Privacy Policy

Introduction:

Qassim University is a governmental university and an integrated educational, research, and service system, established in 2004 AD. The university contributes to the development of the local community and the achievement of academic and research excellence. It is considered one of the leading universities in the Kingdom of Saudi Arabia and plays a significant role in achieving the (2030) vision through the development of higher education and scientific research. Recognizing the importance of user data and information, this policy is presented to clarify the services and systems to understand the type of data collected through the university's website and its affiliated sites, the purpose of its collection and processing, and how it is protected. The university is committed to maintaining the confidentiality and privacy of data and using it to achieve the desired level in providing the necessary service to the user in accordance with the terms and conditions applicable in the Kingdom of Saudi Arabia.

Contact Information:

Title: Kingdom of Saudi Arabia – Qassim – Buraidah

Data Management Office

Email: DataPrivacy@qu.edu.sa

First: Agree to the Privacy Policy

Your use of the Qassim University website constitutes your agreement to the privacy policy.

Second: Changes to the Privacy Policy

The university reserves the right to make any changes or modifications to this notice at any time. Any changes or modifications will be effective immediately upon posting of the updated notice.

The privacy policy was last updated on (4/30/2025).

Third: Personal Information

The Qassim University collects and processes the following personal data:

– Key data: Full name, ID number or residency number, gender, nationality, and other identifying data the university may require.

Contact information: phone number, email address, and physical address.

– Qualification Data: Academic and practical qualifications.

Fourth: Methods of collecting personal data

Personal data is collected either directly from the user, or indirectly by linking with government service providers who offer services to beneficiaries through the Unified National Access Gateway.

Technical data is collected – once you visit the university's website – through cookies used to connect your personal computer to the internet and for information necessary to provide technical services.

Fifth: The purpose of personal data collection (uses)

Personal data collected from the user – directly or indirectly – is used to complete the registration process and benefit from the services provided by the university. The areas can be summarized within the following objectives: (effective use of the website, accessing the visitor portal and benefiting from its services, applying for study seats, applying for vacant positions, enrolling in training courses, enrolling in standardized tests, and obtaining medical services).

Sixth: Disclosure of Personal Data

The university is committed to not sharing user data with other parties, with the exception of circumstances mentioned in Article 15 of the Personal Data Protection Law. Should the university or another party wish to use your personal data for purposes other than those, your prior consent will be obtained.

VII. Personal Systemic Justifications

According to the personal data protection system, the legal basis for collecting and processing data is:

Your explicit consent, through your use of the university's website and its affiliated systems; in accordance with clause (First).

· In execution of a contractual obligation, including employment contracts, projects, services, and others.

In implementation of a regulatory commitment, which includes all civil service systems, the Labor Law, and others.

Achieving the public interest and legitimate interests and objectives of the university.

Eighth: Storage and Destruction of Personal Data

Personal data is stored securely within the Kingdom of Saudi Arabia (on university-owned servers or authorized cloud environments). The best relevant security standards and practices are applied to ensure data security and protection. Data is retained for the necessary periods to fulfill the university's regulatory obligations and until the purpose for which it was processed has ended. It is then securely disposed of in a manner that prevents further access or recovery, in accordance with the provisions of Article 18 of the Personal Data Protection Law.

Personal data may be retained, even after the purpose for which it was collected has ended, in the following cases:

- If there is a systematic justification for retaining it for a specified period. It is destroyed after the end of this period or the completion of the purpose for which it was collected, whichever is longer.

If personal data is closely related to a case pending before a judicial authority, and its retention is required for that purpose. It shall be destroyed after the completion of the judicial proceedings for the case.

– In the event that all elements identifying an individual are blocked.

IX. Rights of Personal Data Subjects

Under the personal data protection system, you have the following rights, which depend primarily on the purpose for which the personal data is collected and processed:

The right to science

This includes informing the data subject of the legal or practical justification for collecting their personal data, the purpose of the collection, and how it will be processed and stored. This policy is considered an fulfillment of this right.

The right of access for the data subject:

The data subject has the right to access their personal data held by the university, in accordance with system requirements.

· Right to request access to personal data:

The data subject has the right to request a copy of their personal data in a clear format, consistent with the records, and free of charge, in accordance with the regulations, and without prejudice to the provisions of (Article Nine) of the Personal Data Protection Law.

The right to rectify personal data.

The data subject has the right to request the correction of their personal data stored by the university, which they deem inaccurate or incomplete, through the electronic service used when submitting the data.

Right to request deletion of personal data

The data subject has the right to request the destruction of data stored by the university when it is no longer needed, by sending an email to the address provided below. The data subject will be notified of the approval or rejection of the request in accordance with the announced policies and regulations.

Except as provided by law, you will not be required to pay any fees for exercising these rights.

Tenth: Complaints and Inquiries

For inquiries and complaints related to the rights of personal data collection and processing, or related to the privacy policy in general, you can contact us by email:
DataPrivacy@qu.edu.sa

– For inquiries and complaints related to electronic content and technical support, you can contact Qassim University via email:
it-sup@qu.edu.sa