KAUST is a university based in the Kingdom of Saudi Arabia and the "Controller" of your Personal Data, which means that we decide how and why we process your Personal Data. We process your Personal Data for various reasons and in different manners, mostly depending on what relationship we have with you. In all cases, we are committed to inform you about how we use and process your Personal Data and to ensure that our processing aligns with applicable data privacy and protection laws (especially the Saudi Personal Data Protection Law or "PDPL").
"Personal Data" are any information that relates to an identified or identifiable individual such as the name, the address, or the telephone number of an individual. This term may also include "sensitive data," such as data about someone's health, DNA, religious beliefs, ethnicity, or tribal origin, and/or criminal history. "Processing" means any operation which is performed on your Personal Data such as collecting, storing, or analyzing your Personal Data.
The sections below are dedicated to different categories of personal data owners, based on
your relationship with KAUST. In these sections, you can find more information on:
KAUST maintains appropriate technical, physical, and organizational measures to protect Personal Data against unauthorized access, unlawful processing, accidental loss or damage, and unauthorized destruction.
Non-public Personal Data is held strictly confidential, accessible only to those authorized to access the information, and strictly for the purpose of fulfilling their work duties. All KAUST employees are required to sign and comply with KAUST’s Confidentiality Agreement, which requires handling confidential information with diligence and carefulness, in compliance with data privacy laws, and prohibits disclosure beyond a strict need-to-know basis.
KAUST applies strict technical access-controls, password protection, encryption in transit and at rest, and firewall protection to non-public Personal Data. For more information about the technical measures KAUST applies to protect your Personal Data, please see KAUST’s Information Security Policy and Minimum Security Standard.
However, KAUST cannot guarantee that unauthorized third parties will never be able to defeat these measures or use your personal information for improper purposes.
The PDPL and the General Data Protection Regulation ("GDPR") (as well as other applicable data protection laws) provide you with certain rights regarding our processing of your Personal Data, which we would like to explain to you briefly below. KAUST will make a good faith effort to honor the rights of personal data owners and to fulfill legitimate and appropriate requests.
Your exercise of the above rights is free of charge, except in the case of a manifestly unfounded or excessive request, in which case a reasonable fee may be charged.
The response to requests should be provided within a maximum of 30 days (unless it is a particularly complex request).
You can exercise your rights very easily by reaching out to our DPO using the following contact details:
Address: 4700 KAUST, Thuwal 23955-6900, Kingdom of Saudi Arabia
Consistent with the Personal Data Protection Law, KAUST may disclose personal data if: (a) requested to do so by a governmental entity (i) for security purposes, (ii) to implement a law, or (ii) to meet judicial requirements; (b) disclosure is necessary to protect public health or safety, including to prevent a crime or protect national security; or (c) disclosure is necessary to protect the life or health of one or more individual(s).
KAUST reserves the right to modify its Privacy Notices from time to time, and such
modification shall be effective upon posting by KAUST on this website. If KAUST makes any
material changes to the way your personal data will be used under its Privacy Notices, you
will be notified of such changes and given the opportunity to object to such new or
different use. Such modifications will be denoted by the "last updated" notice at
the top of the applicable page. Please check the Privacy Notices periodically for updates or