Your privacy is important to us. This Privacy Policy explains the personal data we collect, how we process it, and for what reasons.

This Privacy Policy should be read together with our terms of use and any other documents referred to in it.

Please note that we will ask for your direct consent before using personal information for a purpose other than those set out in this Privacy Policy.

U20 Riyadh

The U20 Riyadh has its principal address at the Royal Commission for Riyadh City in the Kingdom of Saudi Arabia.

The U20 Riyadh (“We", “we", “our" or “us") is committed to providing excellent service, including respecting concerns about privacy and taking the relevant measures to safeguard personal data in accordance with applicable data protection legislation.

We have provided this Privacy Policy to help you, the user, understand how we collect, use, and protect your information when you visit and use any portion of the U20 Riyadh Website (U20saudiarabia.org.sa) including, without limitation, any microsites and tools, social media pages, and other technological platforms in whatever form (together referred to as our “Platforms") contained therein, and how that information will be treated. Please read the following carefully to understand our views and practices regarding your information and how we will treat it.

Collection and Use (Processing) of Your Personal Information

This section explains what personal information we collect and how we use it.

Use of the U20 Riyadh Website

User information is collected automatically when a User visits our Website or Platforms. We store this information in log files.  The information may include Internet Protocol (IP) addresses, the region or general location where your computer or device is located, the browser type, operating system, and other general usage information. The U20 Riyadh has a legitimate interest in understanding how people use and interact with its Website for the purposes of analyzing trends and tracking visitor movements in order to enhance user experience and diagnose problems with our Website or server.  
The U20 Riyadh stores data in one or more databases hosted by third parties in the Kingdom of Saudi Arabia.  These third parties do not use or have access to your personal information for any purpose other than cloud storage and retrieval.
We do not otherwise share your personal data with third parties unless: 1) You request or authorize it; 2) the information is provided in order to comply with a legal obligation (for example, to comply with a court order); 3) to address disputes, claims or to persons demonstrating legal authority on your behalf.

Data Subject Rights

The European Union's General Data Protection Regulation (GDPR) and other countries' privacy laws provide data subjects certain rights.  You can find a good explanation of these rights (in English) on the website of the United Kingdom's Information Commissioner's Office.

Should you wish to confirm that the U20 Riyadh is processing your personal data, you may contact us using the contact details listed on our contact Us page.

In some circumstances, depending on the country in which you are located and the applicable privacy regulations, you may be able to exercise one of the following rights:

  • The right to be informed about the collection and use of your personal data by us or on our behalf by a third party;
  • The right to access your personal data;
  • The right to rectify or correct inaccurate personal data;
  • The right to erasure of your personal data;
  • The right to restrict processing of your personal data, where the data is not being used for the purpose it was collected for;
  • The right to object to processing of your personal data;
  • The right to data portability;
  • The right to complain to a supervisory authority.  In many countries you have a right to submit a formal written complaint to a regulator who can resolve any complaints regarding the transfer of personal data that we cannot resolve with you directly; or
  • The right to withdraw consent.  You have the right to inform us that you no longer wish us to collect, store, or use your personal data, where there is not a legal reason for us to do so.

Security of Your Information

We will take all reasonable steps to protect the personal data that we hold from misuse, loss, or unauthorized access, including by means of firewalls, password access, and secure servers. In particular, we review our information collection, storage, and processing practices, including physical security measures to guard against unauthorized access to systems and restrict access to personal data to our employees, contractors, and agents who need to know that information for processing purposes and who are subject to strict contractual confidentiality obligations and may be disciplined or terminated if they fail to meet these obligations.

Unfortunately, there is always risk involved in sending information through any channel over the internet. You send information over the internet entirely at your own risk. Although we will do our best to protect your personal data, we cannot guarantee the security of data transmitted over the internet, and we do not guarantee the security of any information, including personal data, which you transmit to us over the internet.
If you suspect any misuse or unauthorized access to your personal data, please let us know immediately.

Data Storage

The data we collect is stored on our servers, located in third party data centers inside the Kingdom of Saudi Arabia.  Third parties do not use or have access to your personal information for any purpose other than cloud storage and retrieval.

We retain your personal information for the period necessary to fulfil the purposes outlined in this Privacy Policy. When assessing these periods we carefully examine our need to collect personal data at all, and should we establish a relevant need, only retain it for the shortest possible period required to meet the purpose of collection, unless a longer retention period is required by contractual obligation or law.  If you wish to learn more about our retention policy you can contact us through our Contact Us page.

Changes and updates to this privacy notice

In the future, we may revise or amend this Privacy Policy at any time. All changes will be made here so you will always know what information we gather, how we might use that information and whether we will disclose it to anyone. Some of the provisions contained in this Privacy Notice may also be superseded by provisions or notices published elsewhere on our Websites.

Questions, Concerns, or Complaints

We regularly review compliance with our Privacy Policy. Should we receive a formal written complaint, we will respond to said complaint within a reasonable timeframe and work with the appropriate regulatory authorities, including local data protection authorities, to resolve any issues regarding the transfer of personal data, if we cannot resolve an issue directly.

If you have any questions or concerns about how we process your personal data, or if you wish to raise a complaint, please reach us through our Contact Us page.