SAL Saudi Logistics Services Company offers a wide range of products and services, including Sea, Air and Land Cargo as well Ground Handling, Storage and Logistical Products and Services. References to SAL products and services in this statement include commercial products and services, websites, apps, and devices. Your privacy is important to us. This privacy statement explains the personal information that SAL Saudi Logistics Services collects, how we process personal information, and for what purposes. Personal information is any information about an individual that identifies an individual, or by which the individual's identity can reasonably be ascertained.

It also relates to our use of any personal information you provide to us by phone, SMS, email, in letters, other correspondence and in person. In order to provide you with the full range of SAL services, we sometimes need to collect information about you. Whenever you provide such information, we are legally obliged to use your information in line with all applicable laws concerning the protection of personal information, including the Data Protection Act 2018 (these laws are referred to collectively in this Privacy and Cookies Policy as the “data protection laws”). No website can be completely secure; if you have any concerns that your SAL account could have been compromised e.g. someone could have discovered your password, please get in touch straight away.

SAL websites contain hyperlinks to websites owned and operated by third parties. These third-party websites have their own privacy policies, and are also likely to use cookies, and we therefore urge you to review them. They will govern the use of personal information you submit when visiting these websites, which may also be collected by cookies. We do not accept any responsibility or liability for the privacy practices of such third-party websites and your use of such websites is at your own risk.

We collect data from you, through our interactions with you and through our products and services. You provide some of this data directly, and we get some of it by collecting data about your interactions, use, and experiences with our products and services. The data we collect depends on the context of your interactions with us and the choices you make, including your privacy settings and the products and features you use. We may also collect data about you from our group and third parties where you have provided consent for sharing. Your data may be collected in relationship to your person as such or may be collected in the context of you representing an organization, such as a business or government. You have choices when it comes to the data you share. When we ask you to provide personal data, you can decline. However, please note that many of our products require some personal data to provide you with a service. If you choose not to provide data necessary to provide you with a product or feature, you may not be able to use that product or feature. Likewise, where we need to collect personal data by law or to enter into or carry out a contract with you, and you do not provide the data, we will not be able to enter into the contract; or if this relates to an existing product you’re using, we may have to suspend or cancel it. We will notify you if this is the case at the time.

From the SAL Website

The SAL website does not capture or store any personal information about individuals who access it, except where they voluntarily choose to give us personal details by email, using an electronic form to register, using SAL online E-Services, or to enquire about our services.

From the Visits to our office and Stations

When you visit any of the SAL offices or warehouse facilities SAL will collect information about you before admitting you into the building. This information is used for security checks and monitoring people in the building. Your information will be captured in a Visitors Book or an Access Control System.

From the Marketing activity

When you participate in, access or sign up to any of the marketing services, we may receive personal information about you. We use this information to provide the services you have signed up to, and for reporting analysis as well as the information collected about the use of the marketing services. SAL will only send you emails or otherwise contact you for marketing purposes, or to promote new services, activities where you have agreed to this. Where you havea greed to receive these communications, we may personalise the message content based upon any information you have provided to us.

From CCTV cameras

This Privacy Notice applies to all employees, workers and contractors of SAL Saudi Logistics Services Company all visitors to SAL’s premises, all other individuals who work at or visit premises. SAL collects or holds personal data as a result of the operation of its CCTV systems. Where the lawful basis is our legitimate interests or the legitimate interests of a third party, we have also indicated what those interests are.

How we obtain our CCTV personal data

Our CCTV monitors the SAL’s facilities, Offices, and warehouses 24 hours a day, and this data is continuously recorded.

Camera locations are chosen to minimise the capture of images which are not relevant to the legitimate purposes of the monitoring.

Surveillance systems are not used to record sound.

Images are monitored by SAL’s authorised personnel 24 hours a day.

Live feeds from CCTV cameras are monitored only where this is reasonably necessary, for example to protect health, safety and security.

SAL will ensure that live feeds from cameras and recorded images are only viewed by approved members of its staff whose role requires them to have access to such data. This may include SAL’s HR staff involved in disciplinary or grievance matters.

No surveillance cameras will be placed in areas where there is an expectation of privacy (for example, in changing rooms) unless, in very exceptional circumstances, it is judged by SAL to be necessary to deal with very serious concerns.

SAL does not carry out covert monitoring or surveillance (that is, where you are unaware that the monitoring or surveillance is taking place) unless, in highly exceptional circumstances, there are reasonable grounds to suspect that criminal activity or extremely serious malpractice is taking place and, after suitable consideration, SAL reasonably believes there is no less intrusive way to tackle the issue.

Any covert monitoring or surveillance will be carried out for a limited and reasonable period of time consistent with the objectives of the monitoring or surveillance and will relate only to the specific suspected criminal activity or extremely serious malpractice.

The types of personal CCTV data we use and how we use them.

The types of personal data we collect and use, the purposes for which we use your personal data, and the lawful bases we rely on to allow us to use your personal data in that way are set out in the table below.

Where the lawful basis is our legitimate interests or the legitimate interests of a third party, we have also indicated what those interests are. We may have more than one lawful basis for using your personal data.

TYPE OF PERSONAL DATA	HOW WE USE THAT DATA	THE LAWFUL BASIS FOR OUR PROCESSING THAT DATA
Images of individuals and their vehicles on and around SAL’s premises	To prevent crime and protect buildings and assets (of SAL, of other occupants of the building and of their respective staff and visitors) from damage, disruption, vandalism and other crime	The legitimate interests of staff and visitors and of SAL and other occupants of the building in protecting the building and their assets
	For the personal safety of staff and visitors (of SAL and of other occupants of the building) and other members of the public and to act as a deterrent against crime	The legitimate interests of staff and visitors in being safe and the legitimate interests of SAL and other occupants of the building in keeping their staff and visitors safe
	To support law enforcement bodies in the prevention, detection and prosecution of crime	The legitimate interests of staff and visitors and of SAL and other occupants of the building in preventing crime and helping to detect and prosecute crime
	To assist in the day-to-day management, including ensuring the health and safety of staff and visitors (of SAL and of other occupants of the building)	The legitimate interests of SAL and other occupants of the building in managing their businesses and ensuring the health and safety of their staff and visitors
	To assist in the effective resolution of disputes which arise in the course of disciplinary or grievance proceedings with staff (of SAL or of other occupants of or visitors to the building)	The legitimate interests of SAL and other occupants of or visitors to the building in resolving disputes which arise in the course of disciplinary or grievance proceedings
	To assist in the defence of any civil litigation, including employment tribunal proceedings (involving SAL or other occupants of or visitors to the building)	The legitimate interests of SAL, other occupants of the building and visitors to the building in bringing or defending any civil litigation proceedings

Where images from our CCTV system are relevant to other occupants of the building or any individual (for instance if they show that their car has been broken into), SAL may share them with those other occupants/individuals if it considers that this is reasonably necessary for any of the purposes set out above.

SAL is not responsible for the use other occupants or individuals make of those images. You are advised to consult other occupants of the building about how they use your personal data.

SAL may allow law enforcement agencies to view or remove CCTV footage where this is required in the detection or prosecution of crime. In addition, airport authorities have the right of sharing CCTV footage and videos as well to the law enforcement agencies.

SAL will keep a record of all disclosures of CCTV footage

Filming and Photography at Events Privacy Notice

SAL is the Data Controller, and this Privacy Notice provides an overview of how photography and filming data is processed. Especially when you inter an Iteration Insights event or program, where photography, audio, and video recording may occur.

SAL may take and/or commission photography and/or filming of events and campaign for live streaming online or repurposing in digital e.g., on our website; on our social media feeds including YouTube channel, Facebook, Twitter, Instagram, LinkedIn or paper format. This will be for the purpose of promoting services and related initiatives. SAL maintains copyright and any other intellectual property in photographs taken and/or in digitized recordings belong to SAL.

Where practically possible we will seek consent in advance of an event to provide the lawful basis for processing data, and at all times, will provide clear instruction on how you can opt-out of any photography or filming. Attendees or participants have the right not to appear in an identifiable way in photography and/or filming. Where the image is of a crowd and does not focus on one individual or a group of individuals, it is unlikely to be personal information, as the individuals will not be identifiable - data protection legislation will not therefore apply.

In return for access to the event, we display notices to inform attendees or participants of this and how they can notify us if they do not wish to be photographed and/or filmed. You consent to any such filming, photography and/or live streaming and to SAL in reproducing and publishing your words and/or likeness in any transcript of or publication relating to the event and/or for the purposes of publicising the services of SAL and its partners.

Photos and recordings contain personal data and/or special category personal data will be protected and disposed of securely in accordance with data protection legislation.

Changes to this Privacy Notice - we review this Privacy Notice regularly and will place updates on our website.

If at any point you wish to withdraw your consent or request that SAL stops using your images/ records, please write to DPO@SAL.SA and SALINTERNALCOMMUNICATIONS@SAL.SA

Application for Employment from the SAL Website

(PFD file format is preferred) to collect employment-related information. We use this information to process your application and undertake clearance certificate, reliability check.

Certain categories of personal information, such as that about race, ethnicity, religion or health, are considered “sensitive personal data”. Generally, we try to limit the circumstances where we process sensitive personal data. However, this can occasionally occur because:

By providing any personal information that is, or could be considered to be, “sensitive personal information” you explicitly agree that we may collect, use, share with third parties and transfer outside the European Economic Area this personal information, as described in this Privacy Policy.

Employment information

Employment data reflects information that will be collected during employment which includes:

By providing any personal information that is, or could be considered to be, “sensitive personal information” you explicitly agree that we may collect, use, share with third parties and transfer outside the European Economic Area this personal information, as described in this Privacy Policy.

SAL may record and monitor inbound and outbound calls and electronic traffic for training purposes. We may also collect; telephony log information, such as your phone number, calling-party number, forwarding numbers, time and date of calls, duration of call information and types of calls.

Virtual meetings might be recorded upon request, such as Teams, Skype or Zoom, etc. By making a recording of any meeting using any Working Live Products, SAL represents and warrants that (a) you have received legally sufficient consent for such recording prior to starting a recording, (b) SAL will only make, use, store and otherwise process such recording in accordance with all applicable laws, rules and regulations, including data protection laws and (c) SAL, will store and otherwise restrict access to such recordings using appropriate technical and organizational safeguards.

A- Why do we collect this data?

We collect this data to be able to supply the information or service outlined in the section about SAL above.

B- What do we do with the data?

Any personal data provided to us will be used exclusively for providing you with the information or services you have requested. We use the information to provide, maintain, protect and improve the services, to develop new ones and to protect SAL and our users.

We do not pass any of your personal data to outside organizations and/or individuals, except with your explicit consent. This is only necessary when we need to share your information in order to provide the information or service requested.

Products and services

We use the data we collect to provision you with our products and services. We use data to:

In carrying out these purposes, we may combine data we collect from different contexts (each providing you with the option to decline to share information) or obtain data from third parties where your consent has been registered and to give you a more seamless, consistent, and personalized experience, to make informed business decisions, and for other legitimate purposes.

Research and Development

We may use the data we collect for testing, research, analysis and product development. This allows us to improve and enhance our services, develop new features and products, and facilitate compliance and competency solutions in connection with our services. This includes using the information for the following:

We share your personal information with other internal divisions such as IT, Finance, Marketing, Internal Communication, Procurement and Airport Stations as part of our regular reporting activities, communication and identification procedure or related to access privileges for areas govern by authorities such as airport station.

We share your personal information with different governmental authorities as part of legal obligation and contract obligation such as information to be used for enrolment in General Office of Social Insurance and registering in Saudi Labor Law, Muqeem, Tabadul and Washaj.

We may also need to share your personal information with third-party service providers such as Saudi Airlines Cargo Company (SACC), Medical Insurance company, registering for benefits program such as Mazaya and Saudia Airline Ticket discount. In such cases we limit personal data shared to absolute minimum required.

We will keep your information within SAL except where disclosure is required or permitted by law (for example to government bodies and law enforcement agencies) or as described in this section and section below.

SAL uses third parties to process your information on our behalf, for example we use specialist companies to provide services, analysis, pre-employment checks, references and Disclosure & Barring Service (DBS) checks. SAL requires these third parties to comply strictly with its instructions and SAL requires that they do not use your personal information for their own business purposes, unless you have explicitly consented to the use of your personal information in this way. We may share your personal information internally (i.e. with other divisions) for example, to consider your employment application.

We share your personal data with our business partners and national authorities, with your consent or to complete any transaction or provide any product or service you have requested or authorized. We also may share data with controlled affiliates and subsidiaries; with vendors working on our behalf; when required by law or to respond to legal process; to protect our customers; to protect lives; to maintain the security and legality of our products and services; and to protect the rights and property of SAL and its customers.

If you create, post or send offensive, inappropriate or objectionable content anywhere on or to the SAL websites or otherwise engage in any disruptive behavior on any SAL service, SAL may use your personal information to stop such behavior. Where SAL reasonably believes that you are or may be in breach of any applicable laws (e.g. because content you have posted may be defamatory), SAL may use your personal information to inform relevant third parties such as your employer, internet provider or law enforcement agencies about the content and your behavior.

All pre-employment employee records and documents will be kept for 1 year starting from the date a rejection letter sent to the unsuccessful applicant. We keep your records because we often match your data against new vacancies that arise from time to time. Where there is an interest by SAL to invite you to for interviews, we will make contact with you directly.

All employee records, accident incident reports, and finance department documents will be kept for 10 years. Overall retention for all documents is 5 years.

You have the right to control your personal data that SAL has obtained, and exercise your data protection rights, by contacting us. In some cases, your ability to access or control your personal data will be limited, as required or permitted by applicable international and/or national law. To verify and control your data we may store and process.

Who do I contact about my Personal Information?

Please address requests and questions about this or any other question about this Privacy and Cookies Policy to the DataPrivacyOfficer@sal.sa or DPO@sal.sa. Our Data Protection Officer mailing address is:

SAL Saudi Logistics Services Company

7051 Al Amir Sultan – Al-Salamah

Unit # 406

Jeddah 23525-2661

Kingdom of Saudi Arabia

You’ll need to provide two original forms of your ID; copies are not acceptable. These can include your National ID/Iqama or Passport.

Please do not create an account if you are under 18 and want to register for a SAL account. If you are aged 18 or under, please get your parent/guardian’s permission before you provide any personal information to SAL for an account that is registered to a company or and Adult over 18 years of age.

All request about PII must go to DPO. Please address requests and questions about this to the DataPrivacyOfficer@sal.saor DPO@sal.sa

Our Data Protection Officer

mailing address is:

SAL Saudi Logistics Services Company

7051 Al Amir Sultan – Al-Salamah

Unit # 406

Jeddah 23525-2661

Kingdom of Saudi Arabia

You’ll need to provide two forms of your ID. These can include your National ID/Iqama or Passport.

Your personal information may be shared with the companies within our business partners, which includes Saudia Airlines Cargo Company (SACC) and Saudi Ground Services (SGS). We share information with them, so they can assist us in providing services to you.

We may also disclose your personal information to the following third parties for the purpose described here:

We do not sell personal information to affiliates, and we only allow third parties to send you marketing information where we have your consent to do so.

SAL Saudi Logistics Services Company will take appropriate steps to protect the personal information we collect from you in our systems. We have implemented technology and security features to safeguard the privacy of your personal information.

We take reasonable steps to ensure that your personal information is accurate, complete, and up-to-date whenever we collect or use it.

If the personal information we hold about you is inaccurate, incomplete or out-of-date, please contact us and we will take reasonable steps to either correct this information, or if necessary, discuss alternative action with you.

If you wish to gain access to your personal information, have a complaint about a breach of your privacy or you have any query on how your personal information is collected or used please forward your request, complaint or query to the DPO at DataPrivacyOfficer@sal.sa or DPO@sal.sa

Our Data Protection Officer mailing address is:

SAL Saudi Logistics Services Company

7051 Al Amir Sultan – Al-Salamah

Unit # 406

Jeddah 23525-2661

Kingdom of Saudi Arabia

You’ll need to provide two forms of your ID. These can include your National ID/Iqama or Passport. We will respond to your query or complaint as soon as possible.

This Privacy and Cookies Policy may be updated from time to time, so you may wish to check it each time you submit personal information to SACC. The date of the most recent revisions will appear on this page. If you do not agree to these changes, please do not continue to use SAL websites to submit personal information to SACC. If material changes are made to the Privacy and Cookies Policy, for instance affecting how we would like to use your personal information, we will notify you by placing a prominent notice on the website.

Our Privacy Policy may change from time to time. We will not reduce your rights under this policy without your explicit consent. We will post any Privacy Policy changes on this page.

What is the scope of our Privacy Policy?

This Privacy Policy only covers our website. Links within our website to external websites are not covered by this policy and remains the responsibility of the owners of these sites.

Application data cache

An application data cache is a data repository on a device. It can, for example, enable a web application to run without an Internet connection and improve the performance of the application by enabling faster loading of content.

Browser web storage

Browser web storage enables websites to store data in a browser on a device. When used in "local storage" mode, it enables data to be stored across sessions (for example, so that the data is retrievable even after the browser has been closed and reopened). One technology that facilitates web storage is HTML 5.

Device

A device is a computer that can be used to access SAL services. For example, a device could be a desktop, tablet or smartphone.

What is a cookie?

A cookie is a small amount of data, which often includes a unique identifier that is sent to your computer, tablet or mobile phone (all referred to here as a “device”) web browser from a website’s computer and is stored on your device’s hard drive. Each website can send its own cookie to your web browser if your browser’s preferences allow it. Many websites do this whenever a user visits their website in order to track online traffic flows. Similar technologies are also often used within emails to understand whether the email has been read or if any links have been clicked. If you continue without changing your settings, we’ll assume that you are happy to receive all cookies on the SAL website. However, you can change your cookie settings at any time. During the course of any visit to SAL website, the pages you see, along with a cookie, are downloaded to your device. Many websites do this, because cookies enable website publishers to do useful things like find out whether the device (and probably its user) has visited the website before. This is done on a repeat visit by checking to see, and finding, the cookie left there on the last visit.

SSL (Secure Sockets Layer)

SSL is the standard security technology for establishing an encrypted link between a web server and a browser. This link ensures that all data passed between the web server and browsers remain private and integral. SSL is an industry standard and is used by millions of websites in the protection of their online transactions with their customers.

To be able to create an SSL connection a web server requires an SSL Certificate. When you choose to activate SSL on your web server you will be prompted to complete a number of questions about the identity of your website and your company. Your web server then creates two cryptographic keys - a Private Key and a Public Key.

The Public Key does not need to be secret and is placed into a Certificate Signing Request (CSR) - a data file also containing your details. You should then submit the CSR. During the SSL Certificate application process, the Certification Authority will validate your details and issue an SSL Certificate containing your details and allowing you to use SSL. Your web server will match your issued SSL Certificate to your Private Key. Your web server will then be able to establish an encrypted link between the website and your customer's web browser.

The complexities of the SSL protocol remain invisible to your customers. Instead their browsers provide them with a key indicator to let them know they are currently protected by an SSL encrypted session - the lock icon in the lower right-hand corner, clicking on the lock icon displays your SSL Certificate and the details about it. All SSL Certificates are issued to either companies or legally accountable individuals.

Typically, an SSL Certificate will contain your domain name, your company name, your address, your city, your state and your country. It will also contain the expiration date of the Certificate and details of the Certification Authority responsible for the issuance of the Certificate. When a browser connects to a secure site it will retrieve the site's SSL Certificate and check that it has not expired, it has been issued by a Certification Authority the browser trusts, and that it is being used by the website for which it has been issued. If it fails on any one of these checks the browser will display a warning to the end user letting them know that the site is not secured by SSL.

Affiliates

An affiliate is an entity that belongs to the SAL group of companies.

HTTP Referrer

An HTTP Referrer is information transmitted to a destination web page by a web browser, typically when you click a link to that web page. The HTTP Referrer contains the URL of the last web page that the browser visited.

IP address

Every device connected to the Internet is assigned a number known as an Internet protocol (IP) address. These numbers are usually assigned in geographic blocks. An IP address can often be used to identify the location from which a device is connecting to the Internet.

Non-personally identifiable information

This is information that is recorded about users so that it no longer reflects or references an individually identifiable user.

Personal information

This is information that you provide to us which personally identifies you, such as your name, email address or billing information, or other data which can be reasonably linked to such information by SACC, such as information we associate with your SAL Account.

Pixel tag

A pixel tag is a type of technology placed on a website or within the body of an email for the purpose of tracking activity on websites, or when emails are opened or accessed, and is often used in combination with cookies.

Sensitive Categories

An advertising category may be sensitive if it relates to topics such as race, religion, sexual orientation or health. When showing you tailored ads, we may associate an identifier from cookies or similar technologies with topics such as "Cooking and Recipes" or "Air Travel", but not with sensitive categories. We impose a similar policy on our advertisers.

Sensitive personal identification information (SPII)

This is a particular category of personal information relating to confidential medical facts, racial or ethnic origins, political or religious beliefs or sexuality.

Server logs

Like most websites, our servers automatically record the page requests made when you visit our sites. These “server logs” typically include your web request, Internet Protocol address, browser type, browser language, the date and time of your request and one or more cookies that may uniquely identify your browser.

Unique device identifier

A unique device identifier (sometimes called a universally unique ID or UUID) is a string of characters that is incorporated into a device by its manufacturer and can be used to uniquely identify that device (for example an IMEI number of a mobile phone). Different device identifiers vary in how permanent they are, whether they can be reset by users and how they can be accessed. A given device may have several different unique device identifiers. Unique device identifiers can be used for various purposes, including security and fraud detection, syncing services such as a user’s email inbox, remembering the user’s preferences and providing relevant advertising.

Do Not Track (DNT) browser setting

DNT is a feature offered by some browsers which, when enabled, sends a signal to websites to request that your browsing is not tracked, such as by third party ad networks, social networks and analytic companies. The www.saudiaircargo.com website does not currently respond to DNT requests.