Information about personal data processing through the Formadune website and rights under the Saudi Personal Data Protection Law.
This policy describes the processing of personal data through formadune.co by Formadune Company for Information Technology ("Formadune", "we"). The applicable framework is the Personal Data Protection Law of the Kingdom of Saudi Arabia issued by Royal Decree No. (M/19) dated 9/2/1443H, as amended by Royal Decree No. (M/148) dated 5/9/1444H, and its Implementing Regulations.
The controller responsible for your personal data is Formadune Company for Information Technology (Limited Liability Company), head office Al Madinah Al Munawwarah, Kingdom of Saudi Arabia. You can contact us about any privacy matter at info@formadune.co.
Data you provide through our forms: full name, company, job title, business email, phone number, country, sector, the content of your message, training preferences, and any files you choose to attach.
Technical data may be processed to operate and protect the website, such as IP addresses and request logs. Applicable retention criteria are described below.
We do not ask for sensitive data through this website. Please do not include sensitive personal data in messages or attachments.
We process your data to respond to your inquiry, prepare quotations for software, services or training, register you for training programs, communicate with you about your request, and maintain the security of the website.
For inquiries submitted through a form, processing is based on the consent you provide for responding to that request. Any additional processing requires its own applicable legal basis. You may withdraw consent by contacting the email address in this policy.
We do not use your data for direct marketing without your separate consent, and we do not sell personal data.
Personal data may be disclosed where needed to process your request to website hosting or technology providers, Dassault Systèmes or its sales channels for software licensing enquiries, and competent authorities where required by law. Disclosure and processor arrangements must meet the requirements of the Law and its Implementing Regulations.
Technology providers may process personal data outside Saudi Arabia. Any transfer must satisfy Article 29 of the Law and the applicable Regulation on Personal Data Transfer outside the Kingdom, including the relevant protection, safeguard and data-minimisation requirements. Contact us before submitting data if you need details of the processing locations and transfer arrangements.
We keep personal data only for as long as necessary to fulfil the purposes described above or as required by applicable laws. Afterwards, data is destroyed or anonymised.
We apply organisational, administrative and technical measures to protect personal data, including encrypted connections (HTTPS), access restricted to authorised staff, and confidential handling of engineering files. If a personal data breach occurs, we will notify the competent authority and affected data subjects as required by the Implementing Regulations.
Under the Law you have the right to: be informed about how your data is processed; access your personal data; obtain a copy of it in a readable and clear format; request correction, completion or updating; request destruction of data no longer needed; and withdraw your consent at any time.
To exercise any of these rights, email info@formadune.co. We will respond within the period set by the Implementing Regulations.
If you believe your personal data has been processed in breach of the Law, you may contact us first, and you also have the right to file a complaint with the Saudi Data & AI Authority (SDAIA) as the competent authority.
We use only essential cookies and local storage, and cookieless aggregated statistics. See our Cookie Policy for details.
We may update this policy from time to time. The latest version is always available on this page with its update date.