Privacy Notice| iQMS Application.

Thank you kindly for downloading the iQMS Application. The following document sets out what personal data is collected and how it is processed by the application, and other vital information related to your usage of the application. For the purposes of this Privacy Notice the iQMS Application (App) refers to the application installed on your mobile device, as well as the Aramco and other systems and webpages the App interacts with. This privacy notice is provided in addition to any other notices you may have been provided such as those appearing on specific systems.

�

Privacy Notice

Saudi Arabian Oil Company (�Aramco� or �Saudi Aramco�), is a Saudi joint stock company established in the Kingdom of Saudi Arabia (the �Kingdom�) by virtue of Royal Decree No. M/8, dated 4/4/1409H (corresponding 13/11/1988G) with fully paid capital of SAR 90,000,000,000� and registered in the city of Dhahran under commercial registration no 2052101150.

Aramco, together with Aramco�s subsidiaries and controlled affiliates (collectively the �Aramco Group� or �Saudi Aramco Group�), follows strict policies and guidelines to protect personal data and to comply with applicable data protection laws and regulations.

Your privacy is important to us and maintaining your trust is our priority. This Privacy Notice informs you how the information submitted by you or collected by Aramco through this Site (and elsewhere) may be processed for the purposes set out below.

Please ensure you familiarize yourself with this and any additional privacy notices information provided to you, for example when you register for the App.

1. Aramco iQMS App

The iQMS App is available on Apple�s App Store or Google Play (together �Site�) may include links to other websites of Aramco Group businesses, products and services, each of which may have their own privacy notices. When visiting any of our other websites, please review and familiarize yourself with their relevant privacy notices.

2. Information we collect

When you use the App, we may collect information about you (�Personal Data�). This includes both Personal Data you may provide to us, or that is provided about you such as:

• Your name
• Your Aramco HR Data including but not limited to: Network ID and Logon, role, Profile picture, SAP number, status, Academic and course qualifications and associated documents. Additional Document such as your CV, National ID, and your photo.
• Workload information, including your calendar of scheduled, planned or deliverable tests, and their location. We will record time relevant information such as your work order hours information including hours consumed for a test. We will record the inspection decisions you make, any additional tests you ask for / require, purchase order changes, calls for inspections, associated reports and comments entered by you.
• The App generates a QR code associated to your profile
• Contact details (such as telephone numbers, email address, address)
• User login data, including geographical location at login, or location of allocated tests.
• Biometric data to help you log into the App faster.
• Demographic data (e.g. date of birth)
• Your employment information, including details about your department and role.
• Technical Information, and device data (IP address, unique system identifiers and information logged by cookies or similar technologies), including usage information (such as the number of visits you make on a specific section of the App, how long you stay on that section, or which features you use). We may log your interactions with notifications served by the App.
• We may capture photographic, audio or video of you, when you upload documentary evidence of issues, equipment condition, or you explain the outcome of various testing that you carried out, for example explaining a leak on a valve on video.

We may combine the Personal Data from the App, with other Personal Data we collect about you. This may include (but is not limited to) other publicly available information, from other third-party sources, or other Aramco operated systems or Sites.

3.How we collect, use and process your Personal Data

We collect, use and process your Personal Data in connection with your use of the App, its management, improvement, and in providing you services such as (but not limited to):

• To administer the required iQMS activities,
• Track, manage, evaluate and improve maintenance and quality management systems,
• To track manage, evaluate and improve employee interactions with the App, and improve employee and workflow efficiencies,
• To take appropriate actions arising out of the use of the App, including HR related processes.
• Legal and/or regulatory compliance reasons including litigation and defense of claims.

Where appropriate we do this with your consent, or based on our legitimate interest, or other applicable legal basis.

4. How we might share your Personal Data

We may share your Personal Data with Aramco Group companies, affiliates or other third parties. We may do this:

• Where the iQMS activities require third party data sharing, for example in relation to items identified in any inspections or reports.
• Where we need assistance from third parties to grant you access to or in connection with your use of tools and services on the App. This may include, but not be limited to:� facilitate posting of information, content and/or otherwise use of the App;
• Where we have a public interest or legal duty to do so (e.g., assisting with detection of crime including with law enforcement agencies, regulatory reporting, litigation, or defending legal rights);
• Where we have a duty to disclose to a competent public authority, government, or regulatory agency, or where necessary to comply with a legal or regulatory compliance obligation which Aramco or a relevant Aramco Group member is subject to, or as permitted by applicable local law;
• In the event of (or a proposed) reorganization, merger, divestment, or other sale of some (or all) of our assets or stock, to any successor; or in connection with a bankruptcy reorganization;
• As appropriate in the management and support of our business, with our professional advisers or consultants, including lawyers, bankers, auditors, accountants, and insurers providing consultancy, legal, banking, audit, accounting or insurance services to us;
• To enforce or apply any agreements we have with you, or others;
• To support our business with the general business processing, information technology and system administration services to us; or
• Where we asked for your permission to share your Personal Data for a specific purpose, and you agreed.

5. How we protect and handle your Personal Data

We use robust technical and organizational measures to protect any Personal Data we process about you. All Aramco personnel who have access to your Personal Data operate under strict corporate policies and guidelines to ensure the appropriate protection of the data and to comply with applicable local data protection laws and regulations.

6. International data transfers

We store and process your Personal Data in various jurisdictions, including the Kingdom of Saudi Arabia. Your Personal Data may be shared with and processed by Aramco or other Aramco Group subsidiaries and affiliates outside of the country in which your Personal Data was collected. It may also be accessed or processed by staff operating outside of that country.

The laws on processing such Personal Data in these locations may be less stringent than in your country. We will take all steps reasonably necessary and/or required by applicable data protection laws to ensure that your Personal Data is transferred subject to an appropriate mechanism, treated in accordance with this notice, and provided equivalent protections under the applicable laws regarding its transfer.

7. How long do we keep your Personal Data?

We will keep your Personal Data for as long as we have a relationship with you and when you use the App. Following the end of the relationship, we shall retain this data in line with Aramco GI 3000.11 Records Management and for such periods as required by that GI, and laws and/or to protect our legal interests. We will not keep any information for longer than is strictly necessary and when we no longer need the information, we will securely destroy it in accordance with our internal policies, or anonymize it.

8. Your Rights

Under certain applicable laws, you may have rights in relation to your Personal Data. These rights include the right to access and rectify inaccurate Personal Data that you provided to Aramco, or that we collected or created about you.

Subject to certain limitations, the rights include:

• Right of access, including to request a copy of what Personal Data we hold about you;
• Rectify, or update inaccurate and add to incomplete Personal Data we hold about you;
• Subject to limitations, request deletion of your Personal Data;
• Restrict the processing of your Personal Data if certain circumstances apply;
• Object to the processing of your Personal Data if its collection and use is based on our legitimate interests;
• Request copy of your Personal Data in a portable format if certain circumstances;
• Object to the use of your Personal Data for marketing purposes;
• Withdraw consents you previously gave to Aramco regarding the use of your Personal Data;
• Lodge a complaint with the Supervisory Authority.

To exercise your rights, you can contact Aramco in writing at the email address provided below. Should you object to the processing of your information, this may, without limitation, impede your access to the Site (or parts of it), impair or render impossible your use of some of the functionalities, and services on it.

9. Contact Us

If you have any questions regarding this Privacy Notice, please contact: dataprivacy@aramco.com.

Date modified: 08 August 2024