Elaboration and Developing Privacy Policy Guideline – Eighth: Personal Data Subjects Rights (DSR)

Eighth: Personal Data Subjects Rights

The Controller shall clarify the rights of Data Subjects regarding the collection and processing of their data as specified in Law, along with the method of exercising these rights. The Controller shall also provide appropriate communication channels to respond to Data Subjects' requests related to their rights according to their choice and availability. These channels may include: (emails, text messages, communication via electronic applications). The Controller shall also specify the time taken for response.

1. The Right to be informed, which includes informing Data Subjects of the legal basis and purpose of collecting data while ensuring that Data Subjects' data will not be subsequently processed in any way inconsistent with the purpose of collecting such data, for which Data Subjects provided their explicit or implicit consent.
   
   
2. The Right to access their Personal Data held by the Controller, which includes Data Subjects' access to their Personal Data upon request or through means provided by the Controller that enables Data Subjects to have access to their Personal Data Automatically without the need to submit a request.
   
   
3. The Right to request access to Personal Data held by the Controller in a readable and clear format consistent with the content of records, whether such Personal Data is in a commonly used format if feasible, or providing a printed hard copy of such data.
   
   
4. The Right to request correction, completeness, and update of Personal Data held by the Controller.
   
   
5. The Right to request the destruction of Personal Data held by the Controller if Personal Data is no longer necessary to achieve the purpose for which it was collected.
   
   
6. The Right to withdraw consent for Personal Data Processing at any time, unless there is a legal basis that requires otherwise, in addition to elaborating how to withdraw such consent by providing means and methods to ensure a prompt response to requests related to exercising rights according to measures stated in Article (12) of the Implementing Regulation of the Law.
   
   
7. The Right to submit any complaint related to applying the provisions of the Law to the Competent Authority.
   
   
8. The Right to claim compensation for material or moral damage if the Data Subject is harmed as a result of any violation stipulated in the Law and its Implementing Regulations.