Personal Data Protection Policy
The purpose of collecting personal data is directly related to the purposes of mewa.gov.sa and does not conflict with any applicable provision. The methods and means used to collect personal data are appropriate to the circumstances of the data subject, direct, clear, secure, and free from deception, misleading information, or coercion. If it is determined that the personal data collected is no longer necessary for the purpose for which it was collected, mewa.gov.sa will cease retaining it and will promptly destroy the data previously collected.
The Ministry of Environment, Water and Agriculture will ensure that the following requirements are met before collecting your personal data:
The legal basis for collecting your personal data.
The purpose of collecting your personal data, whether the collection of all or part of such data is mandatory or optional, and further information on any processing that is not inconsistent with the purpose for which the data was collected or is otherwise permitted by law.
The identity and contact address of the personal data collector, where applicable, unless the collection is for security purposes.
The agency or agencies to which the personal data will be disclosed, including a description of such agencies, and whether the personal data will be transferred, disclosed, or processed outside the Kingdom.
The potential consequences and risks of failing to comply with the personal data collection procedure.
Your privacy and data protection rights as provided for under the law.
Any other elements specified by the regulations, depending on the nature of the activity carried out by the agency.
Where personal data is collected from a source other than the data subject, the following conditions must be met:
If the data subject has consented to such collection in accordance with the provisions of the law.
If the personal data is publicly available or has been collected from a publicly available source.
If the agency is a government agency and collecting the personal data from a source other than the data subject, or processing it for a purpose other than that for which it was collected, is required for security purposes, to implement another law, or to meet judicial requirements in accordance with the provisions specified in the regulations.
If compliance with this restriction may cause harm to the data subject or affect their vital interests, in accordance with the provisions specified in the regulations.
If the collection or processing of personal data is necessary to protect public health or public safety, or the life or health of a specific individual or individuals.
If the personal data is not recorded or stored in a form that makes it possible to identify the data subject directly or indirectly.
What Data Do We Collect?
When you visit mewa.gov.sa, our servers automatically collect your IP address, along with information about your browser, search engine, geographic location, and the date and time of the request.
mewa.gov.sa retrieves your personal data available through the Government Service Bus (GSB). Personal data, regardless of its source or form, includes any information that explicitly identifies an individual or makes it possible to identify them directly or indirectly, including name, personal identification number, addresses, contact numbers, license and registration numbers, personal property, bank account information, credit card numbers, photographs and video images of the individual, and other data of a personal nature.
Processing of personal data includes any operation performed on personal data by any means, whether manual or automated, including collection, recording, retention, indexing, organization, formatting, storage, modification, updating, integration, retrieval, use, disclosure, transfer, publication, data sharing or interconnection, restriction, scanning, and destruction.
Cookies are files stored on your phone, tablet, or computer when you visit mewa.gov.sa.
Why Do We Need Your Data?
The use of your IP address helps us address any technical issues that may arise on our servers and prepare statistics on platform usage, such as the number of visitors and the language of the device used. Identifying users’ geographic location also helps make specific services available through the platform and application.
We use cookies to collect and store information about how you use mewa.gov.sa and government digital services. Cookies also help improve your experience on the platform and enable us to better understand your needs.
How Do We Process and Store Personal Data?
Your personal data will not be processed without taking appropriate steps to verify its accuracy, completeness, up-to-datedness, and relevance to the purpose for which it was collected, in accordance with the provisions of the regulations.
mewa.gov.sa applies high security standards to protect data and information. Sensitive data, as well as any data that must remain confidential under applicable legal requirements, is encrypted and subject to additional controls and procedures. Sensitive data includes an individual’s racial or tribal origin, religious, intellectual, or political beliefs, or information indicating membership in associations or civil institutions, as well as criminal and security data, biometric data, genetic data, insurance data, health data, location data, credit data, and data indicating that one or both of the individual’s parents are unknown.
Our technical staff are permitted to handle this information only to the extent necessary to provide services through mewa.gov.sa in a manner consistent with your needs.
No party other than the technical team responsible for mewa.gov.sa is permitted to access your IP address.
Your personal data will only be disclosed in the following cases:
If you consent to its disclosure in accordance with the provisions of the law.
If your personal data has been collected from a publicly available source.
If the agency requesting disclosure is a government agency and the disclosure is required for security purposes, to implement another law, or to meet judicial requirements in accordance with the provisions specified in the regulations.
If disclosure is necessary to protect public health or public safety, or the life or health of a specific individual or individuals.
If disclosure is limited to subsequent processing in a manner that does not specifically identify the data subject or any other individual.
mewa.gov.sa may not disclose your personal data if the disclosure involves any of the following:
If it poses a threat to security, harms the reputation of the Kingdom, or conflicts with its interests.
If it affects the Kingdom’s relations with other countries.
If it obstructs the detection of a crime, violates the accused person’s right to a fair trial, or affects the integrity of ongoing criminal proceedings.
If it endangers the safety of an individual or individuals.
If it involves a violation of the privacy of an individual other than the data subject, as specified by the regulations.
If it conflicts with the interests of a person with limited or no legal capacity.
If it violates established professional obligations.
If it involves a breach of an obligation, procedure, or judicial ruling.
If it reveals a confidential source of information that should remain confidential in the public interest.
mewa.gov.sa will destroy your personal data once the purpose for which it was collected has ended. However, such data may be retained after the end of that purpose if all information that could specifically identify the data subject has been removed, in accordance with the controls specified in the regulations.
This platform retains personal data after the purpose for which it was collected has ended only in the following cases:
If there is a legal basis requiring the data to be retained for a specified period, in which case it will be destroyed after the end of that period or the end of the purpose for which it was collected, whichever is later.
If the personal data is closely related to a case pending before a judicial authority and its retention is required for that purpose, in which case it will be destroyed after the conclusion of the judicial proceedings related to the case.
Related Legislation:
Personal Data Protection Law, available through the following link:
Personal Data Protection Law