Section One - Introduction
The Ministry was established under the name "Ministry of Environment, Water and Agriculture" pursuant to Royal Decree No. (5/21/1/4951) dated 18/04/1373 AH. The Ministry is responsible for achieving environmental and natural resource sustainability, enhancing food security, and supporting agricultural activities in the Kingdom through various programs and financial support for farmers.
The Ministry provides several services through digital platforms through which personal data is collected and processed. The Ministry is committed to maintaining the confidentiality and privacy of such data and using it to achieve the desired level of service delivery to users in accordance with the applicable terms and conditions in the Kingdom of Saudi Arabia. The use of the Ministry’s official website or Namaa platform constitutes the user’s acceptance of this privacy policy.
Section Two - Communication Methods and Privacy Policy Updates
The Personal Data Protection Officer, under the supervision of the Ministry’s Data Management Office, serves as the point of contact for any requests related to personal data processing, exercising data subject rights, or any complaints or inquiries related to the content of this policy.
Communication with the Personal Data Protection Unit can be made via email:
dpo@mewa.gov.sa
If no response is received within seven days from the date of the request or complaint, users may contact the Ministry’s Data Management Office directly via email: dmo@mewa.gov.sa
The Ministry reserves the right to amend or add any provisions to the current policy, and all users will be notified accordingly. The Ministry also reserves the right to terminate the account/service of the data subject if they do not accept any changes to the privacy policy in accordance with the provisions and regulations of personal data protection applicable in the Kingdom and the Ministry.
Arabic is the approved language for interpreting and applying the terms and conditions of this policy. In the event of any discrepancy in interpreting any text written in another language, the Arabic text shall prevail.
This policy was last updated on 29 Rabi’ Al-Awwal 1446 AH.
Section Three - Personal Data Collected
Due to the nature of the services provided by the Ministry, the following personal data is collected:
-
-
User’s full name
-
-
Date of birth
-
-
National ID number
-
-
Address
-
-
Phone number
-
-
Email address
-
- Gender
Section Four - Methods of Data Collection and Purpose
Data provided by the personal data subject is collected through registration and through integration with the Ministry of Interior systems. No personal data is collected from any other entities.
Some personal data is collected indirectly through cookies collected when visiting the website.
The validity of national identification data is verified through integration with the Nafath platform.
Section Five - Processing of Personal Data
Personal data is processed to improve user experience and complete requested services.
User identity and information accuracy are verified through the National Nafath Platform.
The user’s address is linked to the geographic location to direct them to the nearest Ministry center when needed.
User data is transformed and processed to build business intelligence dashboards that improve decision-making within the Ministry and support the development of appropriate services based on community category, age, gender, and other information.
Data is used to build usage statistics and geographical distribution analysis.
Some data is used to measure user satisfaction and digital experience.
Section Six - Sharing Personal Data
The Ministry shares personal data with government entities after signing an agreement with the relevant government entity in accordance with the updated Data Sharing Policy issued by the Saudi Data and Artificial Intelligence Authority (SDAIA), while obligating such entities to comply with personal data protection provisions. This applies to all government entities except in certain judicial or public security cases as stipulated by the Personal Data Protection Law in the Kingdom.
Section Seven - Methods of Storing, Retaining, and Disposing of Personal Data
First - Storage and Retention:
All personal data is stored within the Ministry’s databases located in the Ministry’s data centers or affiliated entities within the Kingdom. Servers and databases are protected using the best methods and technologies in accordance with the controls and standards of the National Cybersecurity Authority.
Second - Data Disposal:
Once the purpose for which the data was collected has ended and the retention period has expired, the Ministry securely and effectively disposes of all data subject to retention and disposal policies in accordance with the Personal Data Protection Law and regulations, the National Cybersecurity Authority, the National Center for Archives and Records, and other relevant regulations.
Section Eight - Rights of Personal Data Subjects
The protection of users’ and beneficiaries’ data is a top priority for the Ministry. The Ministry exerts every effort to ensure the privacy and confidentiality of personal data and to protect it in cooperation with all relevant entities. In accordance with personal data protection regulations and controls, the data subject has the following rights:
- Right to be Informed:
This includes informing the data subject of the legal basis for collecting personal data, the purpose of collection, the method of processing, and the entities with which the data is shared.
- Right to Request Access to Personal Data Available at the Ministry in a Clear and Readable Format:
In accordance with the controls and procedures specified by the regulations. The Personal Data Protection Officer may be contacted to request a copy of personal data (free of charge).
- Right to Request Correction or Updating of Personal Data Available at the Ministry:
The Personal Data Protection Officer may be contacted, and the correction/amendment request will be reviewed and confirmed via email.
- Right to Request Destruction of Personal Data No Longer Needed by the Ministry:
This shall be without prejudice to the provisions of personal data protection regulations and controls.
- Right to Withdraw Consent to the Processing of Personal Data:
The personal data subject may withdraw consent to the processing of their personal data at any time unless there are legitimate purposes requiring otherwise.
Section Nine - Exercising the Rights of the Personal Data Subject
The personal data subject has the right to exercise the rights outlined in Section Eight — the right to access personal data, the right to be informed, the right to correction, destruction, and withdrawal of consent — by contacting the Ministry’s Personal Data Protection Officer through the email specified in Section Two.