1. ncms

Welcome to our innovative platform! Our goal is to provide you with a seamless and enriching experience, tailored to meet your needs. Whether you are here to explore our extensive library of resources, connect with like-minded individuals, or take advantage of our cutting-edge tools, we’ve got you covered. At the heart of our mission is a commitment to excellence, collaboration, and innovation. We strive to create an environment where creativity thrives, and ideas turn into action. Our team works tirelessly to ensure that every feature is intuitive, reliable, and empowering for users like you. Take your time to navigate through our services, and don’t hesitate to reach out if you have questions or need assistance. Together, we can achieve great things and bring your aspirations to life.

2. Contact Information

      Responsible Department: Data Management Office
      E-mail: DMO@NCMS.ex.sa

3. Last update

      November 2024

4. Types of Collected Data

       4.1.     We collect your personal data to the extent required to provide customized services of high standards in accordance with the relevant                 regulations and laws. Not providing us with this data may affect your use of our website and services.
       4.2.     We collect different types of data about you as described below

            •    National Identity information, including your first name and family name (optional)
            •    Contact information including, national address, email address, and phone number. (Optional)
            •    Employment information, including date of birth, gender, work eligibility details (including documents we may collect to verify the                      eligibility), skills, qualifications, work history, personal photos, and any personal data appearing in your CV. (Optional)
            •    Cookie files data (data collected through web logs, cookies, IP address, or similar technologies). (Mandatory)
            •    Geographical location data of the user in order to benefit from certain services provided on NCMS’s website. (Optional)

5. Methods of Personal Data Collection

            •    Data collected directly from the data subject optionally through registration on the website or any of the platforms or services                      available on the website.
            •    Data collected indirectly and mandatorily during websites visits (cookies), which is data sent by the user's browser when visiting the                      platform, such as the user’s Internet Protocol (IP) address, date and time of visit to distinguish between users and collect                      statistics, all for the purpose of improving user experience on the website.
            •    We only process personal data with the data subject consent. However, the platform reserves the right to collect or process personal                     data without explicit consent for purposes other than originally intended when required for public interest, security purposes,                      compliance with other regulations or meeting judicial requirements.
            •    The platform is committed to collecting only the minimum necessary data that is closely and directly related to the purpose of                      collecting and processing the personal data.
            •    We do not obtain personal data from third-party sources.

6. Legal Basis for Personal Data Collection and Processing

       The collection and processing of personal data is based on your explicit consent. You may withdraw your consent at any time, provided this        does not affect processing operations conducted under other legal grounds. To do so, you can contact the platform's Data Management       Office through the contact details shown below.

7. Purpose of Personal Data Collection

            •    Personal data is collected, used, and processed for regulatory, improvement, and development purposes.
            •    Personal data is collected, used, and processed to follow up on any inquires, suggestion or complaints submitted by users.
            •    Personal data is collected, used, and processed to provide services by the platform to users
            •    Personal data is collected, used, and processed for purposes related to executing the platform's regulatory responsibilities and                      obligations
            •    Personal data is collected, used, and processed to provide required information for employment applications or job opportunity                      inquires.

8. Personal Data Processing

       Personal data is processed according to the data life-cycle stages (collection, storage, use, sharing, and destruction) after taking necessary        measures in accordance with the purposes for which it was collected per regulations. To ensure information protection, the platform applies        the highest security standards to maintain data confidentiality and prevent unauthorized access. Sensitive data and any information that must        remain confidential are encrypted according to regulatory requirements.

9. Personal Data Sharing

       The platform reserves the right to share personal data with security agencies or relevant authorities to implement other regulations or fulfill        judicial requirements within the Kingdom according to the platform’s Personal Data Protection Policy and Personal Data Sharing Policy.        Personal Data will not be shared with non-government entities unless authorized by the competent authorities to perform specific        government services. The platform reserves the right at all times to disclose any data to competent authorities or relevant parties if requested        by a public platform for security purposes, implementation of other regulations, or fulfillment of judicial requirements. The submission of        personal data to the platform through any official channel, including platforms, email, and direct submission at the platform premises, is        considered explicit consent for the platform to store, process, and use that data.

10. Personal Data Storage, Retention Period, and Destruction

      -    Personal data is securely stored within the Kingdom of Saudi Arabia on secure servers, using advanced technologies that comply with the            polices and controls of the National Cybersecurity platform, as well as the platform’s internal security protocols. This aims to ensure            protection from unauthorized access and reduce cyber risks.
      -    Data is retained until the purpose of its collection is fulfilled. In cases stipulated in the Personal Data Protection Law and its executive            regulations, data may be retained even after the purpose of its collection has ended.
      -    Data is securely destroyed in a safe manner that ensures it cannot be accessed or recovered, in compliance with the platform’s internal            policies.
      -    The platform uses data encryption, anonymization, and encoding as needed to protect personal from leakage, damage, or unauthorized            access.

11. Rights of the Personal Data Subject

       The platform makes every effort to protect the rights of personal data subjects in accordance with Personal Data Protection Law and its         executive regulations. The platform commits to implementing best practice to ensure compliance with these regulations, focusing on         transparency and data protection to achieve trust and security for users as follows:

      •  Right to Know: Data subjects have the right to know how the platform collects their data, the legal basis for collection, its purposes,                 processing methods, storage, destruction, and entities with whom the data may be shared. Users can review all these details through the                 Privacy Policy in this document or by contacting us using the contact information mentioned in the Policy.
      •  Right to Access Personal Data: Data subjects have the right to access their data by submitting a request through the email address                 specified in the policy’s contact information section. Direct access to personal data may also be available without submitting a request                 through some platforms on the platform’s website.
      •  Right to Request Personal Data: Data subjects have the right to request a copy of their personal data in a readable and clear format that                 accurately reflects our records by submitting a request via the email specified in the policy’s contact information. This will be provided                 free of charge withing [five business days] via email.
      •  Right to Correct Personal Data: Data subjects have the right to request correction of their personal data if it is inaccurate, incorrect, or                 incomplete through a request via the email specified in the policy’s contact information. Data will be reviewed and updated within [ten                 business days], with notification to the data subject via email upon the fulfillment of the request.
      •  Right to Destroy Personal Data: Data subjects have the right to request the destruction of their data under the following conditions:
                 1.    The request comes directly form the personal data subject.
                 2.    Personal Data is no longer necessary for achieving the purpose for which it was collected.
                 3.    The data subject withdraws consent for personal data collection, and consent was the only legal basis for the processing.
                 4.    If the platform processes personal data in violation of regulation.
                The platform reserves the right not to delete personal data if there is a legal provision specifying a certain retention period or contractual                  requirements requiring longer retention of personal data unless it violates public law.
      •  Right to Withdraw Consent: Data subject can withdraw consent for personal data processing at any time, unless there are legal                  justifications requiring otherwise, through the platform’s platform or by sending an email to the platform’s Data Management Office.
      •  Right to File Complaints: Data Subjects have the right to submit complaints regarding the implementation of law provisions to the               competent platform if they have objections or issues related to implementing these provisions, according to the mechanisms, methods,               and channels determined by the competent platform.

12. Data Protection Officer

      •    Responsible Department/Team: Data Management Office
      •    E-mail: DMO@ncms.ex.sa