“Data” or “Personal Data” means personal information of a student including personal details contact numbers, study records and grades. Various categories of Personal Data that is collected by University listed in Annex A.
Collection and use of Personal Data
Personal Data processing (in part or whole) is undertaken using automated means or through non-automated means, forming a part of a file system or intended to be a part of such system. Personal Data is also captured through web-based forms for feedback, registration, requests, etc.
Access to Personal Data within the University will be provided to authorized staff, in relation to their work with the University. The Personal Data may also be shared with the Ministry of Education, Government of Bahrain upon receiving a request from the Ministry.
The University will hold Personal Data on the systems for as long as it is still used for the purpose stated when originally requested. The Personal Data collected will be kept in servers for archiving to maintain the student’s academic records. Unless a longer retention period is required or permitted by law, the University will only retain Personal Data for as long as University needs such Data to fulfill the intended purposes, including any relating to legal, accounting, or reporting requirements.
Technology and organizational standards
Based on the nature of the Personal Data collected and on the risk and cost analysis, the University has adopted the following technology and organizational standards to protect the Personal Data against unintentional or unauthorized destruction, accidental loss, unauthorized alteration, disclosure or access:
- Only authorized staff is provided access to Personal Data;
- The University adopts Local Area Network (“LAN”) firewalls policies and ADD authentication methods to verify the user.
Sharing of Personal Data
The University may share your data with third parties who provide services to the University, such as those who help the University to operate the website or undertake outsourcing activities. All third-party service providers are required to execute a written contract with the University and they are required to take appropriate security measures to protect your data in line with the policies of the University. The University does not allow them to use your data for their own purposes. The University permits them to process the Personal Data only for specified purposes and in accordance with the instructions of the University.
Personal Data is stored on the cloud servers. However, the University may take a backup of the Personal Data on the local servers. The University may also share your personal data with third parties and professional advisers if the University is under a duty to disclose or share your Personal Data in order to comply with any legal obligation or an enforcement order.
Transfer of Personal Data outside Bahrain
The PDPL has been made effective from 1 August 2019 and as per Article 12 of PDPL, the University is prohibited from transferring personal data outside the Kingdom except when the transfer is made to a country or region listed in a statement that the personal data protection authority prepares and updates. The PDPA has not been established as on the date of the last update of this policy, therefore, the University would require your consent under Article 13 (1) to transfer your Personal Data outside Bahrain through the use of cloud service providers.
The University would endeavor to engage a reputable could service provider, however, due to the nature of could service your Personal Data would be stored on servers which may be outside Bahrain. By submitting your Personal Data, you unequivocally provide your consent to the University to transfer your Personal Data outside Bahrain.
Our site contains links to and from various third party websites. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that the University does not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.