The Municipality of the Medina Region aims to improve quality of life and provide municipal services to citizens and visitors in urban, economic, and social aspects. It also seeks to ensure a safe environment for users by clarifying how personal data is handled, specifying the purpose of collection, the content of personal data required, the method of collection, storage, processing, destruction, the rights of the data subject, and how to exercise these rights.

Reference is made to the Personal Data Protection Law issued by Royal Decree No. (M/19) dated 9/2/144 AH, as amended by Royal Decree No. (M/148) dated 5/9/1444 AH, and its implementing regulations issued on 29/2/1445 AH. To preserve the privacy of data subjects, protect their rights related to the processing of their personal data, ensure transparency, and contribute to compliance with the provisions of Article Twelve of the law, a privacy policy has been adopted specifying the purposes for which personal data is processed. The Municipality of Medina is committed to maintaining the confidentiality and privacy of data while providing the best levels of service in accordance with the regulatory controls issued by the Saudi Data and Artificial Intelligence Authority.

Personal Data to be Collected and the Purpose of Collection

Personal data means “any statement that may lead to your specific identification, or make it possible to identify you directly or indirectly,” including:

  • Account Data: Primary data collected directly from the user to create a profile, such as name, personal ID number, addresses, contact information, date of birth, and still or moving images of the individual.
  • Cookie Data: Data collected through website logs and cookie technologies.
  • Data obtained from external parties.

Purpose of Collecting Personal Data

  • Receiving and processing data provision requests submitted through the municipality’s website.
  • Following up on any inquiries, suggestions, or complaints submitted by the user.
  • Contacting and supporting customers, such as providing customized services.
  • Providing services to customers such as cooperative training, electronic appointment booking, requesting a meeting with an official, and others.
  • Providing geospatial services and enabling access to geographic data.
  • Data provided by the personal data subject through registration (direct method) is collected.
  • Personal data is collected via cookies, which are collected when visiting the website (indirect method). As soon as the user visits the municipality’s website, the server records the user’s IP address, the date and time of the visit, and the URL of the site from which you were referred to the municipality’s portal.

Use of Personal Data

We do not use personal data collected from its owners directly or indirectly except in a manner that achieves the purposes specified in this policy.

Data Sharing

There is no sharing or exchange of personal data collected through the municipality’s website with other parties unless there is a need to disclose personal data or a specific set thereof according to the cases stipulated in the Personal Data Protection Law and its implementing regulations.

Data Processing

Any data collected on the municipality’s website or its affiliated electronic platforms is handled by any means, whether manual or automated, through processes of collection, recording, storage, indexing, arrangement, formatting, saving, modification, updating, merging, retrieval, use, disclosure, transfer, publication, data sharing or interconnection, blocking, deletion, destruction, and so on, in accordance with the Personal Data Protection Law and its implementing regulations.

Storage and Destruction of Personal Data

Personal data is stored in the Kingdom of Saudi Arabia in a secure and reliable environment on data center servers at the Municipality of the Medina Region. Additionally, administrative, organizational, and technical protection measures are used when storing your personal data in accordance with the policies and controls of the National Cybersecurity Authority. Data is retained to achieve the specific purposes for which it was collected, and this data is destroyed when the purpose of its collection ends. Destruction is carried out in a secure manner that prevents the data from being viewed or recovered again.

Legal Basis for Collecting and Processing Personal Data

Personal data is collected and processed based on the consent of the personal data subject. The data subject may withdraw their consent to the collection and processing of their personal data at any time unless there is another legal basis. To do so, you can contact the Data Management Office at the Municipality of Medina via email.

Rights of Data Subjects

  • Right to Know

<div class="my-4 p-4 rounded-lg shadow-md

Medina Region

The Medina Region, located in western Saudi Arabia, is historically significant as the site of Medina, the second holiest city in Islam. It was the destination of the Prophet Muhammad’s Hijrah (migration) in 622 CE, marking the beginning of the Islamic calendar, and became the capital of the early Muslim community. The region is home to the Prophet’s Mosque, where Muhammad is buried, and remains a major pilgrimage site for millions of Muslims each year.

Municipality of the Medina Region

The Municipality of the Medina Region refers to the administrative body governing Medina, a city in western Saudi Arabia that is one of Islam’s holiest sites. Historically, Medina was the destination of the Prophet Muhammad’s migration (Hijra) in 622 CE, where he established the first Muslim community and built the Al-Masjid an-Nabawi (the Prophet’s Mosque), which remains a central pilgrimage site. Today, the municipality oversees the city’s development, preservation of its religious heritage, and services for millions of annual visitors.

Saudi Data and Artificial Intelligence Authority

The Saudi Data and Artificial Intelligence Authority (SDAIA) was established in 2019 by royal decree to drive the Kingdom’s data and AI agenda. It oversees national data governance, AI adoption, and initiatives like the Saudi AI Summit and the National Strategy for Data and AI. SDAIA aims to position Saudi Arabia as a global leader in the data-driven economy, supporting the goals of Vision 2030.

Kingdom of Saudi Arabia

The Kingdom of Saudi Arabia is a vast Middle Eastern nation founded in 1932 by King Abdulaziz Al Saud, uniting the Arabian Peninsula’s disparate regions. It is the birthplace of Islam and home to its two holiest cities, Mecca and Medina, giving the country profound religious significance. Historically a tribal and oil-rich monarchy, Saudi Arabia has recently pursued ambitious social and economic reforms under its Vision 2030 plan.

National Cybersecurity Authority

The National Cybersecurity Authority (NCA) is a Saudi Arabian government entity established in 2017 to oversee and enhance the country’s cybersecurity posture. It was created to protect national interests, critical infrastructure, and data against cyber threats. The NCA develops policies, strategies, and frameworks to ensure a secure and resilient digital environment in the Kingdom.