Introduction

At Environmental Hakathone, we respect your privacy and protect Personal Data in line with the Saudi Personal Data Protection Law (PDPL) and its Implementing Regulations.

Lawful Bases for Processing

• Explicit consent for specified purposes.
• Compliance with official requests from competent public authorities.
• Vital interests of the Data Subject when contact is not feasible.
• Public interest under applicable controls.
• Performance of a contract to which the Data Subject is a party.

Data We Collect

1) Data you provide:

• Full name (AR/EN), ID number (where applicable), email, mobile, date of birth, gender, nationality, city/country.
• Education/employment data where needed (level, institution/employer, major, graduation year, etc.).

2) Data collected automatically:

• IP address, device/browser type, pages visited and duration, and cookie identifiers.

Purposes of Processing

• Providing Services and improving user experience; identity and data verification.
• Communications for support, inquiries, complaints, notifications, and event/program invitations.
• Internal analytics, statistics, and reporting to meet business needs.
• Compliance with legal and regulatory requirements.

Disclosures and Sharing

• We may share data with competent public authorities or authorized processors strictly for legitimate purposes and under Saudi regulations.
• No use for new purposes without your consent where required.
• Processors are bound by equivalent security and governance obligations.

Retention

• We retain Personal Data only as long as necessary for stated purposes or as required by law, then securely delete or anonymize it.
• Longer retention may apply where legally justified, in pending legal claims, or when keeping non-identifying elements.

Your Rights

• Right to be informed; to access, rectify, update, port, restrict, or object to processing; and to request deletion when no longer needed.
• Right to withdraw consent at any time where legally permissible.
• Exercise rights via: [Data Protection Officer Email] – [Contact Form URL].

Security, Governance, and Processing Location

• We implement administrative, technical, and physical measures to protect Personal Data against unauthorized access, use, or disclosure.
• As a general rule, data is processed and stored within the Kingdom of Saudi Arabia under competent governance.
• Cross-border transfers, if needed, will comply with PDPL requirements before any transfer.

Children and Automated Decisions

• Services are not directed to minors unless permitted by law and with parental consent.
• No solely automated decisions with significant legal effects without appropriate safeguards.

Links and Changes

• External links are subject to their own policies; please review before use.
• We may update this policy; updates take effect upon publication in [App Name], with user notice for material changes.

Contact and Complaints

For inquiries, rights requests, or complaints: contact the Data Protection Officer at [DPO Email]. If not resolved within a reasonable timeframe, you may escalate to the competent supervisory authority in KSA.

Last updated: 15 Oct 2025