Effective Date: 14/01/2025

At Makkah Medical Center Company, we are committed to protecting your privacy and ensuring that your personal data is handled securely and in compliance with Saudi Arabia's Personal Data Protection Law (PDPL) and other applicable data protection laws. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our mobile application ("MMC Staff") for HR-related activities, such as managing your personal profile, checking leave balances, requesting leave and cancellation of leave request.

By using the App, you agree to the collection and use of your personal data in accordance with this Privacy Policy. Please read this Privacy Policy carefully to understand how we handle your personal data.

1. Information We Collect

When you use the App, we may access and display the following types of personal information:

• Personal Identification Information: This includes your name, employee ID, job title, department, and contact details that are part of your company profile.
• Leave Information: The App does not collect your leave data. However, it displays your current leave balance and allows you to submit leave requests. Leave balance data is accessed from our internal HR systems and shown within the App.
• Device Information: Information about the device you use to access the App, including device type, operating system, and app version.
• Usage Data: Information about how you interact with the App, such as the pages you visit, actions you take, and time spent on the App. This helps us improve the functionality and user experience.

2. Purpose of Processing Your Personal Data

We process your personal data for the following purposes:

• To manage your HR-related activities, balance checks, including leave requests, Approval, cancellations.
• To maintain and update your personal profile and HR records.
• To communicate with you regarding your leave status, approval, or any updates related to HR functions.
• To improve and enhance the App and its features based on user activity and feedback.

3. Legal Basis for Processing Personal Data

Under the PDPL, we rely on the following legal bases to process your personal data:

• Performance of a Contract: The processing of your personal data is necessary for the performance of your employment contract and to fulfil our obligations as your employer.
• Compliance with Legal Obligations: We may process your personal data to comply with legal requirements, including labour and employment laws in Saudi Arabia.
• Legitimate Interests: We may process your data to pursue our legitimate interests, such as improving our HR services and ensuring the proper functioning of the App.

4. Data Sharing and Disclosure

We will not share your personal data with third parties, except in the following circumstances:

• With Service Providers: We may share your personal data with trusted third-party service providers who assist us in operating the App, maintaining HR functions, or providing IT support. These service providers are bound by contractual obligations to protect your data.
• For Legal Compliance: We may disclose your personal data if required to do so by law, regulatory authorities, or legal process, such as in response to a court order or government request.
• In Business Transfers: If MMC Company is involved in a merger, acquisition, or sale of assets, your personal data may be transferred as part of the transaction.

5. Data Security

We take appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, or disclosure. These measures include secure storage of data, encryption, and regular security audits. However, no method of data transmission or electronic storage is 100% secure, and while we strive to protect your data, we cannot guarantee absolute security.

6. Your Rights Under the Personal Data Protection Law (PDPL)

As a data subject, you have the following rights under the PDPL:

• Right to Access: You have the right to access the personal data we hold about you. You can request information about the processing of your data by contacting us using the contact details below.
• Right to Rectification: You may request to update or correct any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You have the right to request the deletion of your personal data, subject to legal requirements or legitimate business interests that may require retention.
• Right to Restriction: You may request that we restrict the processing of your personal data under certain conditions.
• Right to Data Portability: You have the right to request a copy of your personal data in a structured, commonly used, and machine-readable format, and to transmit this data to another data controller.

To exercise these rights, please contact us using the contact details provided below.

7. Data Retention

We will retain your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, and as required by applicable legal or regulatory requirements in Saudi Arabia. Once the data is no longer required for the purposes for which it was collected, we will securely delete or anonymize it.

8. Children's Privacy

The App is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we learn that we have collected personal data from a child under the age of 18, we will take steps to delete such data promptly.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or to comply with legal or regulatory requirements. Any updates will be posted within the App and will be effective as of the date of posting. We encourage you to periodically review this Privacy Policy for the latest information on our data practices.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or the processing of your personal data, or if you wish to exercise your rights under the PDPL, please contact us at:

Makkah Medical Center

Email: hrd@mmc.med.sa

Phone: 012‑5 22 22 22

Address:

Makkah Medical Center

Al Taneem

Makkah Al Mukarramah

20442

www.mmc.med.sa

By using the App, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your personal data as described.