Article One – Introduction
The Ministry of Environment, Water and Agriculture was established under its current name pursuant to Royal Decree No. (5/21/1/4951), dated 18/04/1373 AH. The Ministry is responsible for achieving environmental and natural resource sustainability, ensuring food security, and supporting agricultural development in the Kingdom through the implementation of various programs and the provision of financial support to farmers.
The Ministry provides several services through digital platforms through which personal data is collected and processed. The Ministry is committed to maintaining the confidentiality and privacy of such data and using it to achieve the desired level of service delivery to users, in accordance with the applicable terms and conditions in the Kingdom of Saudi Arabia.
Use of the Ministry's official website or the Namaa Platform shall constitute the user's acceptance of the applicable Privacy Policy.
Article Two – Communication Methods and Privacy Policy Updates
The Personal Data Protection Officer, under the supervision of the Ministry's Data Management Office, shall serve as the point of contact for any requests related to the processing of personal data, the exercise of data subject rights, complaints, or any other inquiries related to the content of this Policy.
The Personal Data Protection Unit may be contacted via email at:
dpo@mewa.gov.sa
If no response is received within seven days from the date of submitting the request or complaint, the Ministry's Data Management Office may be contacted directly via email at:
dmo@mewa.gov.sa
The Ministry reserves the right to amend or add any provisions to this Policy, and all users shall be notified accordingly. The Ministry also reserves the right to terminate the data subject's account or service in the event that the data subject does not accept any changes to the Privacy Policy, in accordance with the applicable provisions and regulations governing personal data protection and the Ministry.
Arabic shall be the governing language for the implementation and interpretation of the provisions and terms of this Policy. In the event of any discrepancy or conflict in the interpretation of any text provided in another language, the Arabic version shall prevail.
This Policy was last updated on 29 Rabi' al-Awwal 1446 AH.
Article Three – Personal Data Collected
Due to the nature of the services provided by the Ministry, the following personal data may be collected:
- User's full name
- Date of birth
- National ID number
- Address
- Phone number
- Email address
- Gender
Article Four – Methods and Purposes of Data Collection
Personal data is collected directly from the data subject through registration on the website/platform and through integration with the systems of the Ministry of Interior. Personal data is not collected from any other entities.
Certain personal data may also be collected indirectly through cookies collected when visiting the website.
The accuracy and validity of national identification data are verified through integration with the Nafath Platform.
Article Five – Processing of Personal Data
- To improve the user experience and complete requested services.
- To verify the user's identity and the accuracy of their information through the National Unified Access Platform (Nafath).
- To link the user's address to their geographical location in order to direct them to the nearest Ministry center when required.
- To transform and process user data for the purpose of developing Business Intelligence dashboards that contribute to improving decision-making within the Ministry and developing appropriate services based on community segment, age, gender, and other relevant information.
- To develop usage statistics and geographical distribution analyses.
- To use certain data to measure user satisfaction and evaluate the digital experience.
Article Six – Sharing of Personal Data
The Ministry shares personal data with government entities following the conclusion of an agreement with the relevant government entity, in accordance with the updated Data Sharing Policy issued by the Saudi Data and Artificial Intelligence Authority (SDAIA).
Such government entities are required to comply with personal data protection requirements. This applies to all government entities except in certain judicial cases or matters related to public security, as required under the Personal Data Protection Law of the Kingdom.
Article Seven – Methods of Storing, Retaining, and Disposing of Personal Data
First: Storage and Retention
All personal data is stored within the Ministry's databases, located in the Ministry's data centers or those of its affiliated entities, and within the geographical boundaries of the Kingdom of Saudi Arabia.
Servers and databases are protected using the best available methods and technologies in accordance with the controls and specifications established by the National Cybersecurity Authority.
Second: Data Disposal
Upon fulfillment of the purpose for which the data was collected and upon the expiration of the applicable retention period, the Ministry shall securely and effectively dispose of all data subject to the applicable retention and disposal policy, in accordance with the Personal Data Protection Law and its implementing regulations, the requirements of the National Cybersecurity Authority, the National Center for Archives and Records, and other relevant regulations.
Article Eight – Rights of Personal Data Subjects
Protecting the data of users and beneficiaries is among the Ministry's highest priorities. The Ministry makes every effort to ensure the privacy and confidentiality of personal data and to protect such data in cooperation with all relevant entities.
In accordance with the regulations and controls governing personal data protection, the data subject has the following rights:
Right to Be Informed
This includes being informed of the legal basis for collecting their personal data, the purpose of its collection, how it will be processed, and the entities with which their data may be shared.
Right to Request Access to Personal Data
The data subject has the right to request access to personal data held by the Ministry in a clear and readable format, in accordance with the controls and procedures specified in the applicable regulations. The data subject may contact the Personal Data Protection Officer to request a copy of their personal data, free of charge.
Right to Request Correction of Personal Data
The data subject has the right to request the correction or updating of personal data held by the Ministry. The correction or amendment request will be reviewed and confirmed via email.
Right to Request Destruction of Personal Data
The data subject has the right to request the destruction of personal data held by the Ministry that is no longer required, without prejudice to any requirements stipulated under the applicable regulations and controls governing personal data protection.
Right to Withdraw Consent
The personal data subject may withdraw their consent to the processing of their personal data at any time, unless there are legitimate purposes that require otherwise.
Article Nine – Exercising the Rights of Personal Data Subjects
The personal data subject has the right to exercise the rights outlined in Article Eight, including the right to access personal data, the right to be informed, the right to correction and destruction, and the right to withdraw consent, by contacting the Ministry's Personal Data Protection Officer through the email address specified in Article Two.