1. Scope

Salalah Port Services Company SAOG (SPS) recognizes and respects the importance of your privacy. This policy sets out how SPS collects and uses your personal data. SPS processes your personal data in accordance with this policy and the applicable laws, including the proposed Oman Data Protection Regulation (“DPR”). SPS may change this policy from time to time in line with the law in force or its amendments thereon. We would advise you to regularly check our website to find out whether any modifications and amendments have been made to this policy.

2. Personal data and purposes

This privacy policy applies to individuals whose personal data is processed by SPS, more specifically this policy applies to visitors of SPS website, job applicants, business associates, port users, contractors, business visitors. More details relating to SPS’s processing of personal data are provided below for each category of individuals.

Visitors of the SPS’s website

When you visit and use our website, we may collect your personal data for the following purposes:

• Provision of SPS services and products
• To accommodate your requests and inquiries
• Provision of newsletters offered by SPS
• Evaluating the use of our websites for statistical purposes and for compliance with any laws to which SPS is subject to; and
• The purposes listed in our

On our websites, we may collect information about name, postal address, email address, other contact information, age, interests, gender, IP addresses, information about your behavior on our website (e.g. what pages you visit, how long you are on the website and what you click on) and other personal data. Our websites are intended for a general audience, and SPS does not knowingly collect personal data about any person under the age of 21 years in accordance with the Laws of Sultanate of Oman

We process your personal data on the basis of your consent and to pursue our legitimate business interests, which include our legitimate interest to transmit your personal data to our affiliates for administrative and business purposes, to ensure network and information security and our commercial company interest, including direct marketing. If you would choose not to share the requested personal data with us, we would not be able to meet some of our purposes, as described in this privacy policy.

Job applicants

We may process personal data that is submitted by you during your online or paper application process, personal data that is collected as part of the recruitment process and personal data that is submitted in our repository of Candidate Pool. We may from time to time receive information relating to your job application from third parties, such as recruitment agencies, head hunters performing reference checks. We may process your personal data for the following purposes:

• Assessing your candidacy for our available positions
• HR and administration activities
• Evaluating the use. of our websites for statistical purposes and for compliance with any laws to which Salalah Port Services Company SAOG (SPS) is subject to.

To apply for a position online within SPS you have to share your profile information on our website. You can also generally share a profile without applying for a specific position or without releasing your profile in the Candidate Pool (as defined below).

Please be informed that if you choose to apply for a job with SPS, we may request you to provide information on persons whom you allow us to contact for reference purposes. We will only collect information from such references that is adequate and relevant to assess your qualifications, experience and areas of improvement.

If you are below the local legal age applicable in the Sultanate of Oman, please make sure to consult your parents/legal guardian before applying for a position with SPS. Please also be informed that SPS requires your parents’/legal guardian’s consent before an employment relationship may be established.

We remove all personal data that relates to recruitment processes within a period of 4 weeks after the end of the recruitment process. If you provide us your consent, we may store your personal data for a longer period in our Candidate Pool (as described below).

Types of personal data

When applying for a position within SPS, you will be requested to submit personal information, such as your name, email address, mobile phone number, your primary language and an attachment of your resume/CV. You may also be requested to provide additional information, such as your address, cover letter, relevant education and any other relevant information required for SPS to evaluate your application. You may be requested to respond to various assessment tests, including assessment tests on logical reasoning and personality profiling. You will be informed prior to any collection of your personal data, including in case of references being collected during the recruitment process if required according to applicable local law. Furthermore, we will inform you before we start collecting references if required according to applicable local law.

If you are applying for a position where health certification is required by law or internal policy, for example in all positions offshore, you may also be required to participate in a health examination in compliance with applicable local law.

If you are applying for a position where a criminal history record, credit report or visa/work permit etc. is required by law or internal policy, you may be required to provide these as well, in compliance with local law.

If your application is successful, the job offer may be conditional on pre-employment checks being carried out to SPS’s satisfaction. You may be informed beforehand whether a pre-employment check is part of the recruitment procedure. After a pre-employment check is performed, you will also be informed about its outcome.

SPS is an equal opportunity employer (in accordance with applicable laws) and makes all employment-related decisions entirely on experience, business acumen, merit and qualifications. Consequently, you should only include information relevant for the review of your application, and disregard information such as your race or ethnic origin, your political or philosophical orientation, your religious beliefs, your union memberships or your sexual orientation.. The assessment of your application will not be affected in any way should you choose not to provide the listed information.

Legal bases

We process and retain your personal data based on your consent and to pursue our internal process, which include our legitimate interest to transmit your personal data to our repository for administrative purposes and to make sure that future staff is honest and reliable. If you would choose not to share the requested personal data with us, we would not be able to meet some of our purposes, as described in this privacy policy.

Candidates Pool

The Candidate Pool is a shared pool for candidates to release their profile and share their data in the database for future job opportunities in SPS (“Candidate Pool”). If you decide to release your profile in the Candidate Pool, you explicitly consent to personal data submitted by you during your online or paper application process, personal data collected by SPS as part of the recruitment process and personal data collected by SPS as part of a previous employment process, including but not limited to potential assessment tests results, interview conclusions and an overview of previous applications (and whether they are in process, rejected, etc.) being made available and disclosed to authorised HR professionals. . The authorised HR professionals may access your profile when recruiting for a specific position, for statistical, operational or other legitimate business purposes, etc. 

You may at any time unrelease your information from our Candidate Pool by Sharing email request to Recruitment@salalahport.com

Visitors, truck drivers and other individuals

SPS may process your personal data when you visit a SPS location. The individuals whose personal data we process include:

• Visitors
• Truck drivers
• Boatman
• Lashers
• Contractors
• Inland shipping crew members; and
• Ship handlers.

In this context, we process your personal data for the following purposes:

• Access control and safeguarding security
• Prevention of damage and criminal acts and/or acts that are prohibited by SPS’s internal policies and procedures; and
• To conduct internal investigations of suspected criminal/prohibited behaviour.

When you perform work at a SPS location, we may collect your name, postal address, email address, other contact information, company name, job title, visiting purpose and hours, CCTV camera images that are recorded on sites and biometric data for access purposes. We may ask you to provide your ID document, which consequently shall be checked visually, we will not take copies thereof. We may also ask you to provide criminal records, to the extent permitted by applicable law, including criminal records in the context of background checks.

We process your personal data in order to execute the contract between you (or your employer) and SPS, to meet our legal obligations and to pursue our legitimate interests, which include our legitimate interest to transmit your personal data to our affiliates for administrative purposes, to ensure network and information security and safeguarding security on SPS sites. If you would choose not to share the requested personal data with us, we would not be able to meet some of our purposes, as described in this privacy policy.

Contractors

SPS may process your personal data when you are a contractor who is executing works on location at a physical SPS site. In this context, we process your personal data for the following purposes:

• Access control and safeguarding security
• Human resources and personal management
• Business process execution
• Prevention of damage and criminal acts and/or acts that are prohibited by SPS’s internal policies and procedures; and
• To conduct internal investigations of suspected criminal/prohibited behaviour.

Please note that we have placed CCTV cameras on and around our physical sites. These cameras may from time to time make recordings of you as you pass the areas that are covered by the CCTV cameras. These recordings also qualify as your personal data and therefore are managed by this privacy policy. The camera recordings are removed after 4-6 Months , unless there are good reasons for keeping the recordings for a longer period, for example in case of an investigation of an incident.

In this context, we process your personal data for the following purposes:

• Access control and safeguarding security
• Prevention of damage and criminal acts and/or acts that are prohibited by SPS’s internal policies and procedures; and
• To conduct internal investigations of suspected criminal/prohibited behaviour.

When you perform work at a SPS location, we may collect your name, postal address, email address, other contact information, company name, job title, working hours and criminal records, to the extent permitted by applicable law, including criminal records in the context of background checks. 

We process your personal data in order to execute the contract between you (or your employer) and SPS, to meet our legal obligations and to pursue our legitimate interests, which include our legitimate interest to transmit your personal data to our affiliates for administrative purposes and to ensure network and information security and safeguarding security on SPS sites.

If you would choose not to share the requested personal data with us, we would not be able to meet some of our purposes, as described in this privacy policy.

Customers, Suppliers and Business Associates

SPS processes personal data if we have, want to have, or have had a business relationship with you, or if we have had contact with you. The individuals whose personal data we process include:

• clients and their representatives
• individuals who show an interest in SPS or our products and services
• individuals who are connected in another way with a business or organisation with which we have, want to have, or have had a business relationship
• security providers; and
• potential clients.

In this context, we process your personal data for the following purpose:

• To enter into a business relationship and agreement with you
• To perform agreements and carry out instructions
• To ensure your security and integrity as well as the security and integrity of the SPS
• To help develop and improve products and services
• For account management, promotional and marketing purposes
• To enter into and perform agreements with suppliers and other parties we work with
• To comply with legal obligations; and
• To carry out business processes and for the purpose of management reports and internal management.

If your business or organisation transfers any personal data concerning employees or other representatives to us, we also expect your employees, executive directors or other representatives to be informed about this. You can give this privacy policy to them so that they can learn how we deal with their personal data.

For the purposes listed above, we may collect your name, postal address, email address, other contact information, information relating to or used for agreements / contracts or financial statements, payment and transaction data, conversations we have with you, and you have with us, by telephone, emails you send to us and which we receive from you, camera images that we take in our premises, information about criminal convictions, data we receive from other parties (e.g. Chamber of Commerce), data we require to combat fraud, to ensure your security and ours, and to prevent money laundering and the financing of terrorism.

We process your personal data in order to execute the contract between you and SPS, to meet our legal obligations and to pursue our legitimate interests, which include our legitimate interest to transmit your personal data to our affiliates for administrative purposes and to ensure network and information security and safeguarding security on SPS sites. If you would choose not to share the requested personal data with us, we would not be able to meet some of our purposes, as described in this privacy policy.

3. Special categories of personal data

Special categories of personal data, information about criminal convictions and the residential numbers are sensitive data. Special categories of personal data include data concerning health, biometric data and data which reveal racial or ethnic origin. We only process such information if we are required to do so.

we may use your residential number only if this is permitted by law. In addition, we process special categories of personal data where this is permitted by law, for example because you have given us your explicit consent for this or this information was made public by you, or with your permission.  If you give us consent to record special categories of personal data relating to you, or you have made this information public yourself, we will only process the information if this is necessary so that we can provide our services. If you have given us consent to record special categories of personal data, you may withdraw that consent at any time. To do this, please contact Customer Care : customercare@salalahport.com

4. Automated individual decision making including profiling

We will only make a decision based solely on automated processing including profiling which produces legal effects concerning you or significantly affects you, in case it is allowed by law and we have notified you. In the event that we would make a decision based on automated processing including profiling, we will take appropriate measures to protect your rights, freedoms and legitimate interests. 
We do not envisage that any decisions will be taken about you that produces legal effects or significantly affects you.

5. Using your personal data for any other purpose

If we would like to use your personal data for any purpose other than the purpose for which it was obtained, we shall only do this as long as the two purposes are closely related. In such case we will provide you with information on that other purpose and any other information that may be relevant in connection thereto.

If there is not a sufficiently strong connection between the purpose for which we obtained the data and the new purpose, we will ask you to give your consent or will rely on another legal basis to process your personal data. If you have given us consent, you may withdraw that consent at any time.

6. Sharing of your personal data

We may share your personal data with members of our Stakeholders , professional service providers and advisors (such as lawyers, auditors and accountants), courts, governmental bodies/authorities if mandated due to legal or regulatory requirements. Access to your personal data will be limited to those parties that require access for the performance of their tasks.

7. International transfer of personal data

As joint venture of a global group we may transfer personal data collected by us on an aggregated or individual level to various joint ventures and affiliated companies of APMT and ASYAD Group around the world located inside or outside the European Economic Area for the purposes stated above, as well to data processors outside of SPS in other countries globally for storage and service purposes. 

We may also transfer your personal data to third parties, such as our professional service providers or advisors, outside the European Union to countries that do not provide an adequate level of protection. We will make sure that suitable safeguards are put in place for such transfer, such as standard contractual clauses. Transfers to non-adequate countries by us satisfy the requirements under the GDPR and other applicable law. 

8. Security and retention

We have implemented technological and organizational measures to safeguard your personal data from unauthorized or improper access or use during collection and while it is in our possession. We store personal data on servers with limited access located in secured facilities, and our security measures are evaluated on an ongoing basis. The servers are protected by anti-virus software and firewalls, among other measures. We will use our best endeavours to ensure an appropriate level of security tailored to the specific risks of the personal data that we process. Any sensitive information will be subject to heightened security measures.

We will store your personal data as long as it is required for the purposes for which it was initially collected, which may vary depending on the type of personal data collected and its purposes. We delete or anonymize your personal data when it is no longer needed. 

9. Cookies

We may use information storage (commonly known as cookies) to allow you to more easily use our site and to enhance performance. We use cookies for multiple purposes. Please find our cookie policy here for more information.

10. Your rights

You have the right to request us to provide you access to your personal data, or to rectify or erase it. You also have the right to object to the processing, to request restriction to the processing as well as data portability. We would gladly hear your questions and complaints concerning our processing of your personal data, please find our contact details below. If you are not satisfied with our response and/or solution, note that you have the right to withdraw consent at any time and the right to lodge a complaint with your local supervisory authority.

11. Contact details

If you have any questions or comments or wish to exercise your rights under applicable laws, please contact our privacy team by emailing to Customer Care : customercare@salalahport.com