������Ƶ

1. International Data Transfers: Required if personal data is transferred outside Saudi Arabia, detailing transfer mechanisms and safeguards

2. Cookies and Tracking Technologies: Required for companies with websites using cookies or similar technologies

3. Employee Data Processing: Required for notices covering employee personal data processing

4. Children's Privacy: Required if services may involve collecting data from children

5. Special Categories of Personal Data: Required if processing sensitive personal data as defined in PDPL

6. Automated Decision Making: Required if using automated processing to make decisions about individuals

7. Marketing Communications: Required if personal data is used for marketing purposes

1. Schedule 1: Detailed Data Categories: Comprehensive list of all personal data categories collected, organized by department or purpose

2. Schedule 2: Third Party Processors: List of authorized data processors and their roles

3. Schedule 3: Technical Security Measures: Detailed description of security protocols and measures

4. Schedule 4: Data Retention Schedule: Specific retention periods for different categories of personal data

5. Schedule 5: Cookie List: Detailed list of cookies used, their purposes and duration

6. Appendix A: Data Subject Request Forms: Standard forms for submitting data subject rights requests

7. Appendix B: Consent Forms: Standard consent forms for specific processing activities