منطقة الجوف-جامعة الجوف

Jouf University ensures that you can exercise your rights regarding your personal data as stipulated in the Personal Data Protection Law (PDPL) and its Implementing Regulations. Submitting a request is free of charge, and the request will be processed within a period not exceeding thirty (30) days.

How Can You Exercise Your Rights?

Send an email to the University’s Data Protection Officer (DPO) at:

DPO@ju.edu.sa

What Should You Include in Your Email?

• Your full name, as stated on your official identification document.
• The last four digits of your National ID or Iqama (residency permit). Do not send the full identification number.
• Your email address and mobile number for communication and response purposes.
• Your relationship with the University: student, graduate, admission applicant, faculty member, current or former employee, contractor or supplier, patient or visitor of the University clinics, or other.
• The right you wish to exercise from the list below. You may request to exercise more than one right in a single email.
• A precise description of your request, including the personal data concerned and the action you are requesting in relation to such data. The more specific the description, the more efficiently the request can be processed.
• The relevant University entity, department, or service, if known, such as the Deanship of Admission and Registration, Human Resources, or University Clinics.
• The capacity in which you are submitting the request: on your own behalf, as a legal guardian, or as an authorized representative acting under a valid legal power of attorney. In the latter two cases, please provide the name of the data subject on whose behalf you are submitting the request.

Important Notice

Do not include your full National ID or Iqama number, copies or images of identification documents or other official documents, bank account or payment card details, passwords, or detailed health information in your email.

If any such information is required to verify your identity, the Data Protection Officer will request it through a secure channel. Such information will be destroyed immediately once the purpose for which it was required has been fulfilled, in accordance with Article (31) of the Implementing Regulations.

Your Rights

• Right to Be Informed — You have the right to know the legal basis for collecting your personal data and the purpose for which it is collected, and to ensure that it is not subsequently processed in a manner inconsistent with the purpose for which it was collected. Article (4/1) of the PDPL and Article (4) of the Implementing Regulations.
• Right of Access to Your Personal Data — You have the right to access and review your personal data held by the University. Article (4/2) of the PDPL and Article (5) of the Implementing Regulations.
• Right to Obtain a Copy of Your Personal Data — You have the right to obtain a copy of your personal data in a readable and clear format that accurately reflects the contents of the records, free of charge. Article (4/2) of the PDPL and Article (6) of the Implementing Regulations.
• Right to Correct, Complete, or Update Your Personal Data — You have the right to request the correction of inaccurate personal data, the completion of incomplete personal data, or the updating of outdated personal data. Article (4/3) of the PDPL and Article (7) of the Implementing Regulations.
• Right to Request the Destruction of Your Personal Data — You have the right to request the destruction of personal data that is no longer required. This right is subject to Article (18) of the PDPL. Where a legal basis requires the University to retain the data for a specified period, you will be informed of the refusal of your request, together with the reasons, the applicable legal basis, and the required retention period. Article (4/4) of the PDPL and Article (8) of the Implementing Regulations.
• Right to Withdraw Your Consent to Processing — You may withdraw your consent to the processing of your personal data at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal, nor does it affect processing conducted on another applicable legal basis. Article (5/2) of the PDPL and Article (12) of the Implementing Regulations.
• Right to Restrict the Processing of Your Personal Data Pending Verification of Its Accuracy — Where the personal data held by the University is inaccurate, you may request that its processing be restricted until its accuracy has been verified. Article (7/1) of the Implementing Regulations.
• Right to Stop Receiving Advertising, Awareness, or Marketing Materials — You may request to stop receiving advertising, awareness, or marketing materials. Your request will be implemented immediately upon receipt and free of charge. Articles (28) and (29) of the Implementing Regulations.
• Right to Submit a Complaint Regarding the Processing of Your Personal Data — You may submit a complaint concerning the processing of your personal data to the University’s Data Protection Officer. You may also submit a complaint to the Saudi Data & AI Authority (SDAIA) within ninety (90) days from the date of the incident or the date on which you became aware of it. Article (37) of the Implementing Regulations.