Privacy Notice
"9.3.8" Application
The Roads General Authority (the "Authority") is committed to the privacy and confidentiality of the personal data of the users of its website (the "website") and its mobile applications (the "Applications") that are dedicated to providing the Authority's services. This is of top priority in accordance with the the Personal Data Protection Law issued pursuant to Royal Decree No. (M/19) dated 9/2/1443 AH and its regulations (the "System"). This privacy notice aims to inform you of the general rules on how personal data is processed, your rights as a data subject, the mechanism for exercising your rights, the personal data collected, the methods of collecting this data, the purposes for which your personal data is used, as well as the legal grounds for collecting and processing your personal data. The Roads General Authority is concerned with legislating and regulating the roads sector and monitoring its compliance with the regulations. Your use of the Authority's application "9.3.8" constitutes acceptance of this notice.
Date of Last Update
The privacy notice was drafted on 14-01-2025 and there are no updates on it.
What Personal Data is collected?
We collect and process the following Personal Data:
- Profile data such as name, identity, contact information, and user preferences saved in the application.
- Device information and the user's Internet Protocol (IP) address.
- User location data: The need of location information is to assist in addressing complaints regarding services provided by the Roads General Authority.
How do we collect your Personal Data? What is the purpose for collection?
Some of the Personal Data that we process is obtained directly from you using the forms within the application for the purpose of providing the requested services. We also obtain some Personal Data indirectly through logging in via the National Single Sign-On (Nafath) and from the contact information and device for the purposes of technical support.
How do we use your Personal Data?
We use Personal Data collected, directly or indirectly to handle complaints and inquiries, provide road-specific services, and improve the beneficiary experience.
How do we disclose your Personal Data?
The authority may disclose your data to government entities and service providers to verify the identity of the registrant, allow access to the electronic services, and handle road-related cases.
Legal Basis for Collecting and Processing Your Personal Data
The legal basis we rely on to process the data is the consent of the data owner.
How do we store your Personal Data?
Personal Data is stored securely either within the cloud computing service provider contracted with the Authority, and we retain your personal data for a period of 3 years from the date of last use of the application or the Authority's services. After which, we will securely destroy the data in a manner that prevents it from being accessed or recovered again
Your Rights Regarding Processing of Your Personal Data
Under Personal Data Protection Law, you have the following rights, which primarily depend on the purpose of Personal Data collection and processing:
- Right to Be Informed: You are entitled to be informed how we collect your personal data, legal basis for collection and processing, how such data is processed, stored, destroyed, and to whom it will be disclosed. You can access all details through the Privacy Policy or contact us using the below mentioned information. (Elaborate on any restrictions to the right to be informed in a simple language).
- Right of Access to Your Personal Data: You are entitled to request access to your Personal Data through the email specified in this notice where you will be provided with the data free of charge within thirty days.
- Right to Request Access to Your Personal Data: You are entitled to request access to your Personal Data held by the Controller in a readable and clear format if technically feasible through the email specified in this notice where you will be provided with the data free of charge within thirty days.
- Right to Request Correction of Your Personal Data: You are entitled to request correction of your Personal Data that you believe is inaccurate, incorrect or incomplete, through through the email specified in this notice. Such data will be reviewed and updated within 30 days. In addition, you will be notified through through the email specified in this notice.
- Right to Request Destruction of Your Personal Data: You are entitled to request destruction of your Personal Data in certain circumstances through the email specified in this notice, provided it does not conflict with the regulatory basis.
- Right to Withdraw Your Consent for Processing Your Personal Data: You are entitled to withdraw your consent for processing your Personal Data at any time unless there are legal bases that require otherwise.
Complaint or Objection Filing Method:
Complaint or Objection Filing Method
If you have any concerns, or if we do not comply with the Personal Data Protection Law, you can file a complaint to the Personal Data Protection Officer using the following e-mail address (privacy@rga.gov.sa). If you are not satisfied with how we process your complaint, or if we fail to respond within 7 days, you can file a complaint to the Data Management Office within the Authority by e-mailing (DMO@rga.gov.sa).
You can also file a complaint with the National Data Management Office (NDMO) if you are not satisfied with how we use your personal data or if the complaint is not addressed by the National Data Management Office (NDMO) of the Authority (within sixty days).
NDMO Address:
Riyadh, Kingdom of Saudi Arabia
Website: www.ndmo.gov.sa
E-mail address: pr@ndmo.gov.sa
Roads General Authority Address
Kingdom of Saudi Arabia
Riyadh
Website: rga.gov.sa