Privacy Notice
INTRODUCTION
Saudi Technical Supply Company (SATESCO) (herein referred to as “SATESCO” also indicated as “us”, “we” or “our”) is committed to respecting and protecting the privacy of your personal or sensitive data in accordance with the laws and regulations in force in the Kingdom of Saudi Arabia, including but not limited to the Personal Data Protection Law (PDPL). We will only use your personal information to deliver the required services. This Privacy Notice applies to all visitors and users, (hereinafter referred to as “You”, “User”, or “Data Subject”) who access or use our website.
The intent of this Privacy Notice is to inform you about the following:
- The type of information we may collect about you and the purpose for collecting it when you use our website.
- The use of the information collected from you and who do we share it with.
- Your rights in regard to your personal data.
PERSONAL DATA COLLECTION
SATESCO may generally collect and obtain the following types of information directly or indirectly when you interact with our website, other social media platforms, telephone, email or writing to us:
Information you give us: We may collect personal data directly from you as part of providing procurement and supply chain solutions , or when you engage with us for critical spare parts or advanced technologies. This may include, but is not limited to, your email, phone number, position, first name, last name, your CV (for job applications), birth date, nationality, or any other personal information you submit through our website for inquiries or service requests.
Information collected automatically: We may automatically collect certain personal information that your browser sends whenever you visit our website, such as information collected through cookies or other tracking technologies. We may also collect personal data that is mandatory for us to provide essential services, and not providing these personal data may result in non-fulfillment of these services. Additionally, we may collect some personal data that is optional, and this data is used to improve the services and user experience and does not affect the services’ fulfillment.
For more information about our use of cookies, please refer to our Cookie Notice.
PERSONAL DATA USAGE
SATESCO may use your data that was collected directly or indirectly from you to perform its duties and responsibilities as a specialized procurement and supply partner. This may include:
- Responding to your inquiries and providing tailored supply solutions.
- Processing requests related to our services in energy, water, industrial, and infrastructure sectors.
- Managing supplier and client relationships and ensuring timely sourcing and quality assurance.
- Creating and managing accounts for accessing specific services or procurement portals, if required.
- Processing job applications and managing CV accounts.
- Resolving any queries you submit that require making your personal data accessible to authorized members of our support team.
- Performing quality checks and enhancing the services we provide.
- Complying with legal and regulatory obligations, including adherence to Saudi Arabia’s development plan and certifications like ISO 9001, ISO 14001, ISO 45001, and being a certified vendor for entities like Saudi Electricity Company (SEC) and National Water Company (NWC).
PERSONAL DATA DISCLOSURE
SATESCO will not share your information with third parties for marketing purposes. We reserve the right to disclose your personal information in any of the following cases:
- You have agreed to disclose your personal data.
- The personal data is collected from a publicly available source.
- The entity requesting disclosure is a public entity and the request is for security purposes, to implement another law, or to meet judicial requirements in accordance with the provisions set out by the regulations.
- The disclosure is necessary to protect public health or safety, or to protect the life or health of a particular individual(s).
- The disclosure will not lead to your identification or any other individuals.
- The disclosure is necessary to achieve legitimate interests of SATESCO, without prejudice to your rights and interests.
No personal data submitted through our website is transferred outside the Kingdom of Saudi Arabia. For transfers of personal data outside the Kingdom of Saudi Arabia for purposes that are not part of this Privacy Notice, will be in accordance with the PDPL, its’ implementing regulations, and other applicable laws and regulations.
YOUR RIGHTS
SATESCO makes reasonable efforts to guarantee your rights under the limits stipulated in the applicable laws and regulations of the Kingdom of Saudi Arabia, as follows:
- Right to be Informed: You have the right to be informed about the collection and usage of your personal data including why and how we collect your personal data, the purposes for processing your data, and who will it be shared with.
- Right to Request Access: You have the right to access your personal data with SATESCO in a readable and clear format and are entitled to obtain a copy of it. SATESCO may also restrict this request as per the cases stipulated in the PDPL.
- Right to Update: You have the right to request data correction, completion, or update.
- Right to Request Destruction: You have the right to request that your personal data be destroyed when:
- You consider that we no longer require the information for the purposes for which it was obtained.
- You have validly objected to our use of your personal information.
- Our use of your personal information is contrary to the Law or any other legal obligations.
- You have revoked your consent to collect and process your personal data.
- Right to Withdraw Consent: You have the right to revoke consent to collect and process your personal data unless statutory or judicial requirements require otherwise.
- Right to File a Complaint: You have the right to file a complaint to the competent authority when you feel that your rights have not been met.
You may submit a request to exercise your rights by filling out the Data Subject Request form.
LEGAL BASIS FOR PROCESSING PERSONAL DATA
The following are the lawful basis of processing personal data:
- Your consent that you provide to process your personal information for a specific purpose that we communicate to you. However, we may process your personal data without obtaining your consent in the following cases:
-
- If the processing achieves a definite interest for the user and it is impossible or difficult to contact the user.
- If processing is according to an initial contractual agreement with you, or processing is in accordance with applicable laws.
- Processing required for judicial and/or security purposes by a public entity.
- If the personal data is publicly available or collected from a publicly available source.
- Pursuing legitimate interest for us or for the user, particularly in facilitating efficient and reliable procurement and supply chain solutions.
- Compliance with regulations and royal decrees that are applicable to SATESCO, including compliance with SASO and relevant Saudi technical regulations.
- Protecting the vital interest of individuals.
- Achieving public interest or serving an official request from an authority according to its roles.
- Executing an agreement in which the user is a party.
PERSONAL DATA STORAGE, RETENTION AND DESTRUCTION
Personal data is stored on secure servers, and a third party, such as cloud service providers (whether inside or outside the Kingdom), may be engaged for data storage. SATESCO employs industry best practices in accordance with the policies and regulations of the National Cybersecurity Authority and international standards to ensure the security of personal data, prevent unauthorized access, and mitigate cybersecurity risks. Additionally, personal data is stored only as long as is necessary to fulfill the purposes for which it was collected and destroyed once the purpose has been fulfilled unless retention of personal data is required for a longer period to comply with another law or legal purpose such as compliance with a court order or under the rules and regulations in which we subject to.
CHILDREN’S PERSONAL DATA
In the case where we may collect personal data of a child under the age of 18 through our website, the purpose would solely be to directly respond to user’s request without using their personal data for any other purposes. The child’s data will not be processed without notifying the child’s guardian of the request except if there is a legal justification for SATESCO to process the data specified by applicable law, regulations, or for security reasons.
PERSONAL DATA SECURITY
SATESCO will take appropriate measures to protect and safeguard your personal information against accidental, unlawful, unauthorized destruction, loss, alteration, access, disclosure, or use. However, please be aware that no method of transmission over the internet is completely secure. While we strive to use required standard measures to protect your personal data, we cannot guarantee its absolute security. In the event of a data breach, SATESCO is committed to following the data breach notification requirements in the applicable laws. The security measures are reviewed periodically by us to keep pace with security and regulatory changes.
Who We Are
- Our Leadership
- Our History
Our Investments
- Our Portfolio
- Giga-Projects
- Investment Pools
- Governance and Investment Decisions
Strategy & Impact
- Our Program
- Invested in Better
Investors
- Green Finance Framework
- Capital Markets Program
- Annual Reports
- Financial Statements
- Credit Ratings
News & Insights
- Press Releases
- Newswire
- Satesco News Network
- In the Media
- Press Contacts
Private Sector Hub
- Private Sector Initiatives
- Explore opportunities
- Become a Supplier
- Success Stories
- Leadership Vision
- FAQ
Careers
- Graduate Development Program
- Satesco Experts
- Faces of Satesco