COMMITMENT TO DATA PROTECTION
ExecuJet Handling Services is committed to protecting personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This Personal Data Protection Notice (“Notice”) informs you how we use your personal data based on the following guiding principles.
CONSENT FOR PROCESSING
By engaging our ground handling services, the Client expressly consents to ExecuJet Handling Services processing personal data as necessary to perform the requested services and to comply with applicable legal and regulatory requirements.
DEFINITION OF PERSONAL DATA
“Personal Data” means any information that identifies or can identify an individual, alone or with other data, and is subject to the Personal Data Protection Act 2010 (PDPA) and other applicable Malaysian laws. This includes “personal data” as defined under Malaysia’s PDPA, specifically information processed in relation to commercial transactions.
DEFINITION OF PROCESSING
“Process” means to use, disclose, store, modify, or otherwise handle personal data.
SCOPE OF THIS NOTICE
This Notice applies to all personal data received, stored, processed, and transmitted by ExecuJet Handling Services when providing services to aircraft operators, trip support companies, and their passengers or crew.
DATA CONTROLLERS
When ExecuJet uses your data for its own purposes, it acts as the data controller, as defined in applicable privacy laws, for any personal data that it collects from you. However, when ExecuJet collects data on behalf of its customers (e.g., operators and trip support companies), those customers are the data controllers, and ExecuJet acts strictly as the data processor, processing the data only on behalf of and in accordance with the instructions of the data controller.
Third-Party Personal Data
In respect of any Third-Party Individual’s personal data (as defined below), you warrant that you have obtained the necessary consent from the Third-Party Individual to provide their personal data to ExecuJet Handling Services and for ExecuJet Handling Services to process such data. You further warrant and undertake to provide a copy of this Notice to the Third-Party Individual prior to disclosing their personal data to ExecuJet Handling Services.
COLLECTION AND USE OF PERSONAL DATA
ExecuJet Handling Services collects and processes personal data only as required to fulfil its contractual obligations to aircraft operators and trip support companies. Personal data processed may include, but is not limited to:
- Passenger and crew information (name, date of birth, etc.)
- Passport or identification card details and visa information
- Flight details (schedule, aircraft registration, operator details)
- Contact information (phone number, email)
- Other operational data required to provide the requested ground handling services
Legal Basis For Processing
ExecuJet Handling Services processes personal data under the following legal justifications:
- Contractual Necessity: To provide ground handling services as agreed with operators and trip support companies.
- Legal Compliance: To fulfil regulatory and operational requirements under Malaysian aviation and security laws.
- Legitimate Interest: To ensure efficient handling and safety of flights, passengers, and crew.
DATA PROTECTION MEASURES
ExecuJet Handling Services implements appropriate technical and organizational measures to ensure data security, including:
- Regular staff training and a defined process for responding to data breaches.
- Restricted access to personal data on a need-to-know basis.
- Encryption and secure storage of digital records.
- Secure handling and disposal of physical documents.
- Regular security audits and compliance checks.
DATA SHARING AND DISCLOSURE
ExecuJet Handling Services does not sell, trade, or rent personal data. However, data may be shared with:
- Regulatory Authorities where required by law (e.g., Malaysian Civil Aviation Authority, Immigration Department, Customs Department, Airport Authorities, Police).
- Third-Party Service Providers involved in ground handling operations (outstation ground handling partners, security services), subject to confidentiality agreements.
- Aircraft Operators and Trip Support Companies as per contractual obligations.
DATA RETENTION
Personal data is retained only for as long as necessary to fulfil contractual and legal obligations. Once data is no longer required, it will be securely deleted or anonymized.
RIGHTS OF DATA SUBJECTS
Under the PDPA, individuals have the following rights regarding their personal data:
- Right to access their data.
- Right to correct inaccurate or outdated data.
- Right to withdraw consent, subject to contractual and legal limitations.
- Right to lodge complaints with the Malaysian Personal Data Protection Department (JPDP) if they believe their data is mishandled.
- Right to be informed of the purpose and scope of data collection.
REVISIONS TO THE NOTICE
ExecuJet may revise this Notice periodically. Any revisions will be posted on our website(s) and/or communicated through other methods deemed appropriate and will take effect upon publication unless otherwise stated.
CONTACT US
If you have any questions about this Notice or wish to exercise your rights, please contact:
Email: kualalumpur.handlingwmsa@execujet-mro.com
Tel: +603 7734 5672
