Data Protection and Privacy Policy

Thank You for Visiting Our Website

Maldivian Red Crescent (MRC) is committed to ensuring that personal information is protected and managed in accordance with Maldivian laws, international good practice, and individuals’ rights. We collect and use personal information to help us offer individuals appropriate information on our programmes and initiatives.

Note: The privacy practices set forth in this privacy policy apply only to this website. If you are connected to another website from here, please review the privacy policies posted at those sites.

Data Protection Policy

MRC recognises that the privacy of your personal data is important to you. MRC is committed to treating all personal data with due confidentiality, in accordance with the relevant data protection laws of Maldives. MRC’s Data Protection Policy aims to help you understand how we collect, use, share, and protect your personal data.

Personal Data

In this Data Protection Policy, “Personal Data” refers to any data, whether true or not, about an individual who can be identified (a) from that data; or (b) from that data and other information to which we have or are likely to have access, including data in our records as may be updated from time to time. By volunteering or knowingly providing your personal data to MRC, it will be deemed that you have agreed and consented to the collection, use, and disclosure of your personal data by MRC. Providing us with your Personal Data is voluntary. However, if you choose not to provide us with the Personal Data described in this Policy, we may not be able to fulfill our contractual duties towards you or facilitate your request or provide the service to you.

Collection, Usage, and Disclosure of Personal Data with Consent

When asking for your personal information, the MRC is committed to the following:

• Explaining why we need personal information and only asking for the information we need.
• Protecting the information we are given and ensuring that only those who need access are able to do so.
• Only sharing the information within the MRC and with other organisations where such sharing is necessary or where we have the individual’s consent.

Fresh consent shall be obtained before collecting any additional personal data, or before using existing personal data collected for a purpose which has not yet been notified to you. MRC shall communicate the need to collect additional personal data, or use existing personal data for any new and previously unnotified purpose, to you within thirty (30) days of the new purpose arising, via your preferred communication channel, and obtain your consent, before proceeding to collect the required additional personal data, or use existing personal data for the new purpose.

Collection

MRC collects only the relevant data required for the following:

• When you sign in on our websites
• When you subscribe to our newsletters
• When you participate in our marketing campaigns
• When you register for our events or programmes
• When you submit your resume for training applications
• When you contact us to share your stories
• When you provide us with your details at events, campaigns, and meetings

Usage

MRC may use your information for the following purposes:

• To contact you for programmes which you have signed up for
• To inform you about programme updates
• To respond to enquiries pertaining to our programmes
• To respond to your application
• To send newsletters which you have subscribed to

MRC may use your photographs for publicity purposes on our various platforms. We will not use your personal data for purposes other than what we have informed you or which are permitted under local laws and regulations.

We will not offer or share your personal data with third parties outside of Maldivian Red Crescent for commercial purposes, without seeking your consent. We will not disclose your personal data to third parties unless requested by relevant government or law enforcement agencies to comply with any laws, rules, guidelines, and regulations or schemes imposed by any governmental authority.

Disclosure

We may disclose your data to third parties to facilitate our programmes and initiatives. We would work closely with such third parties, and adopt appropriate security measures in collaboration with them to ensure that your information remains secure and confidential.

MRC may disclose your information for the following purposes:

• Travel agencies/Airlines for flight booking purposes
• Hotels for room reservation purposes
• Insurance companies for insurance coverage
• Government agencies which require security clearance
• Partners assisting MRC with logistics and programme facilitation
• Clinics/Hospitals for medical assessment

We may also share information with government agencies or other companies assisting us in fraud prevention or investigation. We may do so when: (1) permitted or required by law; (2) trying to protect against or prevent actual or potential fraud or unauthorized transactions; or (3) investigating fraud which has already taken place.

Protection

To safeguard your personal data, all electronic storage and transmission of personal data are protected with security technologies.

Collection, Usage, and Disclosure of Personal Data without Consent

Below are some of the circumstances under which our staff may collect, use or disclose personal data about an individual without the individual’s consent. This is permitted under the PDPA:

• First Schedule - Collection, Use, and Disclosure of Personal Data without Consent
• Second Schedule - Additional Bases for Collection, Use, and Disclosure of Personal Data without Consent

It is likely that consent for the collection, use or disclosure of personal data cannot be obtained in a timely manner, and that the affected individual would not reasonably be expected to withhold consent.

Vital Interests Of Individuals

• Where it is necessary for any purpose that is clearly in the interest of the individual and consent for its collection, use or disclosure (as the case may be) cannot be obtained in a timely way or the individual would not reasonably be expected to withhold consent
• The collection is necessary to respond to an emergency that threatens the life, health or safety of the individual or another individual
• Is for the purpose of contacting the next-of-kin or a friend of any injured, ill or deceased individual

Matters Affecting Public

• The personal data is publicly available
• Is in the national interest
• Is solely for artistic or literary purposes
• Is solely for archival or historical purposes, if a reasonable person would not consider the personal data to be too sensitive to the individual to be collected, used or disclosed (as the case may be) at the proposed time
• The personal data is collected, used or disclosed (as the case may be) by a news organisation solely for its news activity

Legitimate Interests

• Is necessary for any investigation or proceedings
• Is necessary for evaluative purposes
• Is necessary for the organisation to recover a debt owed to the organisation by the individual or for the organisation to pay to the individual a debt owed by the organisation
• Is necessary for the provision of legal services by the organisation to another person or for the organisation to obtain legal services
• Is for the purpose of the preparation by a credit bureau of a credit report or relates to credit report provided by a credit bureau to a member of the credit bureau in relation to a transaction between the member and the individual
• Is to confer an interest or a benefit on the individual under a private trust or benefit plan and administer that trust or benefit plan, at the request of the settlor or the person establishing the benefit plan, as the case may be
• Is provided to the organisation by another individual to enable the organisation to provide a service for the personal or domestic purposes of that other individual
• The personal data is included in a document
• Produced in the course, and for the purposes, of the individual’s employment, business or profession; and
• Collected, used or disclosed for purposes consistent with the purposes for which the document was produced
• The personal data is collected, used or disclosed by the individual’s employer and is reasonable for the purpose of or in relation to the organisation entering into an employment relationship with the individual or appointing the individual to any office or managing or terminating an employment relationship with or appointment of the individual
• Business asset transactions
• Business improvement purposes

Obtaining Consent from a Person Validly Acting on Behalf of an Individual

Section 14(4) of the PDPA provides that consent may be given, or deemed to have been given, by any person validly acting on behalf of the individual for the collection, use or disclosure of the individual’s personal data. Regulations issued under the PDPA will also provide for some specific situations in which an individual person may give consent on behalf of another. We will verify the authenticity of the person via asking for a letter of authorization from the individual concerned, or telephone or email verification with the individual concerned, depending on the circumstances of the situation. Only when this is completed will we proceed to seek consent. Wherever applicable, individuals submitting another individual’s personal data to MRCS should obtain the consent of the latter before doing so, such as the case of job referee or next-of-kin.

Withdrawal of Consent, Access and Correction of Your Personal Data

You also have the right to withdraw any consent that you have given to us. Please let us have any notice of withdrawal in writing, indicating your instructions clearly via email to the Data Protection Officer. If you withdraw your consent for the collection, use or disclosure of your personal data, we will put the withdrawal into effect within thirty (30) working days of your request. Do note that MRC will not be able to process any task or request which requires the employment of your personal data.

If you:

1. Have any questions or feedback relating to your Personal Data or our Data Protection Policy;
2. Would like to withdraw your consent to any use of your Personal Data as set out in this Data Protection Policy; or
3. Would like to obtain access and make corrections to your Personal Data records,

Please contact us at mrchub@redcrescent.org.mv

Cookie/Tracking Technology

The Site may use cookie and tracking technology depending on the features offered. Cookie and tracking technology are useful for gathering information such as browser type and operating system, tracking the number of visitors to the Site, and understanding how visitors use the Site. Cookies can also help customize the Site for visitors. Personal information cannot be collected via cookies and other tracking technology; however, if you previously provided personally identifiable information, cookies may be tied to such information. Aggregate cookie and tracking information may be shared with third parties.

Commitment to Data Security

Your personally identifiable information is kept secure. Only authorized employees, agents, and contractors (who have agreed to keep information secure and confidential) have access to this information. All emails and newsletters from this site allow you to opt out of further mailings.

Contact Information

If you have any questions, concerns, or comments about our privacy policy, please contact us at mrchub@redcrescent.org.mv or +9603347099.

We reserve the right to make changes to this policy. Any changes to this policy will be posted.