Introduction:

Qassim University is a public university and an integrated educational, research, and service system, established in 2004-24/1425H. The university contributes to the development of the local community and achieving academic and research excellence, and is considered one of the leading universities in the Kingdom of Saudi Arabia, and has a major role in achieving Vision 2030 through the development of higher education and scientific research. Recognizing the importance of user data and information, Qassim University provides this policy, through which it explains the services and systems to understand the type of data collected through the university website and its affiliated websites, the purpose of collecting and processing it, and how to protect it. The university is committed to maintaining the confidentiality and privacy of data and using it to reach the desired level in providing the necessary service to the user in accordance with the terms and conditions applicable in the Kingdom of Saudi Arabia.

Contact information:

Address: Saudi Arabia - Al-Qassim - Al-Malidah

The team: Data Management Office

e-mail: DataPrivacy@qu.edu.sa

First: Agree to the Privacy Policy

By using the Qassim University website, you agree to the Privacy Policy.

II: Changes to the Privacy Policy

The University reserves the right to make changes or modifications to this Notice at any time. Any changes or modifications will be effective immediately upon publication of the updated notice.

The Privacy Policy was last updated on (4/30/2025).

III: Personal information

Qassim University collects and processes the following personal data:

- Key data: Quadruple name, ID or residency number, gender, nationality, and other identifying information that the university may need.

- Contact information: Phone number, email, and address.

- Qualification data: Scientific and practical qualifications.

IV: Methods of collecting personal data

Personal data is collected either directly through the user, or indirectly by linking to government service providers that provide services to beneficiaries through the National Unified Access Portal.

The technical data recorded - once you visit the university's website - is collected through cookies, which are used to connect your computer to the Internet and information needed to provide technical services.

V: Purpose of collecting personal data (uses)

The personal data collected from the user is used - directly or indirectly - to complete the registration process and benefit from the services provided by the university. The areas can be summarized within the following objectives: (using the website effectively, accessing the visitor portal and benefiting from its services, applying for study seats, applying for vacant jobs, enrolling in training courses, enrolling in standardized tests, and obtaining medical services).

VI: Disclosure of personal data

The university is committed to not sharing users' data with other parties, with the exception of the circumstances mentioned in Article 15 of the Personal Data Protection Law. If the university or any other entity wishes to use your personal data for other than these purposes, your consent will be taken in advance.

VII: Personal Statutory Grounds

According to the Personal Data Protection Law, the legal justification for collecting and processing data:

- Your express consent, through your use of the University's website and systems, in accordance with clause (I).

- The fulfillment of a contractual obligation, including contracts for employment, projects, services, etc.

- Implementation of a legal obligation, including all civil service and labor laws, among others.

- Achieving the public interest and the legitimate interests and goals of the university.

Eighth: Storage and destruction of personal data

Personal data is stored securely within the Kingdom of Saudi Arabia (on the University's own servers, or in an authorized cloud environment). The best security standards and practices are applied to ensure data security and protection, retained for the periods of time necessary to fulfill the University's regulatory obligations and until the end of the purpose of processing, and destroyed in a secure manner that cannot be accessed or recovered again, in accordance with the provisions of Article 18 of the Personal Data Protection Law.

Personal data may be kept, even after the purpose for which it was collected has ended, in the following cases:

- If there is a legal justification for keeping them for a specific period of time. They shall be destroyed after the expiration of this period or the end of the purpose for which they were collected, whichever is longer.

- If the personal data is closely related to a case pending before a judicial authority, and its retention is required for that purpose. It shall be destroyed after the completion of the judicial proceedings of the case.

- If all elements that identify an individual are withheld.

IX: Rights of Personal Data Subjects

Under the Personal Data Protection Law, you have the following rights that depend mainly on the purpose of collecting and processing personal data:

- The right to know:

This includes informing the data subject of the legal or practical justification for collecting his/her personal data, its purpose, and how it is processed and stored. This policy is a fulfillment of this right.

- The right to access by the data subject:

The personal data subject has the right to access his/her personal data available with the university - in accordance with the requirements of the law.

- The right to request access to personal data:

The personal data subject has the right to request a copy of the personal data in a clear format that is identical to the content of the records and free of charge, in accordance with the regulations, without prejudice to the provisions of Article 9 of the Personal Data Protection Law.

- The right to rectify personal data:

The owner of personal data has the right to request the correction of his personal data stored at the university, which he considers inaccurate or incomplete, through the electronic service used when submitting the data.

- The right to request the destruction of personal data:

The data subject has the right to request the destruction of the data stored at the university when the need for it ends, through the mail announced below, provided that he/she is notified of the acceptance of the request or not in accordance with the announced policies and regulations.

Except as provided by law, you will not be required to pay any fees for exercising these rights.

Tenth: Complaints and inquiries

- For inquiries and complaints regarding personal data collection and processing rights, or regarding this privacy policy in general, you can contact us by email:
DataPrivacy@qu.edu.sa

- For inquiries and complaints related to online content and technical support, you can contact Qassim University by email:
it-sup@qu.edu.sa