​KAUSTCentral Application

1. What Personal Data does the KAUSTCentral application collect?

Depending on how you interact with the application, the following types of Personal Data may be collected by the KAUSTCentral application


• Login Information: We collect some basic information when you log in to the KAUSTCentral application, including your user ID, the model of your mobile device, device ID, IP address, and access date.
  
• Information to Send a Notification: If you agree to receive notifications, the application sends a "Push notification" token from your device to the KAUSTCentral backend. The pair Device ID and Push Notification Token is stored so that we can send public and private notifications based on your interactions with the application.
  
• Information to Store Your Preferences: Some functionalities may provide you the option to define and save your preferences to facilitate future transactions, such as food delivery location, menu preferences, and favorite taxi pick-up and destination location.
  
• Food Orders: If you order food for delivery, the food you've ordered, order time, and delivery destination are captured and stored in KAUSTCentral.
  
• Taxi Requests: When you request a taxi, the application captures your trip starting point, destination, the time and date of your request, your preferred payment method and any other saved preferences (i.e., for a wheelchair).
  
• Profile Information: If you decide to create a profile, KAUSTCentral saves the information you include, whether your personal email, KAUST ID, and/or telephone number.
  
• Workplace information: : If you use My Workplace, a key is assigned to your KAUST ID, and office utilization patterns are recorded (i.e., time of opening your office door and usage of air conditioning, lights, and “energy savings mode”).
  
• Phone numbers:: Phone numbers may be submitted to verify or report; reports of numbers affiliated with scam calls are recorded.
  
• Feedback: If you fill out and submit a feedback form, KAUSTCentral collects your feedback and, if provided, your email address.
  
• Requests for Support: When you contact the IT Helpdesk, ithelpdesk@kaust.edu.sa, for technical support, we store the content of your message(s) requesting help, your e-mail address, and your name.
  
As new features are added, other similar types of Personal Data may be collected to enable you to use those features and capture your preferences.


Please note: No payment information is collected or otherwise processed by the KAUSTCentral app.


2. What sensitive Personal Data is being collected?
   
   Some functionalities might require tracking your location (ex. maps, taxi, etc.), and this is considered sensitive Personal Data under the Personal Data Protection Law. When a functionality requires knowing your location, a notification will be displayed on the application screen asking for your permission. If you opt-in, your location will be processed by KAUST or a third party, i.e., Google Maps. Please read the privacy notice for the third party processing your location data. KAUSTCentral does not collect or store location tracking data.
   
   
3. Where do we get your Personal Data?
   

   Most Personal Data is collected from the information you enter into the application, i.e., your preferences, your orders and/or requests for services, and your profile information. KAUSTCentral captures your login information when you log in. Individuals may report phone numbers connected to scam phone calls. For any questions about your Personal Data collected by the application, please contact us at KAUSTCentral.support@kaust.edu.sa or DPO@kaust.edu.sa.
   

   
   
4. Why do we collect your Personal Data?
   
   The KAUSTCentral application processes your Personal Data to make it easy for you to access different services, retail, and food options in KAUST and to view information related to KAUST. Your Personal Data collected by KAUSTCentral will not be processed later in a manner inconsistent with this purpose, except as provided or required by law.
   
   
5. Do I need to provide all of the information requested?
   

   No, the application is designed to be "opt-in" to optimize your data privacy. Logging into the application, creating a profile, requesting notifications, and setting preferences are completely optional.

   Access to certain functionalities is restricted to authenticated users.
   

   
   
6. Why are we able to process your Personal Data?
   
   We may process your Personal Data with your consent.
   
   
   
7. Does the processing involve profiling and/or any automated decision-making?
   
   No, KAUSTCentral does not rely on any automated decision-making or conduct any profiling in this process.
   
   
   
8. Who do we share your Personal Data with, and how do they process the Personal Data?
   

   We collect and share the following data with third party service providers registered at KAUST:

   • Food retailers: your order and contact details to prepare and deliver the food you request
   
   
   • Taxi service providers: your pick-up location and destination, contact information and preferences (i.e., if a wheelchair is required, the type of vehicle requested, etc...) and
     
   
   
   • Key and access management service providers: your KAUST ID and virtual office key.
     
     

   We do not share any Personal Data with any third parties for advertising or marketing purposes, and we never sell Personal Data to third parties. and
   

   
   
9. Where is my Personal Data stored?
   

   Personal Data will be stored in a variety of places – in the University's IT systems, including e-mail, and in the cloud on third-party servers that are located inside and outside the Kingdom of Saudi Arabia.

   In some scenarios, the KAUSTCentral application acts as a hub of communication to access a set of services and/or applications provided by third-party systems. Sometimes content is embedded in third-party applications and/or sites that KAUST does not control or operate. When you interact with these sites, you are not interacting with KAUSTCentral but instead the embedded service, and KAUST cannot guarantee which Personal Data will be collected and stored. As such, the Personal Data sent to these applications is not transmitted via the KAUSTCentral backend, not stored, and KAUST is not responsible for the privacy practices of these third parties. You should review their respective privacy policies before interacting with such content.

   
   
10. How do we protect your Personal Data?
    

    Any Personal Data collected will be viewed and stored with all reasonable care, and we implement a variety of security measures to prevent your Personal Data from being accidentally lost, used, or accessed in an unauthorized way. For instance, all communication between the KAUSTCentral app, and the KAUSTCentral backend are encrypted using HTTPS. We limit access to your Personal Data to those who have a genuine business need to know it. Those processing your Personal Data will do so only in an authorized manner and are subject to a confidentiality agreement.

    For more information about the technical measures KAUST applies to protect your Personal Data, please see KAUST's Minimum Security Standard, Information Security Policy, and Data Classification Procedure.
    

    
    
11. How long do we keep your Personal Data?
    
    Your Personal Data are permanently retained.