Privacy Policy and Notice

 

General Provisions

This privacy policy contains information related to the processing of personal data. As such, it should be handled in accordance with the Kingdom of Saudi Arabia (KSA) Personal Data Protection Law (PDPL), its Implementing Regulations, and any applicable internal policies governing data confidentiality, access control, and information security.

SAMI – AEC is committed to making its Privacy Policy accessible to all individuals, including users with disabilities, elderly individuals, or vulnerable populations. Website content is designed to be compatible with accessibility standards (e.g., screen readers and text scaling).

 

Contact Information

Phone Number: 011 220 1350

Website: https://www.aecl.com/

Postal Address: King Khalid International Airport. Industrial Estate P.O.Box 90916, Riyadh 11623, Saudi Arabia

Email: DGO@aecl.com

 

Versions and Last Update 

  • The Privacy Policy was last revised and updated on DD/MM/YYYY
  • SAMI AEC reserves the right to update or modify the provisions of this Privacy Policy at any time. In such cases, affected individuals will be notified of the changes. If a data subject does not agree to the updated terms, SAMI AEC reserves the right to deactivate or terminate their account.
  • Arabic shall be the official language governing the interpretation and application of these terms. In the event of any discrepancy between different language versions, the Arabic text shall take precedence.

 

What Personal Data is Collected? 

  • Identity Details – Full name, identification numbers (e.g., national ID, employee ID, passport number).
  • Contact Information – Email address, telephone number, company name, and physical mailing address.
  • Technical and Device Information – IP address, browser type, operating system, device identifiers, and geolocation data (if applicable).
  • Usage and Interaction Data – Pages visited, session duration, transaction history, preferences, and engagement with website features.
  • Cookies Data - Data collected by website logs, cookies or similar technologies.

 

How Do We Collect Your Personal Data?

  • Contact and Inquiry Forms – Information you voluntarily provide when submitting messages or service requests through our website.
  • Job Applications – Data submitted via out recruitment platform, including personal, professional, education, visual information and contact details from uploaded CVs.
  • Cookies and Automated Tools – Technical data (e.g., IP address, device type, browser) collected.
  • Embedded Third-Party Services – When accessing content such as embedded videos, third-party platforms (e.g., YouTube) may collect data as per their privacy policies.
  • Use of Cookies and Automated Technologies – SAMI AEC’s website uses cookies and similar technologies to enhance performance and security.

 

What is The Purpose for Collecting and Processing your Personal Data? 

SAMI AEC collects personal data solely for specific, legitimate, and clearly defined purposes. These purposes include:

  • To Communicate with Users
  • Recruitment and Human Resources
  • Website Performance and User Experience
  • Regulatory and Legal Compliance

 

How Do We Use Your Personal Data?

SAMI AEC uses personal data to provide services in accordance to applicable laws and regulations, that includes but not limited to the following:

  • to respond to user inquiries submitted through contact or inquiry forms.
  • To facilitate general communication with stakeholders, vendors, and prospective clients.
  • To manage online interactions and enhance accessibility through website functionalities.
  • To collect and evaluate job applications submitted via the company careers platform.
  • To assess qualifications, contact applicants, and manage internal hiring processes.
  • To retain applicant records in accordance with applicable labor and data protection laws.
  • To collect technical and behavioral data through cookies and analytics tools to improve website performance, usability, and security.
  • To monitor user interactions to identify areas for service improvement and content optimization.
  • To fulfill data protection obligations under the PDPL and related regulations.
  • To implement necessary controls to detect, investigate, and prevent security incidents, unauthorized access, or misuse of data.

 

How Do We Disclose Your Personal Data? 

Personal data may be disclosed for the following legitimate purposes:

  • Recruitment Services – To facilitate job application processing through authorized third-party hiring platforms.
  • Website Analytics and Performance Monitoring – To third-party services that help assess website functionality, user experience, and technical performance.
  • Legal and Regulatory Compliance – Where required to satisfy obligations under Saudi regulations or upon official request from competent authorities.
  • Cybersecurity and Infrastructure Support – To hosting providers, security monitoring systems, or IT maintenance partners for operational continuity and data protection.

 

Legal Basis for Collecting and Processing Your Personal Data

SAMI – AEC ensures that all processing activities are carried out on a valid legal basis. Each category of personal data is processed under one or more of the following lawful grounds:

  • Consent When data is submitted voluntarily or when non-essential cookies are enabled.
  • Contractual Necessity: When processing is required to initiate or fulfill a service or partnership.
  • Legal Obligation: When required to comply with PDPL and applicable regulatory requirements
  • Legitimate Interest: When processing is necessary for website security, usability, and operational efficiency.

 

How Do We Store, Retain, and Dispose Your Personal Data?

All personal data collected by SAMI AEC is stored securely at our headquarters using protected internal systems and infrastructure. We do not use cloud-based services to host or store personal data.

Personal data is retained only for the duration necessary to fulfil its intended purpose or to comply with applicable legal and regulatory requirements. The specific retention period may vary depending on the type of data.

At the end of each retention period, personal data is securely and permanently deleted using approved data disposal methods such as digital wiping or physical destruction, to prevent any unauthorized access, recovery, or misuse.

 

SAMI AEC implements secure data disposal procedures to ensure that personal data is not accessible after it is no longer needed. Depending on the data type and medium, the following methods are used:

  • Digital Data: Secure wiping tools.
  • Physical Media: Shredding of printed documents and degaussing or physical destruction of hard drives.
  • Anonymization: In certain cases, personal identifiers are removed through irreversible anonymization to preserve data utility without compromising identity.

Destruction logs are maintained to document compliance with data lifecycle obligations.

 

How Do We Protect Your Personal Data?

SAMI AEC takes the protection of your personal data seriously and follows strict security measures in line with the Saudi Personal Data Protection Law (PDPL).

We use the following safeguards to keep your information safe:

  • Encryption: Your data is encrypted during storage and transfer.
  • Access Control – Only authorized staff can access your data using secure login methods.
  • Data Masking – When needed, we anonymize or mask personal data to protect privacy.
  • Secure Storage – Data is stored securely with clear retention limits.
  • Security Testing and regulatory audits – We regularly test and assess our systems to identify and fix vulnerabilities.

SAMI AEC complies with National Cybersecurity Authority (NCA) regulations, and adopts global standards and frameworks.

 

What Are Your Rights?

SAMI AEC is committed to upholding the rights of individuals whose personal data is collected or processed in accordance with the kingdom of Saudi Arabia Personal Data Protection Law (PDPL) and its Implementing Regulations.

As part of our commitment to privacy, you have the following rights under the KSA PDPL

 

List of Data Subject Rights

  • Right to Be Informed: You have the right to know why we collect your personal data and how we use it.
  • Right to Access: You can request to see the personal data we hold about you, where technically feasible.
  • Right to Obtain a Copy: You may request a copy of your personal data in a readable and common format.
  • Right to Correct Your Data: If your information is incorrect or incomplete, you can ask us to fix or update it.
  • Right to Erasure: You can request that we delete your personal data when it is no longer needed.
  • Right to Withdraw Consent: You can withdraw your consent for us to use your personal data (unless required by law). Instructions on how to withdraw consent will be made available through accessible channels.

 

Data subjects may exercise their rights by communicating with Data Governance Office DGO@aecl.com

 

Third-Party Links

  • The Website may contain links to external websites.
  • SAMI AEC is not responsible for third-party privacy practices.

 

Personal Data Protection Officer

Name: Data Governance Office

Email: DGO@aecl.com

 

Complaints and Inquiries

If you have any inquiries or complaints regarding this Privacy Policy or the handling of your personal data, please contact at:

DGO@aecl.com  

All such requests will be reviewed and responded to within thirty (30) calendar days from the date of receipt.

If a request cannot be fully addressed within this timeframe due to complexity or other legitimate reasons, the requester will be notified of the delay and provided with an updated timeline.