We prioritize your privacy. This policy informs you about the personal data collection, usage, and protection, ensuring transparency and upholding privacy rights within our institution.

Definitions

GOSI :General Organization for Social Insurance

Personal data: Every data – of whatever source or form – that would lead to the identification of the individual specifically or make it possible to identify him directly or indirectly, including name, ID number, addresses, contact numbers, license numbers, records, personal property, bank account and credit card numbers, fixed or moving pictures of the individual, and other data of personal nature.

Sensitive data: Every personal data that includes a reference to an individual's ethnic or tribal origin, or religious, intellectual, or political belief, or indicates his membership in nongovernmental associations or institutions, as well as criminal and security data, biometric data, genetic data, credit data, health data and data that indicates that both parents of an individual or one of them is unknown.

Data Processing: Any operation performed on personal data by any means, whether manual or automated, including collection, recording, saving, indexing, arranging, formatting, storing, modifying, updating, merging, retrieving, using, disclosing, transferring, publishing, sharing or interconnecting data, blocking, erasure, and destruction.

Policy:Privacy Policy.

What data do we collect?

Type of personal data	Details including but not limited to the below
Personal identity data	Personal identity data Full name, gender, date of birth, Saudi national ID number, IQAMA details.
Contact information	National address, email address, telephone number.
Sensitive data	Health data such as medical reports. subject to strict conditions set out in data protection regulations.
Financial information	Wage, bank account number.
Education and employment information.	name of employer, date of joining, position, job description, education.
Data from the video protection system	Video surveillance cameras at GOSI premises.
Data concerning your devices	IP address , technical characteristics , device location.
Other details	Relative working at GOSI, parents ID of the employee, family ID of the employee including children’s data.

Why it is important to provide your personal data?

Failure to provide or disclose your personal data when requested, in accordance with regulatory requirements may result in a violation of labor policy and regulations.

Why it is important to provide your personal data?

Why it is important to provide your personal data?

How personal data is being collected?

We collect your personal data directly from the information you provide, in addition to collecting personal data from relevant official sources and channels, such as recruitment agencies and authorized entities, in accordance with applicable laws and regulations

How do we process personal data?

We process your personal data in order to serve your interests as an employee or contractor of GOSI, and to fulfill contractual obligations and applicable laws and regulations

What is the purpose of collecting personal data?

We utilize your personal data for various purposes which include providing employment services and implementation of relevant labor laws. In support of these purposes, personal data processing activities shall be conducted, which include, but are not limited to salary payments and benefits provision, fulfillment of individual employment contracts, maintenance of internal accounts and records, transaction fulfillment, compiling internal reports, internal communications related to GOSI’s business and other regulatory obligations and policies, ensuring GOSI’s legal rights

Data sharing

We may disclose your personal data in accordance with the legal requirements in the Kingdom of Saudi Arabia. Any disclosure beyond these requirements will require your consent.

In accordance with Personal data protection law, you have the following rights:

• Right to be Informed:You have the right to know how your personal data is collected, the legal basis for collection, and how it is processed, shared, stored, and destroyed
• Right to Access and ObtainYou have the right to know how your personal data is collected, the legal basis for collection, and how it is processed, shared, stored, and destroyed
• Right to Request Correction: You have the right to request correction of your personal data if it is inaccurate and to complete any incomplete personal data.
• Right to Request Destruction: You have the right to request destruction of your personal data, unless there are any lawful basis retaining this data, such as, but not limited to, pension and insurance laws.
• Right to Withdraw Consent: You have the right to withdraw your consent for the processing of your personal data at any time, unless there are legitimate purposes that require the contrary. You can submit a request to withdraw consent through the communication channels mentioned in this policy.

Employee can exercise the rights by visiting the Human Capital portal” Tamam”.

For how long do we keep your data?

The data retention time periods consider the duration of employment use, legal obligations, contractual obligations, and the original collection purpose.

Contact with GOSI Data Management Office (DMO)

You can contact GOSI as data controller of your personal data via our Data Management Office.

• To contact the Data Management Office electronically: [DMO@gosi.gov.sa].
•  Or via letter, clearly marked for the attention of the Data Management Office, via this POBOX: P.O.Box: 11461 Riyadh : 2952.