PRIVACY NOTICE

1. Introduction

Dammam Airports is committed to protecting personal data. This Privacy Notice has been formulated to help data subjects understand the nature and type of data collected and the purpose of its processing, in order to provide the necessary services to users in accordance with the terms and conditions in force in the Kingdom of Saudi Arabia.

Dammam Airports acts as the controller of your personal data under the KSA Personal Data Protection Law approved by Royal Decree No. (M/19), dated 09/02/1443H (corresponding to 16 September 2021).

2. What is Personal Data & Processing?

The website is not designed to collect personal data from data subjects' computers while browsing, except for electronic identifiers, which are as follows:

• __CSRFCOOKIE
• __RequestVerificationToken
• AspNet.Cookies
• ASP.Net_SessionId
• User language preference
• SC_ANALYTICS_GLOBAL_COOKIE
• sitecore_userticket
• sxa_site

3. Why Do We Process Your Personal Data?

• Protects against cross-site request forgery
• Validates requests (anti-forgery)
• Maintains ASP.NET state
• Tracks current user session
• Stores selected language
• Sitecore Analytics tracking
• Session validation
• Stores current Sitecore site name

4. How Is Data Collected?

• Cookies: Automatically created by Sitecore and the browser.
• Logs: System-generated records of technical events (errors, requests, runtime activity).

5. Storing Personal Data

• Session cookies: Removed when the browser closes.
• Persistent cookies: These are long-lived cookies stored in the visitor's browser that remain after the session ends. The primary one is the Sitecore Analytics cookie (SC_ANALYTICS_GLOBAL_COOKIE), which by default expires one year from the date it is set. Its purpose is to recognize returning visitors across multiple sessions. The expiry period can be shortened or extended if required by compliance or organizational policy
• Logs: Sitecore system logs are text files generated in the App_Data\logs folder on the server. They capture technical details such as errors, request activity, and runtime events. Sitecore does not enforce a retention period; industry best practice is to keep logs for 30-90 days for troubleshooting and monitoring, with older files archived or purged according to hosting and compliance policies. Logs contain no personal user data

Changes to the Privacy Notice

The Privacy Notice was last updated on 10/02/2025.

Dammam Airports reserves the right to amend this Privacy Notice from time to time without prior notice. Continued use of the website following such changes constitutes acceptance of the updated notice. Users are encouraged to review this Privacy Notice periodically to stay informed of the latest version.

For Contacts

In accordance with applicable laws and regulations, we welcome all requests, inquiries, questions, and complaints regarding the Privacy Notice or the rights of data subjects. Please contact the Personal Data Protection Officer via email:dmds@daco.sa

OPEN DATA

In line with the principle of transparency and providing information to everyone, Dammam Airports has made open data available to all visitors and users of the company's electronic portal. This enables them to benefit from and use the available data as needed. The portal provides various reports and statistics that include different types of data, which can be downloaded in multiple formats

Open Data Policies:

1. Data Use Policy and Disclaimer
2. freedom of information policy

Data Usage Policy and Disclaimer

pen data refers to a set of information available without technical, financial, or legal restrictions that individuals can benefit from and use as needed. It includes reports and numbers related to the activities of the Dammam Airports and is available in various formats (XLS, CSV, JSON, XML), making it easy for users to categorize, filter, and analyze. These data can be accessed through the Open Data Library or the National Open Data Portal.

Responsibility of Open Data Users:

The General Authority of Civil Aviation allows all users of its website to access the open data for free, with the right to use it at their own personal responsibility. However, users must ensure that no errors exist in the content, source, or date of the data when reusing it.

Using the open data from Dammam Airports Company's website constitutes the user's acknowledgement to comply with the Privacy Policy and the Open Data Re-use Terms. Please note that these terms and conditions may be changed or amended at any time without prior notice; therefore, users should regularly review the Open Data Use Policy to learn of any updates.

Responsibility of the Dammam Airports :

• Dammam Airports does not guarantee the continuous availability of this data or any part of it, and it reserves the right to modify, update, or remove it without prior notice.
• Dammam Airports is not responsible under any circumstances for any direct, indirect, incidental, consequential, special, or exceptional damages arising from the use of the published data.
• Dammam Airports does not provide any representations or warranties, either express or implied, regarding the completeness, accuracy, reliability, or suitability of the data.

Terms of Reuse:

• The user must not alter the data or its source.
• The data should not be used for political purposes, to support unlawful or criminal activities, for racist comments, incitement, or negative influence on culture, equality, or any other illegal activity or actions contrary to the customs and traditions of the Kingdom of Saudi Arabia.
• When using this data, the source should be acknowledged as the Dammam Airports , with a link to the company’s website, to preserve the intellectual property of the data, its credibility, and the integrity of its source.

Freedom of Information

What is Freedom of Information?

Freedom of Information refers to the provision of non-protected or non-classified public information processed by the Dammam Airports, regardless of its source, form, or nature. Open data falls under public information.

Who Can Request Information?

Every individual has the right to access non-protected public information. All requests for access to or acquisition of public information are handled based on equality, with no discrimination among individuals.

What Information Can Be Requested?

The default is to make non-protected public information available. Disclosure is excluded for what is considered protected information (including but not limited to):

1. Information whose disclosure would harm the State's national security, policy, interests or rights.
2. Military and security-related information.
3. Information and documents obtained under agreements with other states and classified as protected.
4. Information related to investigations, seizures, searches, or surveillance operations concerning crimes, violations, or threats.
5. Information containing recommendations, suggestions or consultations for the promulgation of legislation or a government decision that has not yet been issued.
6. Information of a commercial, industrial, financial or economic nature whose disclosure results in unlawful profit or avoidance of loss.
7. Scientific or technical research or rights encompassing an intellectual property right whose disclosure prejudices a moral right.
8. Information on competitions, bids and auctions whose disclosure undermines competition justice.
9. Classified information is confidential or personal under another system or requires certain statutory procedures for accessing or obtaining it.
10. Information whose disclosure imposes an unreasonable burden (technical, time-related, or financial) to access or extract from storage media or requires the creation of new data instead of retrieving existing records.

Applicant Rights:

• To know the reasons for rejection in case of full or partial denial.
• To receive a response within the approved timeframe (10 business days).

Dammam Airports Company Commitments:

• To implement and adopt policies and procedures governing freedom of information.
• To define unified channels for submitting requests (electronic form).
• To verify identity before granting access or delivering information.
• To respond within 10 business days from the date of receiving the request, with notification to the applicant of any exte nsion, its reasons, and the new deadline if needed.
• To protect privacy and security during processing and disclosure, and to comply with personal data regulations.
• To conduct periodic compliance reviews and internal awareness programs to promote transparency and adherence.

Dammam Airports receives public information requests through the following page:Click here