The Research, Development and Innovation Authority was established by Cabinet Resolution No. (612) dated 10/20/1442 AH. The Authority has a legal personality and financial and administrative independence, and is organizationally linked to the Prime Minister.

The Authority is responsible for supporting and encouraging the research, development and innovation sector, coordinating the activities of institutions and scientific research centres, proposing policies, legislation and regulations and providing funding related to the sector.

Out of the Authority’s concern for user data and information, it is committed to maintaining the confidentiality and privacy of this data and using it to reach the desired level of providing the necessary service to the user in accordance with the terms and conditions in force in the Kingdom of Saudi Arabia. Using the Research, Development and Innovation Development Authority’s website is considered an agreement by the user to User privacy policy.

Personal data collected and its purpose

The Authority collects the minimum amount of personal data to follow up on any inquiries, suggestions, complaints, or to answer questionnaires, registration forms, etc

Methods of collecting personal data

 Personal data is collected and obtained “directly or indirectly” through the use of various methods, according to the following:

•           Direct methods of obtaining personal data: The data that the personal data subject provides to the website is collected.

•           Indirect methods of obtaining personal data, such as: cookie data collected when visiting the Authority’s website.

Rights of the personal data subject

 In accordance with the Personal Data Protection System, issued by Royal Decree No. (M/19) dated 09/02/1443 AH, amended by Royal Decree No. (M/148) dated 09/05/1444 AH, and its executive regulations, you have the following rights (which depend on Essential to the purpose of collecting and processing personal data):

•           The right to information: The owner of personal data has the right to know the methods of collecting his data, the regulatory basis for collecting and processing it, the purpose of its collection, how it will be processed, preserved and destroyed, and with whom it will be shared. You can view all the details through the privacy policy - this policy

•           The right to access and request personal data: The personal data owner has the right to access his personal data, and to request a copy of it, via the aforementioned e-mail, and he will be provided with it without charge. The Authority may also restrict this right according to the circumstances it specifies. The system and its executive regulations.

•           The right to correct personal data: The personal data subject has the right to request the correction of his personal data that he deems inaccurate, incorrect, or incomplete, via the e-mail shown below. It will be reviewed and updated, and the personal data subject will be notified of that. The Authority has the right to request documents and documents supporting the correction request whenever this is necessary to correct, update or complete personal data, and these documents or documents will be destroyed after the completion of the verification process.

•           The right to destruction of personal data: The subject of personal data has the right to request the destruction of his or her personal data in certain circumstances unless there is a regulatory provision specifying a specific retention period or contractual requirements.

•           The right to withdraw consent to the processing of personal data: The personal data subject can withdraw consent to the processing of his personal data - at any time - unless there are legitimate purposes that require the opposite.

•           The personal data subject has the right to exercise his statutory rights by submitting a request through the following e-mail: DMO@rdia.gov.sa

Data sharing/data exchange

The Authority is committed to maintaining the privacy of personal data and not publishing it. The Authority follows the participation controls approved by the regulatory authorities. It is also committed to implementing the provisions of data confidentiality and non-disclosure in accordance with the Personal Data Protection Law and its executive regulations.

Storage and destruction of personal data

 Personal data is stored securely within the geographical borders of the Kingdom. To ensure the preservation of national digital sovereignty of this data. The Authority follows the best standards and practices to ensure the security and protection of data. The Authority also follows national regulations and instructions related to the destruction and disposal of personal data when the purpose of collecting it no longer exists, or archiving it according to the duration of its preservation in a safe way that prevents misuse or unauthorized access to it.

Exercising the rights of the personal data subject:

The personal data subject has the right to request access/correction/destruction of his data by contacting the following mail: Data Management Office at the Authority: DMO@rdia.gov.sa

Personal Data Protection Officer:

1.       Name: Data Management Office at the Authority.

2.       Email DMO@rdia.gov.sa

Complaints and inquiries:

In the event of some complaints or inquiries related to the privacy policy or handling of personal data, contact the Data Management Office at the Authority via the following email: DMO@rdia.gov.sa

Privacy Policy Updates

• The Authority reserves the right to add or change any of the provisions of the privacy policy whenever necessary.

• The Arabic language is the language used in applying the terms and conditions, and it prevails in the event of a difference between the Arabic and English text.