This Candidate Privacy Notice provides you with information on how Waseel ASP (“Waseel”, “we”, “us”, “our”) collects and processes personal data that we may obtain from you. Waseel values your trust and is committed to the responsible management, use and protection of your personal data.

 

Introduction

Waseel is committed to protecting the privacy and security of your personal data. This Candidate Privacy Notice describes how we collect and use personal data about you during and after your relationship with us, in accordance with the Personal data Protection Law (PDPL) or other applicable privacy laws. It applies to all job applicants. For purposes of this Candidate Privacy Notice, “personal data” means information relating to an identified or identifiable natural person under the PDPL or other applicable privacy laws dependent on your resident location at the time of application.

 

About us

Waseel was established in 2003 in Saudi Arabia, and is a leading HealthTech company revolutionizing healthcare through innovative digital solutions. By enhancing interoperability, streamlining operations, and fostering a patient-centric approach, Waseel bridges gaps in the healthcare system to better serve providers, payers, and patients. 

 

If you have any questions or concerns regarding our use of your personal data, or if you wish to exercise any of your rights described in this Candidate Privacy Notice, please contact our Data Protection Officer by email on myprivacy@waseel.com.

 

What personal data do we collect?

When you apply for a role with us, we may collect, store, and use the personal data described in the table below, about you. We may also ask that you provide information that may be treated as sensitive data, in accordance with the PDPL (or other applicable privacy laws), such as racial or ethnic origin, and health information.

 

Type of Personal Data	Description of the Personal Data
Contact and communications information, such as:	Your contact details (including email address, telephone number, and postal address); Records of communications and interactions we have with you.
Biographical, educational, and social information, such as:	Your name, title, gender, nationality, and date of birth; Citizenship, residency, nationality, and immigration status; Curriculum vitae, resume, education history, academics, or achievements; Details of your education and references from your institutions of study.
Professional or employment relation information, such as:	Application materials; Details of your work history and references from your previous employers, including details of restrictions such as restrictive covenants, non-compete, or non-solicitation; Skills and qualifications; Hire state; Job end or termination date; Work authorization status.
Government issued identification and identifiers, such as:	Passport; Drivers’ license; National ID number or Iqama; Other documents issued by a government such as citizenship, visa, residency.
Digital or electronic information, such as:	Date and time of your visits to our Careers Site, geographical information, Pages viewed and browsing behaviour on our websites including interaction and navigation and fields completed on forms and applications; Audio, electronic, visual, or similar information such information derived from CCTV.
Any other information you choose to provide, such as:	Employment preferences, such as current salary, desired salary, professional memberships.
Background checks and references, such as:	·       Information about your performance, skills, and personal attributes, including personality assessments;
Sensitive data, such as:	Health information.

 

In accordance with PDPL or applicable privacy laws, if we require your consent to process your sensitive data and you do not allow us to process that data as intended, then we may not be able to process your application properly or at all.

 

How do we collect your personal data

We may collect personal data about you from the following sources:

• You, the candidate;

• Recruitment agency, or internal recruiters;

• Candidate assessment providers;

• Your named referees;

• Publicly available information;

• Health care professionals;

• Our employees that may have referred you for a role;
• Professional networking platforms (such as; LinkedIn).

How do we use your personal data, and the legal basis for collecting and processing your personal data

Waseel processes personal data about applicants for a variety of purposes, as shown below. We typically rely on the below lawful bases for the processing of your personal data in accordance with PDPL or other applicable privacy laws. Where we process your sensitive data, we rely on multiple legal bases.

Legal Basis to Collect Your Personal or Sensitive Data	Description of Why We Will Process Your Personal or Sensitive Data
Consent. This means we will not process your personal data without consent, which will be freely given, specific, informed and unambiguous. Should you provide us your consent to process your sensitive data, you may withdraw your consent at any time by emailing us, or using another designated method. In some cases, if consent is not given, or given, and then later withdrawn, we may be unable process your application.	To assess your suitability to undertake certain positions or activities. For example, to record your disclosed medical or physical conditions, limitations, pre-employment or medical and health checks;   Future recruitment with your consent to add you to our Talent Community to be considered for other opportunities;   To check references, you provide to us in relation to your employment history;   To ascertain whether a potential candidate with a health condition needs reasonable adjustments to be made to the recruitment process (not the role) to allow them to participate;   Access or log in credentials for profile.
Legal obligations. We may need to process personal data to comply with legal obligations.	To address, manage and mitigate health and safety at our workplace;   To take action to protect and defend our rights or property and/or the rights or property of third parties or to protect the public against dishonesty, malpractice or seriously improper conduct, unfitness or incompetence, mismanagement or failures in services provided;   To meet our legal and regulatory obligations, such as compliance with applicable laws and regulations.
For the  legitimate interests of Waseel this means that we consider whether the processing is necessary for pursuing the legitimate interests of Waseel or by a third party. We will not rely on legitimate interests if we assess that your interests or fundamental rights and freedoms which require protection of your personal data override our reliance on legitimate interests.	Application review, including assessing your skills, qualifications, and suitability for applicable roles and opportunities;   Identifying candidates such as via LinkedIn, including by recruiters;   Access or log in credentials;   Facilitating interviews, or assessments; To monitor access and/or use of our systems and devices, premises, and sites for safety and security;   Effective management of our business and providing our employees with opportunities;   For conducting and processing data analytics and/or generating insights for the benefit of Waseel;   Defending and protecting our rights and interests, including those of third parties.
Vital Interests	To protect your life. For example, if you are involved in an emergency and you require emergency care or medical treatment or you witness an emergency situation and are able to provide information to us about it;   To contact you or your family members where appropriate, for compliance with health and safety requirements or during medical emergencies.

 

How do we disclose your personal data, and to whom?

We may share/disclose your personal data with the following third parties (service providers) or people that would support our business where you apply for a role with us:

Recipient (and country)	Purpose	Personal data
Microsoft office 365 (USA)	Communication and collaboration, Emails	CV data as described above; Application materials.
Internal Waseel workforce, such as HR, hiring managers, as applicable (KSA)	To consider the applicant for interview and hiring procedures	CV data as described above; Application materials.
LinkedIn (USA)	Where we may contact and engage with you for potential roles;   When you apply for a role through LinkedIn.	CV data as described above; Applications materials; LinkedIn profile.
Workable (USA)	To engage with you when you apply for a role through Workable.	CV data as described above; Applications materials.

 

We may also disclose your information to law enforcement agencies, if required under law, or with health care professionals for your vital interests, such as if a health-related incident occurred at our premises.

 

Cross border transfer of your personal data

Your personal data will be transferred outside your home jurisdiction as described above to third parties that support our business.  Where we share your personal data with a third party, as required, the contract with them will have appropriate contractual clauses (and any standard contractual clauses if and where required by Applicable Laws of your home country, if the transfer is to a non-adequate country) or other obligations in the contract requiring appropriate technical, organizational and security measures to protect your personal data. To find out more, please email myprivacy@waseel.com.

 

How do we store your personal data and for how long?

Personal data is stored securely, hosted by our third-party service provider namely Workable.  We will only retain personal data for as long as necessary to fulfil the purpose for which it is processed or as required by Applicable Laws or any litigation hold, to which we are subject, including to meet any legal requirements. We will only keep your personal data for as long as applicable, for example, if you are unsuccessful in your application, we will retain your data for up to 6 months, unless you consent to joining our Talent network, at which point we will retain your data until such time you withdraw your consent.

 

Your personal data rights:

As a data subject, you have a number of rights under the PDPL (or other applicable privacy laws), which primarily depend on the purpose of personal data collection and processing, these include:

• Right to be informed: you are entitled to be informed how we collect your personal data, legal basis for collection and processing, how such data is processed, stored, destroyed, and to whom it will be disclosed.
• Right of access to your personal data: you are entitled to request access to your personal data by contacting us using the below mentioned information.
• Right to request access to your personal data: you are entitled to request access to your personal data held by us in a readable and clear format if technically feasible through electronically encrypted means.
• Right to request correction of your personal data: you are entitled to request correction of your personal data that you believe is inaccurate, incorrect or incomplete, by contacting us using the below mentioned information. Such data will be reviewed and updated within 10 working days. In addition, you will be notified that your data has been corrected by email.
• Right to request destruction of your personal data: you are entitled to request destruction of your personal data in certain circumstances, for example, we will not destroy your personal data if there is a legal or business requirement for us to retain your personal data, in accordance with Applicable Laws.
• Right to withdraw your consent for processing your personal data: you are entitled to withdraw your consent for processing your personal data at any time unless there are legal bases that require otherwise. You may exercise your right to withdraw, by contacting us using the below mentioned information.

 

Please note, however, these rights are not absolute and we will explain to you if we rely on any exemptions when responding to you. If you would like to exercise any of these rights, please contact us using the below mentioned contact information.

 

Automated decision making

We may use automated tools to assist us in processing and evaluating job applications. These tools leverage complex algorithms and machine-learning technology to assist with the following operations such as to determine whether, based on the information you have provided to us, you meet the minimum requirements for a position. There is always, however, a human that would verify this process, so there are not automated decisions, per se.  Please note that none of these profiling activities produce legal or similar significant effects to applicants, however if you would like to know more please contact myprivacy@waseel.com.

 

Security of your personal data

We maintain technical, physical and organizational measures intended, as required under Applicable Laws, to protect personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure or access.

 

Contact information and complaints

If you have any questions or concerns regarding our use of your personal data, or if you wish to exercise any of your rights described in this Candidate Privacy Notice, please contact us by emailing myprivacy@waseel.com.

 

Should you wish to raise a complaint about how Waseel processes your personal data, we ask that you allow us the opportunity to rectify any issues in the first instance, by emailing  myprivacy@waseel.com. If you are not satisfied with our response, or we fail to respond within 10 working days, you may lodge a complaint with the Competent Authority, namely SDAIA here.

Changes to this Candidate Privacy Notice and other information

This Candidate Privacy Notice may be changed over time. You are advised to regularly review this Candidate Privacy Notice for possible changes. This Candidate Privacy Notice was last updated in February 2025.

 

For ease of reference, the Personal data Protection Law can be accessed here.