This Privacy Notice governs the collection and use of personal data by BinDawood Holding (“BinDawood Holding”, “us”, “we”, or “our”) as controller in relation to the use of our website http://bindawoodholding.com (“website”). This includes any data you may provide or we collect through this website when you browse the website or complete the Contact Us form.
This website is not intended for children and we do not knowingly collect data relating to children.
Please read this Privacy Notice carefully as it explains what personal data we process, how we use it, who we share it with, and your rights in relation to personal data. It also includes other information regarding our practices regarding the handling of your personal data.
1. What information is covered by this Privacy Notice?
This Privacy Notice governs the processing of personal data that you provide to us or that we collect or receive from you.
Personal data is any information relating to an identified or identifiable natural person.
2. What information do we collect from you or about you?
We may collect information about you from the following sources:
- Information you provide via our website including when you contact us via our website or when you are asked to select the country from where you are accessing our site;
- Information gathered through website cookies; and
- How you interact with our website.
If you want to know more about this, please see sections 2.1 and 2.2 below.
2.1 Information we receive from you
We collect personal data that you provide to us when you visit our website or correspond with us via the links available on our website. This includes your name, email address, telephone number, type of query and your message (e.g. in relation to the reason you are contacting us) and, in order to access certain parts of the site, the country where you are located.
2.2 Information we collect about you
When you visit our website, we may use cookies and other technologies to automatically collect the following information:
- Technical information, including your IP address, browser type and version, device identifier, location and time zone setting;
- Information about your visit, including length of visits to certain pages; and
- Similar information for additional content that can be accessed from website pages, such as opening or printing documents.
When you visit one of our social media pages (e.g. LinkedIn), we, the social media platform or third parties may collect information about your interaction with us via the social media.
However, we do not collect information about you by means of cookies or other technologies where your consent is required by law and you have not consented.
To learn more about how we use cookies and how to control which cookies are used, please see our Cookies Policy.
3. For which purposes do we use your personal data?
3.1 Cookies or similar technologies.
We use your personal data to diagnose problems with our website or administer our website, to analyse user traffic to measure use of our website and to improve the content of our website, as well as to keep our website safe and secure.
You can learn more about our purposes of use of cookies, and how to manage cookies, in our Cookies Policy.
Legal Basis:
- Legitimate interest. We use your personal data in this way as it is necessary for our legitimate interest to: (a) analyse user traffic so that we can improve our website and meet the needs of visitors to our website; (b) to provide you with access to our website; and (c) monitor how our website is used to detect and prevent fraud, other crimes and the misuse of our website. This helps us to ensure that you can safely use our website.
- Legal obligations. Sometimes the collection of your personal data via cookies or similar technologies is necessary for compliance with legal obligations to which we are subject (e.g. the obligation to ensure the security of our information systems).
- Consent. Where we use cookies or similar technologies for analytics purposes (or purposes other than the purposes mentioned above), we rely on your consent to place cookies as required under applicable law.
3.2 To comply with legal or regulatory requirements and exercise or defend legal claims.
We may need to process personal data to comply with legal and regulatory requirements to which we are subject and/or to defend legal claims or exercise our legal rights.
Legal Basis: Processing personal data in this way is necessary to ensure compliance with our legal and regulatory obligations. It is also necessary for our legitimate interests to process personal data for the purposes of exercising and defending legal claims.
3.3 For our records, administration and managing our relationship with you.
We will keep records of your personal data in order to administer our website and keep our records up to date.
Legal Basis:
- Legitimate interest. We use your personal data in this way as it is necessary for our legitimate interest to keep records of your personal details and update these when necessary. It is also in our legitimate interests to keep records of any correspondence with you. Your interest in BinDawood Holding is important to us and so we need to keep track of your details and our contact with you.
- Legal obligations. In some instances we are required to collect and retain information for compliance with applicable law.
4. What are the consequences of not providing your personal data?
The provision of your personal data is necessary when personal data is needed for responding to a query you submit to us, to receive any information you request, or for us to comply with applicable law and regulations (see details of this in section 3 above).
Refusal to provide your personal data may make it impossible for us to respond to your query or provide any information requested.
5. With which third parties do we share your personal data?
We may share your personal data with third parties in the following circumstances:
5.1 Within the group of companies of which BinDawood Holding is part.
We may share your personal data within the company group in order to administer our website and conduct the other activities described in this Privacy Notice.
5.2 Our service providers.
From time to time we may use other companies, agents or contractors to perform services on our behalf or to assist us with the provision of our website. For example, we may share your personal data with infrastructure and IT service providers such as our website hosting provider.
We will only provide our service providers with personal data which is necessary for them to perform their services to us or assist us with the provision of our website. We require them not to use your information for any other purpose. We will use reasonable commercial efforts to ensure that all our service providers keep your personal data secure.
5.3 Other public entities, agencies or bodies of the Kingdom of Saudi Arabia.
We may share personal data with government or other public entities, agencies or bodies of the Kingdom of Saudi Arabia where this is necessary for specific purposes such as government controls, reporting, public expenditure review and accountability.
5.4 Third parties permitted by law.
In certain circumstances, we may be required to disclose or share your personal data in order to comply with a legal or regulatory obligation (for example, we may be required to disclose personal data to the police, regulators, government agencies or to judicial or administrative authorities in the Kingdom of Saudi Arabia or in other locations where we operate such as Europe).
We may also disclose your personal data to third parties where disclosure is both legally permissible and necessary to protect or defend our rights, in relation to matters of national security or law enforcement, or to protect your rights or those of the public.
6. Do we transfer personal data outside the EEA?
Your personal data is transferred to and processed by us or our service providers which are located in countries outside the European Economic Area (“EEA“). In particular, if you are located in the EEA we will transfer the personal data we collect about you to the Kingdom of Saudi Arabia (where our headquarters is located).
We will take all steps that are reasonably necessary to ensure that your personal data, upon and after transfer, is treated securely and in accordance with this Privacy Notice as well as applicable data protection laws. If you want to know more about our measures (as required by applicable law) in relation to international data transfers, please contact us using the Contact Us Form.
7. What are your rights?
To the extent required by the law of your jurisdiction, you may request access to the personal data we maintain about you or request that we correct, amend, delete or block the information by contacting us as indicated below. Where required by law, you may withdraw any consent you previously provided to us or object at any time on legitimate grounds to the processing of your personal data, and we will apply your preferences going forward.
You can make a request to exercise any of these rights in relation to your personal data by contacting us using the Contact Us Form.
7.1 EEA Residents.
If you are a resident in the EEA or EU data protection law otherwise applies to your personal data, you have the following rights in respect of your personal data (if applicable):
- Access. You have the right to request a copy of the personal data we are processing about you. For your own privacy and security, at our discretion we may require you to prove your identity before providing the requested information.
- Correction. You have the right to have incomplete or inaccurate personal data that we process about you corrected.
- Deletion. You have the right to request that we delete personal data that we process about you, except we are not obliged to do so if we need to retain such data in order to comply with a legal or regulatory obligation or to establish, exercise or defend legal claims.
- Restriction. You have the right to restrict our processing of your personal data where you believe such data to be inaccurate, our processing is unlawful, or that we no longer need to process such data for a particular purpose, unless we are not able to delete the data due to a legal or other obligation or because you do not wish us to delete it.
- Portability. You have the right to obtain personal data we hold about you, in a structured, electronic format, and to transmit such data to another data controller, where this is (a) personal data which you have provided to us, and (b) if we are processing that data on the basis of your consent or to perform a contract with you.
- Objection. Where the legal justification for our processing of your personal data is our legitimate interest, you have the right to object to such processing on grounds relating to your particular situation. We will abide by your request unless we have compelling legitimate grounds for the processing which override your interests and rights, or if we need to continue to process the data for the establishment, exercise or defence of a legal claim.
- Withdrawing Consent. If you have consented to our processing of your personal data, you have the right to withdraw your consent at any time, free of charge.
- Making a Complaint. You have the right to make a complaint to your national data protection authority or other public authority governing the protection of your personal data.
8. How do we protect your personal data?
We have implemented technical and organisational security measures to safeguard the personal data in our custody and control. Such measures include, for example, limiting access to personal data only to employees and authorised service providers who need to know such information for (a) the purposes described in this Privacy Notice; and (b) in order to perform their jobs, such as providing you with any information you request. We also maintain certain reasonable physical, electronic and procedural safeguards to protect the personal data in our possession from loss, misuse, and unauthorised access, disclosure, alteration and destruction, and we review and adjust these safeguards regularly in response to advances in technology.
While we endeavour to protect our systems, sites, operations and information against unauthorised access, use, modification and disclosure, due to the inherent nature of the Internet as an open global communications vehicle and other risk factors, we cannot guarantee that any information, during transmission or while stored on our systems, will be absolutely safe from intrusion by others, such as hackers.
9. How long do we keep your personal data?
We will only retain your personal data for as long as necessary for the purpose for which that data was collected and to the extent permitted by applicable law.
10. Links to third-party websites
Please note our website may, from time to time, contain links to and from other websites. If you follow a link to any other websites from our website, please note that these websites have their own privacy notices and that we have no control over how they may use your personal data. You should check the privacy notices of third party websites before you submit any personal data to them.
11. How can you contact us?
If there are any questions or concerns regarding this Privacy Notice, please contact us using the Contact Us Form.
12. Changes to this Privacy Notice
We reserve the right to change this Privacy Notice at any time and as permitted by law. We will notify you of material changes to this Privacy Notice by posting the updated Privacy Notice on our website or as otherwise required by law.
Last updated: April 2020