Saudi Arabian Oil Company (“Aramco” or “Saudi Aramco”), is a Saudi joint stock company established in
the Kingdom of Saudi Arabia (the “Kingdom”) by virtue of Royal Decree No. M/8, dated 4/4/1409H
(corresponding 13/11/1988G) with fully paid capital of SAR 90,000,000,000 and registered in the city of
Dhahran under commercial registration no 2052101150.

Aramco, together with its subsidiaries and controlled affiliates (collectively the “Aramco Group” or “Saudi
Aramco Group”), follows strict policies and guidelines to protect personal data and to comply with applicable
data protection laws and regulations.

Your privacy is important to us and maintaining your trust is our priority. This Privacy Notice informs you
how the information submitted by you or collected by Aramco through this Site (and elsewhere) may be
processed for the purposes set out below.

You may also be provided with additional privacy notices, for example when accessing our other websites. To
the extent there are any inconsistencies between this Privacy Notice, and the additional one, the additional
privacy notice shall prevail for the purposes it was provided for.

This Aramco website (https://sponsorships.aramco.com) (“Site”) may include links to other websites of
Aramco Group businesses, products and services, each of which may have their own privacy notices. When
visiting any of our other websites, please review and familiarize yourself with their relevant privacy notices.

When you use the Site, we may collect information about you (“Personal Data”). This includes both Personal
Data you may provide to us, or that is provided about you, such as:

• your name;
• language(s) you may speak, or view the Site in;
• country of residence;
• contact details (such as telephone numbers, email address, address);
• user login data;
• demographic data (e.g. date of birth);
• technical Information, and device data (IP address, unique system identifiers and information logged
by cookies or similar technologies), including usage information (such as the number of visitors on a
specific page of the Site, how long you stay on a page, or which hyperlinks you click on, including
interactions with advertising on our pages and those of third parties). Please review our Cookie Notice
for additional information on how we use these technologies;
• marketing and communications data, including data and analysis about your interactions or
engagement with content or marketing campaigns (including on third party sites), preferences in
receiving marketing from us (and our third-party partners), and your communication preferences;
• information that we collect about you as part of your participation in any prize draws or competitions
offered on the Site;
• any feedback or survey responses that you provide to us; and
• information that you provide us when you contact us.

We may also collect Personal Data about you from publicly and commercially available sources (as permitted
by law and the terms of use applicable to the source). We may combine that Personal Data with other Personal
Data we collect about you, including when you visit and use our Site. This may include (but is not limited to)
Personal Data collected from:

• analytics providers, including but not limited to Google; and
• Social media websites, including but not limited to those operated by Meta, LinkedIn, X (previously
Twitter) SnapChat, or TikTok, where you publicly share information about yourself, or you visit
and/or interact with content.

We process your Personal Data in connection with your use of the Site, its management and improvement, as well as the following purposes:

• to manage our relationship with you, including notifying you about changes to our terms and this Privacy Notice, and dealing with your requests, complaints and queries;
• to administer and protect our business and this Site (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data);
• to enable you to participate in a prize draws or competitions;
• to send you relevant marketing communications and make personalised suggestions and recommendations to you about our Site, products, services, offerings, promotions, and experiences that we think may be of interest to you, including those of third parties;
• to tailor and deliver relevant Site content and online advertisements to you (including on social media platforms, search engines, and other third-party websites on the internet), and to measure or understand the effectiveness of the advertising and communications we serve to you;
• to use data analytics to better understand your preferences, habits and engagement, improve our Site, products, services, offerings, communications, promotions, and experiences;
• in order to sign you up to marketing from our sponsorship partners (where you consent to this); • to enable you to give us feedback or to participate in surveys; and
• legal and/or regulatory compliance reasons including litigation and defence of claims.

Where appropriate we use your Personal Data:

• where you have given us your consent (e.g. for us to use your Personal Data for marketing purposes set out above and to receive marketing messages, including from our Sponsorship Partners);
• where we have a legitimate interest (i.e. the purposes of processing listed above, with the exception of marketing emails and SMS messages for which we rely on your consent). In particular we also rely on 3 our legitimate interests when processing your Personal Data to send you online advertising that we think may be of interest to you;
• to comply with our legal and regulatory obligations; or
• or pursuant to another applicable legal basis.

We may share your Personal Data with the Aramco Group companies, affiliates or other third parties including our sponsorship partners, in association with the above articulated purposes as appropriate. We may do this:

• where we need assistance from third parties to grant you access to or in connection with your use of
tools and services on the Site. This may include, but not be limited to: facilitate posting of information,
content and/or otherwise use of the Site;
• where we have a public interest or legal duty to do so (e.g., assisting with detection of crime including
with law enforcement agencies, regulatory reporting, litigation, or defending legal rights);
• where we have a duty to disclose to a competent public authority, government, or regulatory agency,
or where necessary to comply with a legal or regulatory compliance obligation which Aramco or a
relevant Aramco Group member is subject to, or as permitted by applicable local law;
• in the event of (or a proposed) reorganization, merger, divestment, or other sale of some (or all) of our
assets or stock, to any successor; or in connection with a bankruptcy reorganization;
• as appropriate in the management and support of our business, with our professional advisers or
consultants, including lawyers, bankers, auditors, accountants, and insurers providing consultancy,
legal, banking, audit, accounting or insurance services to us;
• to enforce or apply any agreements we have with you, or others;
• to support our business with the general business processing, information technology, and system
administration services required by us (e.g. receiving services from IT vendors, cloud services
providers, customer relationship management (CRM) services providers, etc); or
• where we asked for your permission to share your Personal Data for a specific purpose, and you agreed
(for example with Sponsorship Partners including for marketing purposes).

We may process your Personal Data in order to advertise our brand, products, services or promotions to you
on the internet. This may include sharing your Personal Data with third party marketing / advertising vendors (such as Google or social media platforms referred to above), so that they can assist us in advertising to you. Please refer to the privacy notices of the platforms to understand how they may process your Personal Data. Online advertising includes but is not limited to asking our vendors to:

• serve our advertising to you (e.g. because we think you may be interested in what we are offering or
promoting);
• Use your Personal Data we shared and those they hold about you to advertise to individuals who have
a similar interests or profiles to you (e.g. if our offers or promotions would be of particular interest to
other individuals who share the interests indicated on your social media profile, we may advertise
those offers or promotions to those other individuals); and
• exclude you from our advertising campaigns (e.g. because you may already be receiving the offer or
promotion, or have entered a competition that we are advertising).
If you wish to opt out of receiving marketing messages, you will be able to opt out of receiving these by
clicking the “unsubscribe” link in the communication, or you can ask us to stop doing this. Please refer to
Section 10 (Your Rights) below.

We may use or provide links to social media sites such operated by Meta, LinkedIn, X (previously Twitter)
SnapChat, or TikTok, that are not owned or controlled by us. This Privacy Notice does not apply to those sites. If you choose to use these websites or their services, you should review their privacy policy for more information on how they deal with your personal data.

Social media platforms also allow you to indicate your preferences to them about how they share some of your personal data, or the advertising you receive on their platforms. Please contact your social media platforms for more information.

We use robust technical and organizational measures to protect any Personal Data we process about you. All
Aramco personnel who have access to your Personal Data operate under strict corporate policies and guidelines to ensure the appropriate protection of the data and to comply with applicable local data protection laws and regulations.

We store and process your Personal Data in various jurisdictions, including the Kingdom of Saudi Arabia.
Your Personal Data may be shared with and processed by Aramco or other Aramco Group subsidiaries and
affiliates outside of the country in which your Personal Data was collected. It may also be accessed or
processed by staff operating outside of that country.

The laws on processing such Personal Data in these locations may not be comparable to the laws in your
country. We will take all steps reasonably necessary and/or required by applicable data protection laws to
ensure that your Personal Data is transferred subject to an appropriate international transfer mechanism, treated in accordance with this Privacy Notice, and provided equivalent protections under the laws applicable to its transfer.

We will keep your Personal Data for as long as we have a relationship with you and when you use our Site.
Following the end of the relationship, we shall retain this data for a period of 7 years or such longer period as required by law and/or to protect our legal interests. We will not keep any information for longer than is strictly necessary and when we no longer need the information, we will securely destroy or delete it in accordance with our internal policies, or anonymize it.

To determine the appropriate retention period for Personal Data, we consider:

• the amount, nature and sensitivity of the Personal Data;
• the potential risk of harm from unauthorised use or disclosure of the Personal Data;
• the purposes for which we process the Personal Data and whether we can achieve those purposes
through other means; and
• any retention period that may be required by law and/or to protect Aramco’s legal interests.
Should you wish to request earlier deletion, you may discuss this by contacting us (see Section 11 (Contact us) below).

Under certain applicable laws, you may have rights in relation to your Personal Data.
Subject to certain limitations, and depending on the country in which you are located, these may include the
right to:

• to be informed of the collection of your Personal Data;
• access, including obtaining a copy of, your Personal Data;
• rectify, or update inaccurate and add to incomplete, Personal Data;
• request deletion or destruction of your Personal Data;
• restrict the processing of your Personal Data;
• object to the processing of your Personal Data;
• request a copy of your Personal Data in a portable format;
• object to the use of your Personal Data for marketing purposes;
• withdraw your consent to the processing of your Personal Data (where we are relying on it to process
your Personal Data). Please note that any withdrawal of your consent will not impact the lawfulness
of our processing of Personal Data prior to that withdrawal; and
• lodge a complaint with a data protection authority (or equivalent authority). Where you are located in:
the Kingdom of Saudi Arabia, the relevant data protection authority is the Saudi Data and
Artificial Intelligence Authority (www.sdaia.gov.sa);
a Member State of the European Economic Area, the relevant data protection authority four
your country can be found in on the following link: www.edpb.europa.eu/about-edpb/aboutedpb/members_en#member-nl; or
To exercise any of your rights, you can contact Aramco in writing at the email address provided at Section 11 (Contact us) below. Should you object to the processing of your Personal Data, this may, amongst other things, impede your access to the Site (or parts of it), or impair or render impossible your use of some of the functionalities or services on the Site.

If you have any questions regarding this Privacy Notice, please contact us by email to:
dataprivacy@aramco.com