PRIVACY POLICY

Effective Date: 09-05-2026

Last Updated: 09-05-2026

This Privacy Policy explains how The National Centre for Culture and Arts (NCCA) collects, uses, stores, shares, and protects personal data through web.ncca.org.jo and any related official NCCA web pages that link to this Privacy Policy (the "Website").

1. Who We Are

The data controller for personal data collected through the Website is:

The National Centre for Culture and Arts (NCCA)

King Hussein Foundation

Ibn Haytham St. 70, 11110, Amman, Jordan

Email: info@ncca.org.jo

Phone: +962 6 5690292

If NCCA appoints a dedicated privacy or data protection contact, its details may be added here:

[Insert DPO / Privacy Contact, if applicable]

2. Scope of This Policy

This Policy applies to personal data collected through:

         contact forms;

         newsletter subscription forms;

         event, workshop, festival, or program registration forms;

         inquiries submitted by schools, partners, artists, participants, parents, guardians, or members of the public;

         cookies and similar technologies;

         server logs and Website analytics;

         embedded third-party content and integrations used on the Website.

This Policy does not govern offline processing or third-party services that operate under their own privacy policies, except as required by law.

3. Personal Data We May Collect

Depending on how you use the Website, NCCA may collect:

a. Identity and contact data

         name

         email address

         phone number

         organization, school, or institution name

         job title or role, where relevant

b. Inquiry or submission data

         message content

         event or program interest

         registration details

         uploaded files or supporting materials

         correspondence history

c. Participation-related data

Where you apply for or register for a program, event, workshop, conference, performance, or youth activity, we may collect information reasonably necessary to administer that activity, such as:

         participant name

         age or date of birth, where relevant

         guardian/parent contact details, where relevant

         school or institutional affiliation

         attendance and scheduling information

         accessibility or support needs, where lawfully and appropriately collected

d. Technical data

         IP address

         browser type and version

         operating system

         device type

         referring URL

         pages visited

         date/time of visit

         approximate location derived from IP

         diagnostic and security logs

e. Cookie and preference data

         session identifiers

         language preferences

         consent preferences

         analytics identifiers, if analytics tools are enabled

4. How We Collect Personal Data

We collect personal data:

         directly from you when you complete a form, subscribe, register, or contact us;

         automatically through cookies, logs, and analytics tools;

         from your device or browser during Website use;

         from an authorized parent, guardian, school, or institutional representative, where relevant to a program or activity.

5. Why We Process Personal Data

We use personal data for the following purposes:

         to respond to inquiries and provide requested information;

         to manage event, workshop, program, or activity registration;

         to communicate operational updates, confirmations, or follow-up information;

         to administer newsletter subscriptions and send updates where consent has been given;

         to maintain Website security, integrity, and performance;

         to improve Website usability, content, and user experience;

         to comply with legal, regulatory, reporting, or safeguarding obligations;

         to protect the rights, safety, and legitimate interests of NCCA, participants, and the public.

6. Legal Basis / Basis for Processing

Where Jordan s Personal Data Protection Law No. 24 of 2023 applies, NCCA processes personal data on one or more of the following bases:

         your prior consent;

         performance of a requested service or activity, such as responding to an inquiry or processing a registration;

         compliance with legal obligations;

         protection of vital, legitimate, or public-interest purposes where permitted by law.

Where consent is required, you may withdraw it, subject to legal or operational limitations.

7. Cookies and Similar Technologies

The Website may use cookies and similar technologies for:

         essential site functionality;

         remembering user preferences, such as language selection;

         security and fraud prevention;

         traffic measurement and performance analytics;

         media playback and embedded third-party content.

If you use a cookie banner or consent manager, add the exact tools here:

[Insert cookie banner / consent tool]

[Insert analytics tool, if any]

[Insert newsletter or marketing tracking tools, if any]

You may manage some cookies through your browser settings. Disabling cookies may affect Website functionality.

8. Sharing of Personal Data

NCCA does not sell personal data. We may share personal data only where necessary and appropriate with:

         Website hosting, maintenance, and technical support providers;

         email, newsletter, or communications service providers;

         event, registration, ticketing, or application management providers, if used;

         trusted service providers acting on NCCA s instructions;

         legal, regulatory, judicial, or governmental authorities where required by law;

         affiliated entities or program partners, but only where necessary for the relevant activity and permitted by law.

All third-party processors engaged by NCCA should be subject to confidentiality and data protection obligations.

9. International Transfers

If personal data is stored, accessed, or processed outside Jordan, NCCA will take reasonable steps to ensure that such transfer is carried out in accordance with applicable law and with adequate protection safeguards.

If you know the actual hosting/email providers, insert them here:

[Insert hosting location/provider]

[Insert email/newsletter provider]

[Insert any third-country processing details]

10. Data Retention

NCCA retains personal data only for as long as necessary for the purpose for which it was collected, unless a longer period is required or permitted by law.

Indicative retention periods may include:

         contact inquiries: up to 24 months after the matter is closed;

         newsletter records: until you unsubscribe or request deletion, subject to compliance records;

         event or program administration records: for the duration of the activity and a reasonable follow-up period;

         technical logs and security records: for as long as reasonably necessary for security, troubleshooting, or compliance;

         legal or complaint-related records: for as long as necessary to establish, exercise, or defend legal rights.

NCCA may anonymize data where continued use is justified for statistical, archival, or reporting purposes.

11. Data Security

NCCA takes reasonable technical, administrative, and organizational measures to protect personal data against unauthorized access, disclosure, loss, alteration, misuse, or destruction. These measures may include:

         access controls and role-based permissions;

         secure hosting and software updates;

         password and authentication controls;

         restricted access to submissions;

         monitoring, backups, and incident response practices.

No system is completely secure, and NCCA cannot guarantee absolute security.

12. Your Rights

Subject to applicable law, including Jordan s Personal Data Protection Law No. 24 of 2023, you may have the right to:

         know whether we process your personal data;

         access your personal data and obtain a copy;

         withdraw previously given consent;

         correct, update, or complete inaccurate data;

         request erasure or concealment of data in appropriate cases;

         object to certain processing or profiling where legally available;

         request limitation of processing to a specific scope;

         request transfer of a copy of your data from one controller to another, where applicable;

         be informed of a data breach affecting your personal data, where required by law;

         submit a complaint to the competent authority.

13. How to Exercise Your Rights

To exercise your rights, contact:

Email: info@ncca.org.jo

Subject line: Privacy Request

Please include enough detail for us to identify your request and verify your identity where appropriate. NCCA may request additional information where necessary to protect personal data and prevent unauthorized disclosure.

14. Children s Data

NCCA may operate youth- and education-related programs. Where the Website collects personal data concerning children or minors in connection with such activities, NCCA expects that the information will be submitted by or with the authorization of a parent, legal guardian, school, or other authorized representative, where required.

If you believe a child has provided personal data through the Website without appropriate authorization, please contact NCCA so the matter can be reviewed.

15. Third-Party Content

The Website may include embedded maps, videos, social media feeds, or other third-party content. These third parties may collect data directly from you, use cookies, or monitor your interaction with their content according to their own privacy policies. NCCA is not responsible for their independent practices.

16. Data Breaches

If NCCA becomes aware of a personal data breach affecting the security or integrity of personal data, it will take appropriate steps under applicable law, including containment, assessment, remediation, and notification where required.

17. Changes to This Privacy Policy

NCCA may update this Privacy Policy from time to time to reflect legal, operational, or technical changes. The revised version will be posted on the Website with a new "Last Updated" date.

18. Contact Us

For privacy-related questions, concerns, or requests, contact:

The National Centre for Culture and Arts (NCCA)

Ibn Haytham St. 70, 11110, Amman, Jordan

Email: info@ncca.org.jo

Phone: +962 6 5690292

If you are not satisfied with our response, you may also have the right to contact the competent Jordanian authority responsible for personal data protection.