Privacy Policy

1. Who is responsible for your data

The controller of the personal data processed through this Website is Regional Energy and Environment Est., an establishment registered in the Kingdom of Saudi Arabia (commercial registration no. 1010224126), with its registered address at 11342 Riyadh, P.O. Box 26124, Saudi Arabia.

2. How to contact us

Our only contact channel is the Contact form on this Website. We do not publish e-mail addresses or telephone numbers. Please use the same form for any request about your personal data (see section 9).

3. What data we process, why, and on what legal basis

a) Contact form. When you send us a message, we process the data you enter (first name, last name, company, e-mail address and the content of your message), your confirmation and consent given by ticking the consent box, and technical data recorded with the submission (date and time, IP address and browser information). Purpose: to answer your inquiry and to manage the business contact that follows. Legal basis: your consent, which you give by ticking the consent box before sending the form and which you may withdraw at any time (see section 9) and, where your inquiry concerns entering into a contract, steps taken at your request before a contract is concluded. The data marked as mandatory is necessary for us to be able to reply; without it we cannot process your inquiry.

b) Protection against spam and abuse. Pages with a form use Google reCAPTCHA. To tell humans from automated programs, reCAPTCHA processes your IP address and information about your browser, device and interaction with the page, and may set a cookie. It is provided by Google LLC (see Google’s privacy policy). Purpose: security of the Website and the form. Legal basis: our legitimate interest in preventing abuse, to the extent the applicable law recognizes it.

c) Technical and security data. When you visit the Website, our hosting provider and our security and content-delivery provider (Cloudflare) process technical data such as IP address, date and time of the request, requested page and browser type, in server logs and security systems. Purpose: delivering the Website and protecting it against attacks. Legal basis: our legitimate interest in the secure operation of the Website, to the extent the applicable law recognizes it.

d) Cookies and similar technologies. The Website does not use analytics, advertising or social-media cookies or plug-ins, and does not load fonts or videos from third-party servers. Only technical and security cookies that are necessary to operate and protect the Website and the form (for example from Cloudflare or Google reCAPTCHA) may be set. Because of this, no cookie banner is shown.

4. Where your messages are stored

Messages sent through the Contact form are stored on the Website itself (in the form entries of the Website’s database) and are also forwarded by e-mail to our authorized staff.

5. Who receives your data

Your data is accessed by our authorized staff and by service providers that process it on our behalf: the web hosting provider of the Website (WebDigital, Hungary), Cloudflare, Inc. (content delivery and security) and Google LLC (reCAPTCHA). We do not sell your personal data. We disclose it to authorities or other third parties only where the law requires or allows it.

6. International transfers

Because visitors come from all over the world and REE is based in Saudi Arabia, the data you submit is transferred across borders: it is stored on the servers of our hosting provider in Hungary and is accessed by us in Saudi Arabia. Our providers, in particular Cloudflare and Google, may also process data in other countries, including the United States. Where the law that applies to you requires safeguards for such transfers, we rely on the mechanisms it recognizes (such as adequacy decisions or standard contractual clauses) and require our providers to do the same.

7. How long we keep your data

Contact-form inquiries are kept for up to 2 years after our last communication with you and are then deleted, unless a contract follows or a longer period is required by law. Technical and security logs are kept only for the period set by the respective provider and no longer than needed for security and operation of the Website.

8. Security

We protect the Website and the data with appropriate technical and organizational measures, including an encrypted connection (HTTPS), restricted administrator access and regular software updates.

9. Your rights

Depending on the data protection law that applies to you (for example the GDPR in the European Union and the European Economic Area, the UK GDPR, the Saudi Personal Data Protection Law, or the law of another country), you may have the right to: access your personal data; have it corrected; have it erased; restrict its processing; object to processing based on our legitimate interest; receive your data in a portable format; and withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. To exercise these rights, please write to us through the Contact form. We may need to verify your identity, and we will respond within the time limit set by the applicable law.

You also have the right to lodge a complaint with a data protection authority, in particular in the country where you live or work or where the alleged infringement took place. In Saudi Arabia, this is the Saudi Data & AI Authority (SDAIA).

10. Children

The Website is intended for business use and is not directed at children under 18. We do not knowingly collect personal data from children.

11. Links to other websites

The Website may contain links to other websites. We are not responsible for their content or privacy practices.

12. Changes to this Policy

We may update this Policy. The current version is always published on this page, with the date of the last update below.