Who is Responsible for the Processing of Your Personal Data?

Doosan Power Systems Arabia

Represented by Mohamed Ali, Hazim Kurdi

Al Olaya Tower, 8th Floor, Prince Sultan St., Jeddah 23617, Saudi Arabia

Tel.: +966 (12) 6155 550

Email: info.dpsar@doosan.com

Purpose of Processing Data

Purpose of Processing Data

• Providing and managing website services
• Responding to user inquiries or requests
• Maintaining information security
• Improving website quality and performance
• Complying with Saudi laws and regulations

Legal Basis of Processing Data

Processing is based on:

• Your explicit consent
• Fulfillment of contractual or service-related obligations
• Compliance with PDPL regulatory requirements

Categories of Recipients of Personal Data

Personal data may be shared with:

• Internal departments (e.g., Customer Service, Admin, Management)
• External service providers supporting website or email operations
• Saudi government authorities, when required by law

Data Transmission to Third Countries

If personal data is transferred outside the Kingdom of Saudi Arabia, such transfers will only occur in accordance with the PDPL and the Personal Data Transfer Regulations issued by SDAIA.

Your Rights Under the PDPL

You have the following rights:

• Request access to your personal data
• Request correction or updates
• Request deletion (where applicable)
• Restrict or object to certain processing activities
• Withdraw consent
• File a complaint with SDAIA

Data Storage Duration

We retain data only for the duration necessary to fulfill its purpose, in compliance with legal retention regulations. After the termination of a contract, data will be deleted once the statutory retention period has expired.

Contact Information

For inquiries or to exercise your rights, please contact:

Email: info.dpsar@doosan.com

Information About the Security of Your Personal Data

We implement appropriate technical and organizational measures in accordance with the PDPL, as well as security guidelines issued by SDAIA and the National Cybersecurity Authority (NCA). These measures are designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

Personal data submitted through the Contact Us feature is transmitted directly to our corporate email systems. Depending on our email infrastructure, processing or storage may occur inside or outside Saudi Arabia. Any such transfers will comply with the PDPL and the relevant Personal Data Transfer Regulations.

Access to personal data is restricted to authorized personnel trained in data protection and information security. Our safeguards are reviewed and updated regularly to address evolving cybersecurity risks.

State of the Data Protection Law Information in accordance with the Saudi PDPL

Jeddah, April 2026