The Municipality of Medina is committed to improving quality of life and providing municipal services to citizens and visitors in urban, economic, and social aspects. It also aims to provide a safe environment for users by clarifying how personal data is handled, defining the purpose of its collection, the content of the personal data required, the method of collection, the means of storage, how it is processed, how it is destroyed, and the rights of the data subject regarding it, as well as how to exercise these rights.

In reference to the Personal Data Protection Law issued by Royal Decree No. (M/19) dated 9/2/144 H, as amended by Royal Decree No. (M/148) dated 5/9/1444 H, and its executive regulations issued on 29/2/1445 H, and in order to preserve the privacy of data subjects and protect their rights related to the processing of their personal data, and to ensure transparency and compliance with Article 12 of the law, a privacy policy has been adopted that specifies the purposes for which personal data is processed. The Municipality of Medina is committed to maintaining the confidentiality and privacy of data while providing the highest levels of service in accordance with the regulatory controls issued by the Saudi Data and Artificial Intelligence Authority.

Personal data means “any information that could lead to your specific identification, or make it possible to identify you directly or indirectly,” including:

  • Account data: primary data collected directly from the user to create a personal profile, such as name, personal ID number, addresses, contact information, date of birth, and still or moving images of the individual.
  • Cookie data: data collected through website logs and cookie technologies.
  • Data obtained from external parties.
  • Receiving and processing data provision requests received from the municipality’s website.
  • Following up on any inquiries, suggestions, or complaints submitted by the user.
  • Contacting and supporting customers, such as providing customized services.
  • Providing services to customers, such as cooperative training, electronic appointment booking, requesting a meeting with an official, and others.
  • Providing geospatial services and enabling access to geographic data.
  • Data is collected that the personal data subject provides through registration (directly).
  • Personal data is collected through cookies that are collected when visiting the website (indirectly). Once the user visits the municipality’s website, the server records the user’s IP address, the date and time of the visit, and the URL of the site from which you were referred to the municipality’s portal.

We do not use the personal data collected from its owners directly or indirectly except in a way that achieves the purposes specified in this policy.

There is no sharing or exchange of personal data collected through the municipality’s website with other parties unless there is a need to disclose personal data or a specific set thereof according to the conditions stipulated in the Personal Data Protection Law and its executive regulations.

Any data collected on the municipality’s website or its affiliated electronic platforms is handled by any means, whether manual or automatic, through collection, recording, storage, indexing, sorting, formatting, saving, modifying, updating, merging, retrieving, using, disclosing, transferring, publishing, sharing or linking data, blocking, erasing, destroying, and so forth, in accordance with the Personal Data Protection Law and its executive regulations.

Personal data is stored in the Kingdom of Saudi Arabia in a secure and reliable environment on data center servers at the Municipality of Medina, in addition to using administrative, organizational, and technical protection measures when storing your personal data in accordance with the policies and controls of the National Cybersecurity Authority. Data is retained to achieve the specific purposes for which it was collected, and this data is destroyed when the purpose of its collection ends, in a secure manner that prevents the data from being viewed or recovered again.

Personal data is collected and processed based on the consent of the personal data subject, who may withdraw their consent to the collection and processing of their personal data at any time unless there is another legal basis. To do so, you can contact the Data Management Office at the Municipality of Medina via email.

  • Right to know: The personal data subject has the right to know how we collect their data, the legal basis for its collection and processing, how it is processed, stored, and destroyed, and with whom it will be shared. You can view all details through this privacy policy.
  • The personal data subject has the right to request a copy of their personal data via email, and it will be provided to them—free of charge—within [30 days] via email.
  • Right to request correction of personal data: The personal

    • </

    Medina

    Medina, known as the “City of the Prophet,” is the second holiest city in Islam, located in western Saudi Arabia. It holds profound religious significance as the site where the Prophet Muhammad migrated in 622 CE (the Hijra) and established the first Muslim community, and it is home to the Al-Masjid an-Nabawi (the Prophet’s Mosque), which contains his tomb. Today, it remains a major pilgrimage destination for Muslims visiting after Mecca.

    Saudi Data and Artificial Intelligence Authority

    The Saudi Data and Artificial Intelligence Authority (SDAIA) is a government agency established in 2019 by royal decree to oversee the Kingdom’s data and AI ecosystem. It was created to drive Saudi Arabia’s digital transformation, aligning with Vision 2030 by developing national data governance, fostering AI innovation, and enhancing the country’s global competitiveness in technology. SDAIA also organizes major events like the Global AI Summit and leads initiatives such as the National Data Management Office.

    Kingdom of Saudi Arabia

    The Kingdom of Saudi Arabia is a vast Middle Eastern nation that was unified in 1932 by King Abdulaziz Al Saud, establishing it as an absolute monarchy. It is the birthplace of Islam and home to its two holiest cities, Mecca and Medina, making it a central pilgrimage site for Muslims worldwide. Historically a major oil producer since the 1930s, the country has recently undergone significant social and economic reforms under its Vision 2030 plan.

    National Cybersecurity Authority

    The National Cybersecurity Authority (NCA) is a government entity in Saudi Arabia, established in 2017 to oversee the nation’s cybersecurity strategy and protect critical infrastructure. It was created to enhance the Kingdom’s resilience against cyber threats and to align with its Vision 2030 goals for digital transformation. The NCA develops policies, regulations, and frameworks to safeguard national security and promote a secure cyber environment.