MTR Railway OperationS (Macau) COMPANY LIMITED
Privacy Policy Statement
("PPS")
1. Your privacy
MTR Railway Operations (Macau) Company Limited ("MTR M", "we ", "our " or "us"), being the Controller, protects your Personal Data when collecting, storing, using, processing and transmitting it and this PPS explains our privacy practices. We are legally required to comply with the Law no. 8/2005 Personal Data Protection Act of the Macao Special Administrative Region when collecting, holding, using and/or processing your Personal Data. In doing so, we will ensure compliance by our staff to the strictest standards of security and confidentiality.
Please read the following carefully to understand our policy and practices regarding how your Personal Data will be processed. By providing your Personal Data to us, you are consenting to this PPS and the collection, use, transfer, storage and processing of your Personal Data as described in this PPS.
If you are under the age of 18, you must have a legal representative such as a parent or guardian accepting this Policy on your behalf before providing any Personal Data to us.
Your Personal Data is circulated on the networks without security measures and may be at risk of being seen and used by unauthorised third parties.
If there is any inconsistency between the English and Chinese version of this PPS, the English version shall prevail.
2. Collection of Personal Data
Depending on the types of goods and/or services we provide to you, we may collect two basic types of data from you, “Personal Data” and “Non-Personal Data”:
"Personal Data" means any information of any type, irrespective of the type of medium involved (namely IP is included), including sound and image, relating to an identified or identifiable natural person (“data subject”); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an indication number or to one or more factors specific to his physical, physiological, mental, economic, cultural or social identity.
“Non-Personal Data” includes aggregate and/or automatic information, which is data collected about the use of goods and/or services (including without limitation our websites and/or mobile applications), or about a group or category of users from which individual identities or other individually identifiable information has been removed. This PPS does not restrict or limit our collection, use and provision of Non-Personal Data.
2.1 Personal Data
The following are the common situations when we may collect and store your Personal Data, although these situations are not exhaustive:
|
‧ Uploading or providing any feedback regarding to our services through our website; ‧ Through email to enquire about our service details and / or others services. |
2.2 Non-Personal Data
When you use our websites and/or mobile applications, we may keep an activity log that does not identify you individually and cannot be used to identify the identity of any particular user. Generally, we collect and store the following categories of Non-Personal Data:
|
‧ |
information about your device that you use to access our websites and/or mobile applications. This information may include the device name, IP address, operating system and version, the type of network and mobile Internet browser you use, the browser’s type and configuration, and other unique device identifiers of the device, browsing preferences such as language settings and font size etc.; and
|
|
‧ |
information about your use of the website and/or mobile application including without limitation the domain names you visit and the specific actions you take on the website and/or mobile application, the number of new or returning visit, statistics on the pages visited and referred, a reading history of the pages and sites you have visited and viewed, search terms used and search results, error and crash statistics, traffic data (such as time, duration and date of access). |
The above Non-Personal Data are collected and used to measure traffic, gauge the popularity of various parts of our websites and/or mobile applications, to gain general knowledge about our audience and market our websites and/or mobile applications to advertisers with whom we may share summarized traffic data. We may also share to third parties (including without limitation to those specified under paragraph 4 below) these Non-Personal Data for customizing, enhancing, optimizing, maintaining and/or improving the quality of our websites and/or mobile applications, such as for determining the optimal screen resolution, language and font settings, etc. This Policy in no way restricts or limits our collection, use, handling and provision of Non-Personal Data.
3. Purposes for which we will use your Personal Data
The purposes for which we may use your Personal Data will vary depending on the type(s) of product(s) and/or service(s) you seek from us. Such purposes will be stated in the Personal Information Collection Statement (“PICS”), application form, terms and conditions, mobile application and/or webpage relevant to your provision of Personal Data to us. If you fail to supply the Personal Data required, we may be unable to provide the specific products / services in full to you.
4. Disclosure and Transfer of Personal Data
In cases where we do collect Personal Data from you, we will:
|
i. |
tell you (by way of a PICS or by a separate notification) that we are doing so and any purpose of use that we will make of such Personal Data we collect; and
|
|
ii. |
where relevant, give you the opportunity to object to particular use of your Personal Data. |
We will to take all practicable steps to keep your Personal Data confidential but we may disclose, transfer and/or assign such data to the following parties:
- Parent company of MTR M – MTR Corporation Limited;
- Macao Light Right Rapid Transit Corporation, Limited;
- if MTR M decides to sell, merge and/or re-organise any part of its business, to any actual or proposed assignee, transferee or successor of or to MTR M's rights in respect of your Personal Data;
- any agent, adviser, auditor, contractor or third party service provider who provides administrative, telecommunications, computer, payment, fraud prevention, insurance, data processing and/or other services to us in connection with the operation of our business and/or the relevant product(s) and/or service(s) that you seek from us, and/or who otherwise processes Personal Data for and on our behalf; and
- any person (including without limitation government authorities, regulatory or administrative bodies or law enforcement agencies) to whom MTR M is under an obligation to make disclosure under the requirement of any law binding on MTR M or for the purposes of any guidelines or codes of practice issued by regulatory or other authorities with which MTR M is expected to comply, or such parties who are authorised by law to request information from MTR M.
We may also disclose and/or transfer your Personal Data in the manner as stated in the Personal Information Collection Statement and/or any terms and conditions relevant to the product(s) and/or service(s) you seek from us.
5. Links to Other Websites
If you use our websites or mobile applications, there may be advertisements or hyperlinks linking to another website (e.g. Linked Sites). If you click on any of these advertisements or hyperlinks, you will leave our websites or mobile application for another location. At any other website, the protection of your privacy, Personal Data and your exposure to cookies are not our responsibility and you are advised to refer to the privacy policy of that other location (if any).
Some of our websites and/or mobile applications may allow you to link and/or connect to third party social networking sites. If you choose to link and/or connect to these third party social networking sites, we may be able to collect certain Personal Data from your social networking profile provided to us by the social networking site. In that case, we will collect and use such Personal Data only for the purpose of providing you with the connection to the social networking site.
6. Cookies
Some of our websites use Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses "cookies” to help our websites analyze how users use those websites. A cookie is a small text file that is stored on your device (e.g. on your computer) when you visit or access a website. A cookie can be used to identify a computer or a mobile device. It, however, is not used to collect any personal information and do not recognize you personally. In other words, it does not have the function of identifying an individual user of our websites.
Within our websites cookies are used to track the use of and monitor traffic on our websites, as well as to improve, customize and enhance your browsing experience, for example:
|
‧ |
Strictly necessary cookies are used to indicate your active using of our websites and remember the information you’ve entered in a form or details about a payment you want to make. Without them, the information would be lost every time you move to a new page; |
|
‧ |
Performance cookies are used to collect anonymous information about how you use our websites, such as which pages you visit on our websites. We use this aggregated information to improve our websites; and
|
|
‧ |
Functional cookies are used to record information about choices you’ve made and to recommend contents of our websites that are relevant to you and your interests.
|
On some pages, we feature embedded “share” buttons or widgets that enable you to connect to other social networking sites such as Facebook and Twitter. These sites may set cookies which can identify you as an individual when you are logged in to their services. We do not control these cookies and you should check the relevant third-party website to see how your information is used and how to opt-out.
If you use or continue using our websites, we will assume that you are happy for us to set cookies. You may choose to reject all or some cookies at any time by changing the setting of your web browser on your device. Please visit https://www.allaboutcookies.org/ to find out how to manage cookies. However, please be aware that if you choose to delete or restrict cookies, you will not be able to use some of the functions of our websites.
7. Security and Storage
Except as mentioned in paragraph 4 above, your Personal Data, however stored, will be accessed only by our employees or contractors who are authorised to do so. Where Personal Data is stored electronically, it will be kept on a secured server and will be encrypted and/or password-protected (or under some equivalent form of protection) and accessible only by authorised personnel of MTR M or its contractors. The network transmission of Personal Data will also be protected by using the SSL protocol. You hereby agree us to transfer your encrypted Personal Data to Singapore where the server of MTR M locates. Personal Data are treated as confidential information by MTR M and all employees and contractors designated to handle Personal Data will be instructed to do so only in accordance with this PPS and internal guidelines, they are strictly restricted to professional secrecy. They are prohibited to process your Personal Data without instructions by MTR M or contractors.
8. Your right to access and correct Personal Data
You may at any time request access to and correct Personal Data relating to you in any of our records. You may also ask us to delete you or your Personal Data from any active mailing or distribution list. To exercise any of your rights, contact us at the address or email below marking your communication "Confidential ". In response, we may ask you to provide certain details about yourself so that we can be sure you are the person to whom the data refers. We are required to respond to your requests within 40 days. We may also charge you a reasonable fee for complying with any data access request.
MTR Railway Operation (Macau) Limited
Legal Department
(Marked Confidential)
Address: Avenida do Aeroporto, LRT - Depot, Macau
email: [email protected]
9. Retention of Personal Data
Personal Data provided by you are retained for as long as the purposes and any directly-related purposes for which such data were collected continue. Once it is not necessary to use the Personal Data to fulfil such purposes (and directly-related purposes), they are then destroyed within a reasonable time unless their retention is required to satisfy legal, regulatory or accounting requirements or to protect the MTR M's interests.
This PPS is subject to change. Any changes will be posted on this page. Your continued use of our websites and/or mobile applications after the posting of such changes indicates your acceptance to the same.
In the event that there is any inconsistency between the English and Chinese version of this PPS, the Chinese version shall prevail.
December 2019
