Privacy, Cookie and Secure Usage Policy

1. Introduction

CATRION respects your privacy and is committed to protecting your personal data in accordance with the Personal Data Protection Law and is applicable to data protection regulations in the Kingdom of Saudi Arabia. This Policy describes how we look after your personal data when you visit any of CATRION websites including not limited to (https://catrion.com/) (https://supplier.catrion.com/) (https://ebid.catrion.com/) (https://declarationform.catrion.com/) (https://customer.catrion.com/) and/or any of CATRION mobile Applications (“Platforms”) and tells you about your privacy rights and how all regulations protect you.

CATRION is providing this privacy policy to inform you (“you” refers to any entity or person who is not an CATRION employee) regarding our collection, use, disclosure, and storage of data about you that we collect via our websites, mobile applications, email or otherwise. We keep our Privacy Policy under regular review. It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your contractual relationship with us.

Please note that by providing your personal information, you hereby consent to the privacy policy and agree that we may collect, use, and disclose personal information according to the privacy policy. Note that you are not obligated to provide any information we ask you to provide. However, if you do not provide us with the information we ask for, we may not be able to provide any products or services based on the collection of this information.

2. General Terms:
2.1. www.catrion.com “the website”, the Website is operated by CATRION Catering Holding Company, a Saudi Joint Stock company, with Commercial Registration No. 4030175741, having its principal office at Prince Sultan Road, Al Muhammadiyah District 5, P.O. Box 9178, Jeddah 21413, Kingdom of Saudi Arabia - Registered Capital: SAR 820,000,000.00.
2.2. Personal Data: Any data, regardless of its source or form, that may lead to identifying an individual specifically, or that may directly or indirectly make it possible to identify an individual, including name, personal identification number, addresses, contact numbers, license numbers, records, personal assets, bank and credit card numbers, photos and videos of an individual, and any other data of personal nature.
2.3. Personal Data Protection “PDP law”
2.4. Applicable law: shall mean data protection regulations that are in force, now or in the future.
The user of CATRION Website shall be referred to as (“You”,“your”) including, individuals, entity, in the case of any minor, the minor’s parent or guardian.

3. Who Are We and What Do We Do?

About CATRION

3.1. CATRION, is a leading Saudi Arabian company, with a 40-year history of excellence and innovation. Initially conceived to provide catering services to Saudia, it diversified into In-Flight services, Commercial Laundry, Giga Projects, Retail, and Integrated Catering and Facilities Management. Its Culinary Academy nurtures talent and provides world-class culinary education.

3.2. CATRION understands the importance of protecting your Personal Data and endeavors to process it in accordance with applicable data protection laws and regulations, primarily Saudi Arabia’s National Data Management Office’s Interim Regulations on Personal Data Protection (the “Interim Regulations”) and other applicable data protection laws and regulations (the Interim Regulations and such other laws and regulations referred to generally herein as “Applicable Data Protection Law”).

3.3. For the purpose of Applicable Data Protection Law, CATRION’s the Controller (i.e., person responsible for deciding how your Personal Data is processed) and responsible for your Personal Data.

4. How This Privacy Policy Applies
This Privacy Policy applies where we are acting as a data controller with respect to your personal data as a visitor of our website and/or user of our services; in other words, where we determine the purposes and means of the processing of your personal data. We will only process your personal data in the manner set out in this Privacy Policy if you have specifically agreed or consented to us doing so (for example through your explicit acceptance of this Privacy Policy or via an electronic tick-box or other similar measures as required by the PDP Law).

5. How Is Your Personal Data Collected?

We use different methods to collect data from and about you including through:
5.1. Direct interactions. You may give us your Identity and Contact Data by filling in forms on the Platforms or by corresponding with us by phone, e-mail or otherwise. This includes personal data you provide when you:
a. apply for a vacancy.
b. register on our website.
c. give us feedback or contact us.

5.2. Automated technologies or interactions. As you interact with our website, we will automatically collect technical data about your equipment, browsing actions and patterns. We collect this personal data by using cookies and other similar technologies. We may also receive technical data about you if you visit other websites employing our cookies. Please see our cookie policy below for further details.

5.3. Third parties or publicly available sources. This is information we receive about you if you use any of the other sites we operate or the other services we provide. We may work closely with third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies).

5.4. Messaging services. You may give us information through answering questions through SMS replies. We ask for your communication permissions so that we can inform you about our opportunities, feedback, vacancies etc. that we think will be of interest to you via SMS and similar electronic communication tools.

5.5. Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.

6. How We Use Your Personal Data

6.1. We will only use your personal data when the PDP Law allows us to. In collecting personal information, CATRION clarifies the purpose and acquires such information to the extent of such purpose. In addition, CATRION will use such personal information only for the intended purpose.
6.2. We may use your personal data for one or more of the following purposes:
a. To register you as an existing or prospective vendor to process
b. To process your application for a vacancy
c. To register you as a customer
d. To answer any queries submitted through the Website or sent to us by email or other forms of communication.

6.3. To manage our contractual relationship with you which may include:
1) Notifying you about changes to our terms or Privacy Policy
2) Asking you to leave a review or take a survey.

6.4. To enable you to complete a survey.
6.5. To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting of data)
6.6. To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you.
6.7. To use data analytics to improve our website, products/services, marketing, customer relationships and experiences.
6.8. To make suggestions and recommendations to you about goods or services that may be of interest to you.
6.9. Please note that we do not sell your information.

The above reasons may not be exhaustive, and we may at any time process your Personal Data for any other lawful ground listed in the PDP Law without the need for any further notification.

7. Disclosures Of Your Personal Data
For operational reasons, insofar as reasonably necessary for the purposes, and on the legal bases, set out in this Privacy Policy, we may share your personal data with:
7.1. External third-party service providers who administer our Platforms and provide internet services and host our facilities, provide data warehousing services, customer relationship management services, marketing services, car services or customer survey services.
7.2. Professional advisers including lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance and accounting services.
7.3. Third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them.

We have implemented safeguards to ensure that our service providers treat personal data in a way that is consistent with the terms of this Privacy Policy and the PDP Law, and that it is not used except to fulfil products or services to us or where we believe there is a lawful basis for processing of your personal data.

8. Third- party Links
Our Platforms may contain links, plug-ins, and applications to third-party websites. Please be aware that we are not responsible for the privacy statements and privacy practices of websites not operated by us or an entity in CATRION Holding Company. We encourage you to read the privacy statements of each and every website you visit. This Privacy Policy applies solely to information collected by our Platforms.

9. Data Protection of minors and Children
Children We are committed to protecting the privacy needs of children and we encourage parents and guardians to take an active role in their children's online activities and interests. We do not knowingly collect information from children, and we do not target our websites to children.

10. International Transfers
Some parties that process or store personal data in accordance with this privacy policy may be located in other jurisdictions outside of Saudi Arabia Therefore, by giving your consent, you understand and unambiguously agree that your information may be processed and stored in these jurisdictions and that different privacy laws may apply in these countries which may not ensure the same level of data protection as granted under the PDP Law and this Privacy Policy.

We only make these arrangements or transfers where we are satisfied that adequate levels of protection are in place to protect any information held in that country or that the service provider acts at all times in compliance with applicable privacy laws. Where required under applicable laws we will take measures to ensure that personal data handled in other countries will receive at least the same level of protection as it is given in your home country.
Transfers will be protected by appropriate safeguards, namely the use of standard data protection clauses.
In the event your personal data is transferred to a foreign jurisdiction, it may be subject to the laws of that jurisdiction, and we may be required to disclose it to the courts, law enforcement or governmental authorities in those jurisdictions but we will only do so where required by applicable laws.

11. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who needs access to your personal data for business purposes. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
We have put in place procedures to deal with any suspected personal data breach and will notify you and the Saudia Arabia Data Office of a breach where we are legally required to do so.

However, no internet-based site can be 100% secure and we cannot be held responsible for unauthorized or unintended access that is beyond our control.

12. Your Legal Rights
Under the PDP Law, you have specific rights in relation to your personal data. In particular, and subject to the statutory requirements, you may be entitled to:

a. the right to obtain information;
b. the right to rectification;
c. the right to erasure;
d. the right to restrict processing;
e. the right to object to processing;
f. the right to data portability;
g. the right to complain to National Data Management Office; and
h. the right to withdraw consent.

You may exercise any of your rights in relation to your personal data by writing notice to us by sending an Email to: csdata@catrion.com

13. Cookie Policy
Overview
We use cookies on our website. Insofar as those cookies are not strictly necessary for the provision of our website, products, and services, we will ask you to consent to our use of cookies when you first visit our website.
Not accepting these cookies may affect your use of our Platforms. See below for more information about what cookies are, the tracking technology we use, and how we use them.

What Is A Cookie
A cookie is a small file that is placed and stored on your browser or the hard drive of your device. Cookies allow a website owner to distinguish the activities carried out from your device from other users of that website.
Cookies do not typically contain any information that personally identifies a user, but personal information that we store about you may be linked to the information stored in and obtained from cookies.

What Types Of Cookies We Use And How They Work
Our Platforms use both session and persistent cookies, and first and third-party cookies. Session cookies exist just for your session on our Platforms and persistent cookies exist for a longer period and are activated each time you visit our Platforms. First party cookies are cookies set by our Platforms and third-party cookies are set by third party platforms.
We also use cookies for different purposes. To assist you, we've provided a more detailed explanation of the types of cookies we use below categorized by the purpose of the cookies.
i. Strictly necessary cookies. These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website, progress or complete an order, use a shopping cart or make use of other online services we provide.
ii. Functionality Cookies. These are used to recognize you when you return to our website. This enables us to personalize our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
iii. Analytical or performance cookies. These allow us to recognize and count the number of visitors and to see how visitors move around our Platforms. We aggregate this data and analyze it to improve the way our Platforms work and the user experience, for example, by ensuring that users are finding what they are looking for easily.

How Can I Reject Cookies And/or Delete Existing Cookies
Modern browsers allow you to change your cookie settings. You can set your browsers or devices to accept all cookies, to notify you when a cookie is issued, or not to receive cookies at any time. The last of these means that certain personalized features cannot then be provided to you and accordingly you may not be able to take full advantage of all of the website's features. Each browser is different, so check the ‘help’, 'options' or 'preferences' menu of your browser to learn how to change your cookie preferences.

Please also note that if you delete your cookies, unless you were required to provide explicit consent, we may no longer automatically recognize that you have agreed to our Privacy Policy, this Cookies Policy and any other website terms of use, and we may ask for confirmation of this along with your language and country preferences.

14. Notification Of Changes to This Privacy Policy
If we decide to change our Privacy Policy, we will post those changes on our Platforms. If at any point, we decide to use personal data in a manner materially different from that stated at the time it was collected (and/or where we are required under applicable law) we will notify you. You will have a choice as to whether or not we use your personal data in this different manner. We will use personal data in accordance with the Privacy Policy under which the personal data was collected until you agree otherwise, but if you do not accept the amended Privacy Policy, please stop using our Platforms.

15. CONSENT FOR DISCLOSURE
You acknowledge, confirm, and expressly consent that we may disclose your personal data if this is required by law, or if we determine in good faith that such disclosure is required in order:

i. to comply with any pending judicial inquiry, judicial order or litigation pertaining to the Platforms.
ii. to compel observance of the general terms and conditions of Catrion;
iii. to respond to claims against us regarding personal data that violate any rights of third parties.
iv. to safeguard the rights, property, and safety of Catrion, its employees, users and the general public.

We may disclose your personal data to competent police or judicial authorities or other official government authorities if we deem this useful or necessary, in our sole discretion, for the investigation of fraud, intellectual property infringement or any other harmful activity, or if we reasonably suspect that such activity may expose us or you to any liability.
These Privacy Policy is reproduced in English and Arabic. If there is any inconsistency between the English text and the Arabic text, the Arabic text will prevail.

16. Usage restrictions
By using the CATRION website or services, you agree not to:
i. Upload or download files that contain viruses, corrupted data, or malicious software.
ii. Do anything that may impact the confidentiality, integrity, or availability of information on CATRION website.
iii. Use any method, program or procedure that interferes or attempts to interfere with the proper functioning of our website.
iv. Upload or download files containing software, data or other information not owned or licensed by you.
v. Publish, or disseminate any material or information that contains defamatory, contrary to Islamic law, offensive to public order or morals teachings or illegal information.
vi. Take any action that imposes a large or unreasonable load on our website's infrastructure.
vii. Anything that is a violation of the Cybercrime Law or any other related system in the Kingdom of Saudi Arabia.

17. General Provisions
By using this site, you signify your agreement with CATRION Privacy Policy. We reserve the right to change, revise, add or delete parts of this policy at any time. Your continued use of this website following said possible changes to these terms indicates acceptance of those changes.

Any questions or comments regarding CATRION’ Privacy and Secure Usage Policy should be directed to us by e-mail at: feedback@catrion.com

18. CONTACT
If you experience any technical problems during your interaction with the Platforms, please contact us Itsupport@catrion.com
Queries, concerns or complaints regarding your privacy or this Privacy Policy: please contact csdata@catrion.com

© Copyright 2024. All rights reserved.