How we handle personal data

This notice explains what personal data Erasmus Middle East collects through this website, why we collect it, how long we keep it, and the rights you hold over it under the Saudi Personal Data Protection Law.

1. Who is responsible for your data

Erasmus Middle East Investments (“Erasmus Middle East”, “we”) is the data controller for personal data collected through this website. [Legal entity name, commercial registration number, registered address and the name of the contact responsible for data protection to be inserted before launch.]

2. What we collect

Identity and contact details you submit through an enquiry form: name, position, work email, telephone
Organization details: organization name, country, organization type
The content of your enquiry, including the objective you describe
Technical data your browser sends automatically: IP address, device and browser type, pages viewed

3. Why we process it, and on what basis

We process enquiry data to respond to you and to assess whether a cooperation route exists. The lawful basis is your consent, given when you submit the form. Technical data is processed on the basis of our legitimate interest in keeping the site secure and understanding how it is used. We do not use your data for automated decision-making or profiling.

4. Consent, and withdrawing it

The enquiry form asks for explicit consent before submission. You may withdraw consent at any time by contacting us. Withdrawal does not affect the lawfulness of processing carried out before withdrawal, and we may retain limited records where a legal obligation requires it.

5. Who we share it with

We do not sell personal data. We share it only with service providers who operate this website and our email systems on our instructions, and only to the extent needed to deliver those services. Where an enquiry leads to a cooperation discussion, we will ask for your agreement before sharing your details with a prospective partner institution.

6. Transfers outside Saudi Arabia

Parts of our infrastructure and our European network operate outside the Kingdom. Where personal data is transferred outside Saudi Arabia, we do so only on a basis permitted by the PDPL and its implementing regulations, and we apply appropriate safeguards. [The hosting location, the specific transfer basis relied on, and any sub-processors must be confirmed and listed before launch.]

7. How long we keep it

Enquiry records are retained only as long as needed to respond and to maintain a record of the relationship, after which they are deleted or anonymised. [Specific retention periods to be set by the editorial and legal owner before launch.]

8. Your rights under the PDPL

Right to be informed about how data is collected and used
Right to access your personal data
Right to request correction of inaccurate or incomplete data
Right to request destruction of data that is no longer required
Right to withdraw consent at any time, without affecting prior lawful processing
Right to lodge a complaint with the competent supervisory authority

To exercise any of these rights, contact us using the details in section 11. We will respond within the period required by law.

9. Cookies

This site uses cookies that are necessary for it to function, and may use analytics cookies to understand how pages are used. [A cookie inventory and, where required, a consent mechanism must be added before launch. A GDPR-style banner alone does not satisfy PDPL expectations.]

10. Security

We apply administrative and technical measures appropriate to the sensitivity of the data, including encrypted transport, access control, and restricting access to staff who need it.

11. Contact

Questions about this notice, or requests relating to your data, can be sent through the enquiry form on the Partner With Us page. [A dedicated privacy contact address should be published here before launch.]

12. Changes

We update this notice when our practices change. The date of the current version is shown at the top of this page.

Image credits

Photography used on this site is licensed for commercial use. Creator and licence for every image are listed on the image credits page.