Privacy Policy

The General Authority of Civil Aviation is responsible for all civil aviation affairs in the Kingdom, including providing all telecommunications services related to ensuring aviation safety and air traffic control. Your use of this site constitutes your acceptance of the user privacy policy.

Your Privacy Matters to Us

Your privacy is our priority, which is why the privacy policy has been written in a clear and easy-to-understand manner to help you understand who we are, what personal data we collect about you, the purpose of collecting that data, and how it is processed.

Last Updated
The privacy notice was last updated on (14/7/1446H).

What Personal Data Do We Collect?

The General Authority of Civil Aviation ensures that the personal data collected and processed is limited to the minimum necessary to enable it to perform its tasks and provide necessary services. The following personal data is collected via its website:

• Personal Identification Data: Name, gender, nationality, date of birth, ID or residence or passport number, ID type (National ID/Resident ID/Passport).
• Contact Data: Phone number, email address.

How Is Personal Data Collected, and What Is the Purpose of Collecting It?

Some personal data that we process is obtained directly from the data subject through the Authority's website for the following purposes:

• Account creation
• Handling complaints and objections
• Responding to inquiries and recording suggestions
• Fulfilling service requests of all types

How Do We Share Your Personal Data?

The Authority reserves the right to share personal data with security authorities or relevant bodies for the implementation of another system or to meet judicial requirements within the Kingdom, according to the Personal Data Protection Policy. Personal data will not be shared with non-governmental entities unless they are authorized entities or bodies responsible for performing specific government services. The Authority also retains the right to disclose any data to relevant authorities if requested for security purposes or judicial requirements. By providing your data and information to the Authority through any official channel, including its official platforms, email, or in person at its premises, you explicitly consent to the storage, processing, and use of that data by the Authority.

Legal Basis for Collecting and Processing Your Personal Data:

• Your explicit consent, which you can withdraw at any time, except for some exceptions as stated in the regulations. To do so, you can contact the Data Management Office at the Authority via email at boad@gaca.gov.sa.
• Compliance with legal obligations according to the Passenger Rights Protection Regulation approved by the General Authority of Civil Aviation Board of Directors Decision No. (574/36) dated 1444/11/18H.
• The public interest in providing a positive experience for travelers/beneficiaries and safeguarding their rights.
• Pursuing legitimate interests to improve the quality of services provided in the aviation sector with the highest standards of quality.

How Do We Store Your Personal Data?

The Authority stores your personal data in the Kingdom of Saudi Arabia in a secure and trusted environment, using administrative, organizational, and technical protective measures when storing your personal data. Data is retained in accordance with our legal obligations, and it is securely destroyed once the purpose for its collection has been fulfilled in a way that prevents the data from being accessed or retrieved.

Your Rights Regarding the Processing of Your Personal Data:
Under the Personal Data Protection Law, which explicitly outlines the following rights for data subjects, based on the purpose of collecting and processing personal data:

• The Right to Be Informed: You have the right to know how we collect your personal data, the legal basis for collecting and processing it, how it is processed, stored, and disposed of, and to whom it will be disclosed. You can review all details through the privacy policy or contact us through the email below.
• The Right to Access Your Personal Data: You have the right to request access to your personal data according to legal requirements via the email below.
• The Right to Obtain a Copy of Your Personal Data: You have the right to request a copy of your personal data, according to legal requirements, via the email below, and it will be provided to you free of charge within (30) days.
• The Right to Correct Your Personal Data: You have the right to request correction of any inaccurate, incorrect, or incomplete personal data. This can be done via the email below, and the corrections will be reviewed and updated, and you will be notified within (30) days.
• The Right to Delete Your Personal Data: You have the right to request deletion of your personal data in accordance with legal conditions via the email below in applicable cases, as long as it does not conflict with the legal basis.
• The Right to Withdraw Your Consent for Personal Data Processing: You have the right to withdraw your consent for the processing of your personal data at any time, unless there are legal grounds that require otherwise.

Except where otherwise provided by law, you are not required to pay any fees for exercising these rights. If a request is made to exercise any of these rights, you will receive a response within (30) days from the date of receiving the request.

For more details on how we process your personal data and how to exercise your rights, you can contact the Personal Data Protection Officer at the Authority via email at boad@gaca.gov.sa.

How to File a Complaint or Objection

If you have concerns or believe we have not complied with the Personal Data Protection Policy issued by the National Data Management Office, you can file a complaint with the Data Management Office at the Authority via email at boad@gaca.gov.sa.

Data Management Office Address at the General Authority of Civil Aviation

King Khalid Airport, Riyadh, Kingdom of Saudi Arabia
Website: www.gaca.gov.sa

You can also file a complaint with the National Data Management Office if you are not satisfied with how we use your personal data or if the Data Management Office at the Authority does not address your complaint within (60) days.

National Data Management Office Address:

Riyadh, Kingdom of Saudi Arabia
Website: www.ndmo.gov.sa
Email: pr@ndmo.gov.sa