Privacy Policy | Maldives Airports Company Limited (MACL)

Overview & Scope

This Privacy Policy explains how Maldives Airports Company Limited ("MACL", "we", "us", or "our"), state operator of Velana International Airport (VIA), collects, processes, protects, and discloses personal information. It applies to all interactions across our web portals, mobile platforms, VIP lounge booking systems, airport Wi-Fi services, vehicle permit desks, and terminal infrastructure.

As a state-owned enterprise operating critical national infrastructure, MACL adheres to the laws of the Republic of Maldives, international civil aviation standards established by the International Civil Aviation Organization (ICAO), and global data protection best practices.

Information We Collect

Passenger & Flight Data

Name, passport details, flight itinerary, lounge reservation preferences, special assistance requests, and check-in validation data.

Digital Platform Usage

IP addresses, device metadata, browser type, cookies, airport Wi-Fi login credentials, session duration, and page navigation history.

Commercial & Permits Data

Business registration, contact representative details, vehicle registration numbers, harbor permits, and commercial lease documentation.

Career Applications

Resumes, educational background, national identification cards, work experience records, and reference checks.

How We Use Personal Data

We process personal data only for lawful operational purposes: providing flight and terminal services, ensuring airport security, processing commercial permits, verifying qualifications for recruitment, and complying with statutory civil aviation regulations.

CCTV & Terminal Security Surveillance

For the safety and security of all passengers, staff, and airport facilities, Closed-Circuit Television (CCTV) cameras operate continuously throughout Velana International Airport terminals, airside operational zones, cargo facilities, and public concourses.

Surveillance Purpose & Access Control:Surveillance footage is processed strictly for crime prevention, airport security monitoring, incident investigation, and emergency response in compliance with the Maldives Civil Aviation Authority and National Security Directives. Access is restricted to authorized security personnel.

Statutory & Regulatory Data Sharing

MACL does not sell, rent, or commercialize personal data to third parties. We may disclose necessary information only under the following statutory circumstances:

State Regulatory Authorities: Maldives Civil Aviation Authority (MCAA), Maldives Customs Service, Maldives Immigration, and Aviation Security Command for statutory border control and aviation safety.
Legal Compliance: Court orders, law enforcement requests under Maldivian legislation, or statutory audit demands from the Auditor General's Office.
Contracted Operational Partners: Ground handling agents, airline operators, and certified IT service providers under strict data processor agreements.

Data Security & Retention Policy

MACL enforces multi-layered technical, administrative, and physical security safeguards to prevent unauthorized access, alteration, disclosure, or destruction of personal data.

Encryption StandardsTLS 1.3 in-transit encryption and AES-256 data-at-rest encryption protocols.

Retention LimitsPersonal records are stored only as long as necessary for statutory operational or auditing requirements.

Passenger & User Rights

Subject to applicable Maldivian laws and aviation safety mandates, individuals have the following rights regarding their personal data:

Right of AccessRequest details of personal data maintained by MACL.

Right of RectificationRequest correction of inaccurate or incomplete records.

Right to InquireSubmit privacy queries or request RTI disclosures via our portal.

Contact Data Protection Division

If you have questions, concerns, or requests regarding this Privacy Policy or MACL's data practices, please reach out to our Legal & Compliance Secretariat:

Email Legal Division (info@macl.aero)Submit Statutory RTI Request