Privacy Policy

This Privacy Policy explains how Maldives Airports Company Limited ("MACL", "we", "us", or "our"), state operator of Velana International Airport (VIA), collects, processes, protects, and discloses personal information. It applies to all interactions across our web portals, mobile platforms, VIP lounge booking systems, airport Wi-Fi services, vehicle permit desks, and terminal infrastructure. As a state-owned enterprise operating critical national infrastructure, MACL adheres to the laws of the Republic of Maldives, international civil aviation standards established by the International Civil Aviation Organization (ICAO), and global data protection best practices.

Passenger & Flight Data: Name, passport details, flight itinerary, lounge reservation preferences, special assistance requests, and check-in validation data. Digital Platform Usage: IP addresses, device metadata, browser type, cookies, airport Wi-Fi login credentials, session duration, and page navigation history. Commercial & Permits Data: Business registration, contact representative details, vehicle registration numbers, harbor permits, and commercial lease documentation. Career Applications: Resumes, educational background, national identification cards, work experience records, and reference checks.

We process personal data only for lawful operational purposes: providing flight and terminal services, ensuring airport security, processing commercial permits, verifying qualifications for recruitment, and complying with statutory civil aviation regulations.

For the safety and security of all passengers, staff, and airport facilities, Closed-Circuit Television (CCTV) cameras operate continuously throughout Velana International Airport terminals, airside operational zones, cargo facilities, and public concourses. Surveillance Purpose & Access Control: Surveillance footage is processed strictly for crime prevention, airport security monitoring, incident investigation, and emergency response in compliance with the Maldives Civil Aviation Authority and National Security Directives. Access is restricted to authorized security personnel.

MACL does not sell, rent, or commercialize personal data to third parties. We may disclose necessary information only under the following statutory circumstances: - State Regulatory Authorities: Maldives Civil Aviation Authority (MCAA), Maldives Customs Service, Maldives Immigration, and Aviation Security Command for statutory border control and aviation safety. - Legal Compliance: Court orders, law enforcement requests under Maldivian legislation, or statutory audit demands from the Auditor General's Office. - Contracted Operational Partners: Ground handling agents, airline operators, and certified IT service providers under strict data processor agreements.

MACL enforces multi-layered technical, administrative, and physical security safeguards to prevent unauthorized access, alteration, disclosure, or destruction of personal data. Encryption Standards: TLS 1.3 in-transit encryption and AES-256 data-at-rest encryption protocols. Retention Limits: Personal records are stored only as long as necessary for statutory operational or auditing requirements.

Subject to applicable Maldivian laws and aviation safety mandates, individuals have the following rights regarding their personal data: Right of Access: Request details of personal data maintained by MACL. Right of Rectification: Request correction of inaccurate or incomplete records. Right to Inquire: Submit privacy queries or request RTI disclosures via our portal.

If you have questions, concerns, or requests regarding this Privacy Policy or MACL's data practices, please reach out to our Legal & Compliance Secretariat: Email Legal Division (info@macl.aero) Submit Statutory RTI Request