Privacy Policy

Privacy Policy for the Registration Page

This policy explains how your personal data is collected, used, and protected when you register to attend the DeveGO Forum of the Social Development Bank, through the official registration platform operated by Growth Triangle for Exhibitions and Conferences.

First: Scope of the Policy

• This policy applies to all personal data collected through the Deve GO electronic platforms, including registration forms, electronic accounts, communication tools, and cookies.
• This policy does not apply to third-party websites, services, or platforms that are outside the control of Growth Triangle for Exhibitions and Conferences, even if they are accessed through links provided via the Deve GO platforms.

Second: Types of Personal Data Collected

We may collect and process the following categories of personal data, to the extent necessary and in accordance with the principle of data minimization:

• Basic identity data: such as full name (three or four parts), gender, nationality, and ID number or passport number where required by law.
• Contact data: such as email address, mobile number, and other means of communication chosen by the user.
• Professional and organizational data: such as the entity, establishment, or organization to which the user belongs, job title, employee number, and the sector in which they work (if any).
• Technical and statistical data: such as IP address, device identifier, browser type and operating system, time and date of visit, usage logs, and cookies.
• Data related to content and services: such as preferences for participation in events and programs, user interests, survey results, and any additional information the user chooses to provide voluntarily through forms or correspondence.

Third: Legal Basis and Legitimate Purposes of Processing

Your personal data is processed based on one of the legal bases provided for in the Personal Data Protection Law and its implementing regulations, in particular: your consent, the performance of a contractual relationship, fulfillment of a legal obligation, or the achievement of a legitimate interest that does not conflict with your rights and privacy.

We use your personal data for the following purposes, including but not limited to:

• Creating your account, managing the registration process for Deve GO events and programs, confirming your participation, and providing the related services.
• Communicating with you to send the necessary notifications to confirm registration, schedules, and organizational and logistical updates related to events or programs.
• Improving the performance of the platform and user experience by analyzing usage and developing content, services, and technical features, as well as enhancing cybersecurity.
• Conducting surveys and measuring beneficiary satisfaction, and collecting feedback that helps in developing programs and services.
• Sending light and relevant informational messages or newsletters about programs, events, and future opportunities related to Deve GO, while enabling you to unsubscribe at any time.
• Fulfilling legal obligations, meeting the requirements of competent authorities, and complying with the orders of judicial or regulatory authorities in the Kingdom.

Fourth: Consent and Its Withdrawal

• In cases where the legal basis for processing is your consent, we will ensure that such consent is explicit, informed, and specific to each purpose, and that it is not conditioned upon the provision of a service that is not related to the essence of the transaction.
• You have the right at any time to withdraw your consent to the processing of your personal data when reliance on consent is the legal basis for processing, without affecting the lawfulness of processing carried out before the withdrawal of consent. Some services may be stopped or restricted as a result of such withdrawal.

Fifth: Data Retention

• We retain your personal data for the period necessary to achieve the purposes specified in this policy, or for the period required by the relevant laws and regulations, or as may be required by competent authorities in terms of retention requirements.
• When the legal and operational need to retain the data ends, your personal data will be handled through destruction, anonymization, or de-identification in a way that prevents your identification, in accordance with the approved standards and controls.

Sixth: Sharing Personal Data with Other Parties

We may share your personal data, to the extent necessary and in compliance with applicable laws, with the following categories:

• Organizing or sponsoring entities for events and programs related to Deve GO, where the nature of the event requires the sharing of certain data.
• Approved service providers who deliver operational, technical, or logistical services for the benefit of the platform or the events (such as cloud hosting services, technical support, and messaging services).
• Governmental, judicial, or regulatory bodies where there is a legal obligation, official request, or judicial order requiring disclosure of certain data.

In all cases, we inform the parties with whom data is shared of the requirement to implement legal, technical, and organizational safeguards to protect personal data, and not to use it except for lawful and legitimate marketing purposes.

Seventh: Transfer of Personal Data Outside the Kingdom

• As a general rule, the processing and storage of personal data is carried out within the Kingdom of Saudi Arabia as far as possible.
• If a legal or operational necessity requires the transfer of personal data outside the Kingdom, such transfer shall be carried out in accordance with the conditions and requirements set out in the Personal Data Protection Law, its implementing regulations, and the instructions of SDAIA, including verification of the level of protection in the destination country or applying the necessary contractual safeguards.

Eighth: Data Protection and Security

• Growth Triangle for Exhibitions and Conferences applies a set of reasonable and appropriate technical, organizational, and administrative measures to protect personal data from unauthorized access, loss, misuse, alteration, unauthorized disclosure, or destruction.
• These measures include – by way of example but not limitation – the use of appropriate encryption controls, access permission management, event logging, risk assessments, periodic updates of protection systems, and training employees on information confidentiality and protection requirements.

In the event of a significant personal data breach that may result in harm to data subjects, the competent authority and affected data subjects will be notified within the statutory timeframes and in an appropriate manner, in accordance with applicable regulations.

Ninth: Cookies and Similar Technologies

• The Deve GO platforms use cookies and similar technologies to improve user experience, analyze performance, and customize certain content, to the extent permitted by law.
• You can control the acceptance or rejection of cookies through your browser settings; however, disabling certain types of cookies may affect the efficiency of the platform or some of its functions. We may use analytical or marketing cookies where there is an appropriate legal basis, and in a manner consistent with the requirements for obtaining explicit consent where necessary.

Tenth: Your Rights in Relation to Your Personal Data

In accordance with the Personal Data Protection Law and related regulations in the Kingdom, the data subject enjoys several rights, including but not limited to:

• Right to be informed: to obtain clear and understandable information about how your personal data is processed and the legal purposes thereof.
• Right of access: to request a copy of your personal data that we retain, within the limits permitted by law.
• Right to rectification and updating: to request rectification or completion of your personal data that you consider inaccurate or incomplete.
• Right to deletion or destruction: to request deletion or destruction of your personal data in cases permitted by law, such as when the need for processing no longer exists or when consent is withdrawn where consent is the legal basis.
• Right to object or restrict processing: to object to certain types of processing or request its restriction when legally permissible, including objection to processing for direct marketing purposes.

Your requests regarding these rights will be handled according to our approved procedures, after verifying your identity, and within the timeframes specified by the relevant laws and implementing regulations.

Eleventh: User Accounts and Passwords

• The user is responsible for maintaining the confidentiality of login details, passwords, and any other authentication means associated with their account on the platform, and for not sharing them with any unauthorized party.
• In case of suspected unauthorized use of the account or a breach of the confidentiality of login data, the user must notify the support team as soon as possible so that the necessary technical measures can be taken.

Twelfth: Privacy of Children and Minors

• The Deve GO platforms are primarily directed to adults and staff of entities and establishments, and are not intended to collect data from children below the legal age except to the extent necessary for specific purposes and in accordance with the legal requirements for obtaining the consent of the legal guardian where required by law.
• When it is discovered that personal data of a child has been collected without satisfying the legal requirements, appropriate steps will be taken to address the matter, including deleting the data where appropriate.

Thirteenth: External Links and Third-Party Content

• The Deve GO platforms may contain links to other websites, applications, or platforms that we do not manage. It is recommended to review the privacy policies of those websites before providing any personal data through them.
• Growth Triangle for Exhibitions and Conferences does not bear responsibility for the privacy practices or content of those third-party websites or services.

Fourteenth: Updating the Privacy Policy

This Privacy Policy may be updated from time to time in line with legal requirements, operational changes, or any regulatory developments, without prior notice. Any amendments will be published on this page with clarification of their effective date, provided that such amendments do not result in any reduction in the level of privacy protection in a manner that violates the law. We encourage you to review this policy periodically.

Fifteenth: Contact Details and Inquiries

For any inquiries or requests related to this policy or to the exercise of your rights regarding personal data, or for any other requests related to registration, you may contact us via the dedicated email: registration@deve-go.sa.