Data Protection Policy

We are pleased that you are visiting this website (“Site”). This Data Protection Policy is maintained by SABIC, a company established under the laws of the Kingdom of Saudi Arabia ("KSA"), with its principle place of business at its Head Quarters, located at Damman Highway, Qordoba, Riyadh, (Telephone: +966112258000 and fax +966112259000).¹

SABIC is committed to protect and respect your privacy. SABIC will only collect and process personal data to the extent it is allowed to do so, and will process personal data in a lawful, fair and transparent manner. This document explains what personal data we collect, for what purpose, to whom we disclose the data, and for how long we keep the data. Additionally, we describe your rights and how you can invoke them. For the purpose of this Policy, “SABIC” means all SABIC business units and entities as well as affiliates that are controlled by SABIC. The objective of this Data Protection Policy is to provide a uniform minimum standard for SABIC with respect to its protection of Personal Data worldwide. SABIC recognizes that certain local laws may require stricter standards than those described in this Policy, in which case the stricter standards prevail. Where local law provides a lower level of protection of Personal Data than the level established by this Data Protection Policy, the latter prevail. This Policy applies to any digital and non-digital means of collecting your personal data. When we collect your personal data, we will provide you with more details and explain the purpose for such processing.

What personal data do we collect and process?

In order to provide certain services, products and information to you, we may ask that you register and provide us with information about you and/or your company such as contact information and identifying, authenticating, location and/or professional data. SABIC processes your personal data when you have given consent, the processing is needed for the performance of a contract, when SABIC is legally obliged to do so, or when the processing is necessary for the legitimate interest of SABIC.

In addition, SABIC will process personal data for the purpose for which it is collected. We will not use your contact information for product or promotional advertising unless you have specifically requested to receive product information.

If you provide us with personal data about other individuals, please ensure that they have given you consent to do so and that they are aware of our Data Protection Policy.

We use cookies to make this Site easier and better to use, to tailor our products and services to your interests and needs and marketing purposes. Cookies are files or pieces of information that may be stored on your computer (or other devices) when you visit a site. Please see our Cookie Policy for further details about the cookies we use to operate this (and other) Site(s) and how you can disable or enable them.

For what purposes do we use your personal data?

We will process your data for the purposes for which it is collected, such as commercial processes (e.g. commercial contacts, billing or invoicing sales, product delivery, processing orders, making or receiving payments for goods and/or services, permissible marketing activities, purchasing materials, supplies, equipment, supplier due diligence, customer screening processes, licensing agreements and non-disclosure agreements, etc.), monitoring and ensuring compliance with applicable laws, regulatory requirements, communications, responding and complying with requests, career opportunities within SABIC and safety and security.

What do we do to protect your personal data?

SABIC has taken appropriate technical, physical, and organizational measures to protect your personal data against unauthorized access or disclosure, unlawful processing, accidental loss or damage, and unauthorized destruction.

Among other things, we use the following measures:

• Access control
• Security awareness and training
• Security breach procedures
• Contingency/emergency planning
• Device and media controls
• Audit controls
• Data Integrity Controls
• Storage and Transmission Security
• Secure disposal

SABIC will require third party service providers, who process Personal Data on its behalf, to implement similar security and confidentiality measures.

To whom do we disclose your personal data and why?

To fulfill the purposes above, SABIC may need to disclose to, transfer or otherwise share your personal data within SABIC or with a third party service provider to whom we have outsourced the processing of personal data. When SABIC outsources processing activities, it will ensure the service provider is bound to implement and maintain adequate data protection and security measures and will comply with applicable privacy laws.

In some instances, SABIC may share the personal data of persons residing in the European Union as described above with entities located in countries outside of the European Economic Area (so called “third countries”) where applicable laws may not offer the same level of data protection as in the European Union. In such cases, SABIC takes measures to ensure an appropriate level of data protection and security.

How long do we keep your personal data?

As required by law, we will only hold your personal data as long as necessary to fulfill the purposes for which the data is collected before making it non-identifiable (anonymous) or deleting it. Unless there is a contractual or legal requirement to retain data for a longer period (such as required by trade or tax regulations).

What are your Rights?

SABIC is committed to transparently processing your data. Depending upon your jurisdiction, you may have the right to request access to your personal data, rectification/correction, erasure (subject to above-mentioned limitations), and data portability. Under certain conditions, you may also object to the processing of your personal data or restrict the processing. If you have given consent for processing your personal data, you have the right to withdraw your consent.

If you wish to exercise your rights, please send your request by email to dataprotection@sabic.com.

How can you file a complaint?

If you have a complaint regarding the manner in which SABIC processes your personal data, or suspect that a personal data breach has occurred, please contact us at dataprotection@sabic.com and provide sufficient details for us to revert to you. If, in your view, the complaint is not dealt with satisfactory, you may have the right to lodge a complaint with the Data Protection Supervisory Authority established in your country or residence.

How can you contact us?

Please contact us if you have any questions about our Data Protection Policy and/or the manner in which we process your personal data by sending an email to dataprotection@sabic.com.

This Data Protection Policy is subject to change. We advise you to check it regularly.

Version 25 May 2018

¹For the processing of personal data of residents of the European Union, SABIC Limburg B.V. (Europaboulevard 1, 6135 LD Sittard, The Netherlands, Chamber of Commerce: 14073232) is designated as the main establishment of SABIC within the European Union, in accordance with article 4.16 of GDPR.