Introduction:

Manar Al-Janoub College of Education is a leading institution in education, research, and community service. The college is committed to fostering an academic and scientific environment based on policies and principles that support the realization of the Kingdom of Saudi Arabia’s vision and goals. Its operations adhere to applicable regulations, legislation, and bylaws, ensuring full compliance and building trust among beneficiaries of its services.

The college places utmost importance on protecting personal data privacy and is fully committed to complying with the Personal Data Protection Law (PDPL) and its executive regulations. This ensures the highest standards of trust and transparency in all interactions with those benefiting from its educational, administrative, research, and community services.

This policy aims to outline how the college collects, processes, and safeguards personal data obtained through various means, whether directly or indirectly, in the course of performing its official duties, in compliance with relevant laws and regulations in the Kingdom of Saudi Arabia. The college also applies best technical and organizational practices to protect personal data through its official channels, including its website, systems, and digital platforms, ensuring respect for data subjects’ rights and privacy.

First: Consent to the Privacy Policy:

By using the Manar Al-Janoub College website, you acknowledge that you have read this privacy policy. The college may also rely on other legal grounds for data processing as outlined in this policy.

Second: Changes to the Privacy Policy:

The college reserves the right to modify or update this notice at any time. Any changes or updates take effect immediately upon publication of the revised notice.

Third: Personal Data Collected:

Manar Al-Janoub College is committed to limiting the collection and processing of personal data to the minimum necessary to fulfill its academic and administrative tasks and provide requested services effectively. The college collects and processes the following data:

1. Basic Personal Data: Full name, national ID or residency number, gender, nationality, marital status, and other identification details as required.
2. Contact Data: Phone number, email address, national address, and login credentials for college platforms and applications (usernames and passwords).
3. Employment Data: Information related to employment inside and outside the college, from hiring to termination, including job description, grade, promotions, appointments, contracts, etc.
4. Academic Data: Records related to academic activities, enrollment, schedules, and academic allocations.
5. Research Data: Research projects, funding, partnerships, surveys, and scientific statistics, with anonymization where necessary to protect personal data.
6. Financial Data: Information for processing payments and rewards, such as bank account numbers and IBAN.
7. Medical and Health Data: Data of beneficiaries with disabilities to provide adequate services; medical records handled exclusively by the college’s medical unit. The college also receives medical excuses in cases of illness or medical leave.
8. Contractual Data: Information related to development projects within the college, executing entities, and other contract-related requirements.

Fourth: Methods of Collecting Personal Data:

The college processes personal data obtained either directly from the user or indirectly from other entities, as per Article 1, Paragraph 6 of the Personal Data Protection Law. Examples include:

1. Through integration with government service providers offering services via the National Access Portal.
2. Technical data collected when visiting the college website through cookies, which link the personal device to the internet and enable technical service delivery.
3. Official college channels during communication.

Fifth: Purpose of Collecting Your Personal Data:

Collecting and processing your personal data is necessary to provide the highest level of service. Data collected directly or indirectly is used to complete registration and utilize the services offered by the college. Key objectives include:

• Effective website usage.
• Access to visitor portals and services.
• Application for study programs.
• Application for job vacancies.
• Enrollment in training courses.
• Participation in standardized tests.
• Access to medical services.

Sixth: How We Use Your Data:

Your personal data is processed in accordance with the college’s policies and in compliance with the PDPL, specifically Article 1 Paragraph 5 and Article 13, and its executive regulations, Article 21. Uses include:

1. Organizational and administrative purposes.
2. Processing requests and services for academic, administrative, and student staff.
3. Data analysis and statistics for decision-making.
4. Sending awareness or service-related notifications.
5. Managing student admissions and tracking their academic progress; providing graduate data to employers based on consent or approved employment programs.
6. Responding to inquiries and requests.
7. Developing and improving the user experience.
8. Preparing activities and studies benefiting the college and its stakeholders.

Seventh: Sharing Your Personal Data:

The college does not share personal data with third parties except when a legal basis exists, and only to the minimum necessary extent in accordance with data sharing controls and agreements. Internal beneficiary data cannot be accessed, exchanged, or shared, except as permitted under Article 15 of the PDPL and related executive regulations (Articles 5, 6, 7).

Eighth: Legal Grounds for Data Collection and Processing:

1. Personal Data Protection Law (Royal Decree No. M19, dated 09/02/1443H, amended by Royal Decree No. M148, dated 05/09/1444H).
2. Executive Regulations of the PDPL (Decision No. 1516, dated 19/2/1445H).
3. Data Sharing Policy issued by the Saudi Data and AI Authority (SDAIA), Version 2.0.
4. Your consent through use of the college website and systems (Section 1).
5. Fulfilling contractual obligations, including employment contracts, projects, and services.
6. Fulfilling statutory obligations, including civil service and labor law requirements.

7. Achieving public interest and legitimate objectives of the college.

Nineth: Data Storage and Disposal:

Personal data is securely stored within the geographical boundaries of Saudi Arabia (on college servers or authorized cloud environments) to preserve national digital sovereignty, except as permitted under Article 29 of the PDPL when processing or transferring data abroad is necessary. Best security practices are applied to ensure protection, prevent loss, misuse, or unauthorized access. Data is retained only as long as necessary and securely destroyed when no longer needed, in compliance with Article 18 of the PDPL.

Personal data may be retained beyond the original purpose if legally justified, including:

• Legal grounds for retaining for a specific period; destroyed after the period or purpose expires, whichever is longer.
• Connection to ongoing legal proceedings; destroyed after completion.
• Complete anonymization of identifying elements.

Tenth: Personal Data Subject Rights:

Under the PDPL, you have the following rights, depending on the purpose of data collection and processing:

1. Right to be Informed: Awareness of the legal basis, purpose of collection, and storage. This policy satisfies this right.
2. Right to Access: Access personal data held by the college according to regulations and without prejudice to Article 9 of the PDPL.
3. Right to Obtain Data: Receive personal data in a readable and clear format, according to applicable regulations.
4. Right to Rectification: Request correction, completion, or update of personal data through the responsible college department, with feedback provided within a specified period.
5. Right to Request Deletion: Request secure destruction of personal data when no longer needed, handled within a defined period, in compliance with Article 18 of the PDPL.

• No fees are required to exercise these rights unless otherwise stated by law.
• Requests will be addressed within 30 days of receipt.
• For more details, you may contact the Data Protection Officer at Manar Al-Janoub College.

Eleventh: Contact Information for Inquiries, Complaints, or Objections:

For privacy policy inquiries, please contact the college coordinator:

• Email: info@mjc.edu.sa
• Mobile: 0533634442

If unsatisfied with the handling of complaints within 30 days, you may escalate to:

• Saudi Data and AI Authority (SDAIA): gov.sa
• National Data Governance Platform: sdaia.gov.sa