operating our website or providing our services(e.g., hosting providers, IT support, CRM providers).
● Professional advisors (e.g., lawyers, auditors).
● Governmental or regulatory authorities, where required by law or to comply with alegal obligation.We require all third parties to respect the security of your personal data and to treat itin accordance with the law. We do not allow our third-party service providers to useyour personal data for their own purposes and only permit them to process yourpersonal data for specified purposes and in accordance with our instructions.We will not sell, trade, or rent your personal data to third parties without your explicitconsent.

10. Data Security

We have implemented appropriate security measures to prevent your personal datafrom being accidentally lost, used, or accessed in an unauthorized way, altered, ordisclosed. These measures include organizational, administrative, and technicalsafeguards in accordance with applicable regulations and the directives of theNational Cybersecurity Authority.We have procedures in place to deal with any suspected personal data breach and willnotify you and any applicable regulator of a breach where we are legally required todo so.

11. Data Transfer Outside the Kingdom of Saudi Arabia

We may transfer your personal data to countries outside the Kingdom of Saudi Arabiafor the purposes of website hosting and utilizing CRM systems. These serviceproviders are subject to stringent security measures designed to protect yourpersonal data.When we transfer your personal data outside the KSA, we ensure a similar degree ofprotection is afforded to it by ensuring at least one of the following safeguards isimplemented:

● The transfer is to a country that has been deemed to provide an adequate level ofprotection for personal data by the relevant authorities in the KSA.
● We have put in place specific contracts or measures approved by the relevantauthorities in the KSA which give personal data the same protection it has in theKSA.

12. Contact Us

If you have any questions about this Privacy Policy or our data protection practices,please contact us at:
Debsa Built Environment®
Prince Sultan bin Abdulaziz St.
Al Mathar Ash Shamali
‍
Riyadh 12312-6769
+966 50 016 1234
contactus@debsa.com.sa

13. Governing Law

This Privacy Policy is governed by and shall be construed in accordance with the lawsof the Kingdom of Saudi Arabia. Any disputes arising from or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the competent courts inRiyadh, Kingdom of Saudi Arabia.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in ourpractices or legal requirements. We will post any changes on this page and update the"Effective Date" at the top of this policy. We encourage you to review this PrivacyPolicy periodically to stay informed about how we are protecting your personal data.