Privacy notice

Saudi Arabian Oil Company (“Aramco” or “Saudi Aramco”), is a Saudi joint stock company established in the Kingdom of Saudi Arabia (the “Kingdom”) by virtue of Royal Decree No. M/8, dated 4/4/1409H (corresponding 13/11/1988G) with fully paid capital of SAR 60,000,000,000 and registered in the city of Dhahran under commercial registration no 2052101150.

Aramco, together with its subsidiaries and controlled affiliates (collectively the “Aramco Group” or “Saudi Aramco Group”), follows strict policies and guidelines to protect personal data and to comply with applicable data protection laws and regulations.

Your privacy is important to us and maintaining your trust is our priority. This Privacy Notice informs you how the information submitted by you or collected by Aramco through this Site (and elsewhere) may be processed for the purposes set out below.

You may also be provided with additional privacy notices, for example as part of a job application process. To the extent there are any inconsistencies between this Privacy Notice, and the additional one, the additional privacy notice shall prevail for the purposes it was provided for. 

1. Aramco Group Websites

The Aramco website (aramco.com) (“Site”) may include links to other websites of Aramco Group businesses, products and services, each of which may have their own privacy notices. When visiting any of our other websites, please review and familiarize yourself with their relevant privacy notices.

2. Information we collect

When you use the Site, we may collect information about you (“Personal Data”). This includes both Personal Data you may provide to us, or that is provided about you such as:

• Your name
• Language(s) you may speak, or view the Site in,
• Contact details (such as telephone numbers, email address, address)
• User login data
• Demographic data (e.g. date of birth)
• Technical Information, and device data (IP address, unique system identifiers and information logged by cookies or similar technologies), including usage information (such as the number of visitors on a specific page of the Site, how long you stay on a page, or which hyperlinks you click on). Please review our Cookie Notice for additional information on how we use these technologies 
• If applying for a job, additional information such as your employment and education history, nationality, date of birth, and other relevant information may be collected.

 

We may also collect Personal Data about you from publicly and commercially available sources (as permitted by law and the terms of use applicable to the source). We may combine that Personal Data with other Personal Data we collect about you, including when you visit and use our Site. This may include (but is not limited to) social media websites where you publicly share information about yourself, such as LinkedIn, X (previously Twitter), job sites or from other third-party sources. 

 

3. How we collect, use and process your Personal Data

We collect, use and process your Personal Data in connection with your use of the Site, its management, improvement, and in providing you services such as (but not limited to):

• Registering to become a supplier;
• Applying for a job; including enabling us to conduct background checks, evaluate and determine your suitability for the role you are applying for, and onboard you, should you be successful.
• The evaluation and entering into a partnership, supplier relationship, or pursuing other business opportunities;
• Business execution including the entering into of agreements with customers, suppliers and managing relationships with such parties;
• Communicating to our customers, investors, and prospective, existing and previous employees;
• Legal and/or regulatory compliance reasons including litigation and defense of claims.

Where appropriate we do this with your consent, or based on our legitimate interest, or other applicable legal basis. 

4. How we might share your Personal Data

We may share your Personal Data with Aramco Group companies, affiliates or other third parties. We may do this:

• Where we need assistance from third parties to grant you access to or in connection with your use of tools and services on the Site. This may include, but not be limited to:  facilitate posting of information, content and/or otherwise use of the Site;
• Where we have a public interest or legal duty to do so (e.g., assisting with detection of crime including with law enforcement agencies, regulatory reporting, litigation, or defending legal rights);
• Where we have a duty to disclose to a competent public authority, government, or regulatory agency, or where necessary to comply with a legal or regulatory compliance obligation which Aramco or a relevant Aramco Group member is subject to, or as permitted by applicable local law;
• In the event of (or a proposed) reorganization, merger, divestment, or other sale of some (or all) of our assets or stock, to any successor; or in connection with a bankruptcy reorganization;
• As appropriate in the management and support of our business, with our professional advisers or consultants, including lawyers, bankers, auditors, accountants, and insurers providing consultancy, legal, banking, audit, accounting or insurance services to us;
• To enforce or apply any agreements we have with you, or others;
• To support our business with the general business processing, information technology, and system administration services to us; or
• Where we asked for your permission to share your Personal Data for a specific purpose, and you agreed.

5. Social Media

We may use social media sites such as Facebook, LinkedIn, and X (previously Twitter). If you use these websites or their services, you should review their privacy policy for more information on how they deal with your Personal Data.

Social media platforms also allow you to indicate your preferences to them about how they share some of your personal data, or the advertising you receive on their platforms. Please contact your social media platforms for more information.

6. How we protect and handle your Personal Data

We use robust technical and organizational measures to protect any Personal Data we process about you. All Aramco personnel who have access to your Personal Data operate under strict corporate policies and guidelines to ensure the appropriate protection of the data and to comply with applicable local data protection laws and regulations.

7. International data transfers

We store and process your Personal Data in various jurisdictions, including the Kingdom of Saudi Arabia. Your Personal Data may be shared with and processed by Aramco or other Aramco Group subsidiaries and affiliates outside of the country in which your Personal Data was collected. It may also be accessed or processed by staff operating outside of that country.

The laws on processing such Personal Data in these locations may be less stringent than in your country. We will take all steps reasonably necessary and/or required by applicable data protection laws to ensure that your Personal Data is transferred subject to an appropriate mechanism, treated in accordance with this notice, and provided equivalent protections under the applicable laws regarding its transfer.

8. How long do we keep your Personal Data?

We will keep your Personal Data for as long as we have a relationship with you and when you use our Site. Following the end of the relationship, we shall retain this data for a period of 7 years or such longer period as required by law and/or to protect our legal interests. We will not keep any information for longer than is strictly necessary and when we no longer need the information, we will securely destroy it in accordance with our internal policies, or anonymize it. Should you wish to request earlier deletion, you may discuss this by contacting Aramco.

9. Your Rights

Under certain applicable laws, you may have rights in relation to your Personal Data. These rights include the right to access and rectify inaccurate Personal Data that you provided to Aramco, or that we collected about you.

Subject to certain limitations, users accessing the Site within and/or otherwise located within the European Union (EU) may have certain rights under applicable laws. The rights include:

• Right of access, including to request a copy of what Personal Data we hold about you;
• Rectify, or update inaccurate and add to incomplete Personal Data we hold about you;
• Subject to limitations, request deletion of your Personal Data; 
• Restrict the processing of your Personal Data if certain circumstances apply;
• Object to the processing of your Personal Data if its collection and use is based on our legitimate interests;
• Request a copy of your Personal Data in a portable format in certain circumstances;
• Object to the use of your Personal Data for marketing purposes;
• Withdraw consents you previously gave to Aramco regarding the use of your Personal Data; 
• Lodge a complaint with the Supervisory Authority.

To exercise your rights, you can contact Aramco in writing at the email address provided below. Should you object to the processing of your information, this may, without limitation, impede your access to the Site (or parts of it), impair or render impossible your use of some of the functionalities, and services on it.

 

10. Contact Us

If you have any questions regarding this Privacy Notice, please contact: dataprivacy@aramco.com.

Date modified: 13 August 2024