PRIVACY POLICY
1. Your Privacy
The MTR Corporation Limited ("MTRCL", "we", "our" or "us") respects your legal rights of privacy when collecting, storing, using and transmitting personal data and this PPS explains our privacy practices. It is our policy to pledge to comply with the requirements of the Personal Data (Privacy) Ordinance (Cap. 486) of the laws of Hong Kong and all related codes of practice and guidance notes issued by the Privacy Commissioner. In doing so, we will ensure compliance by our staff to the strictest standards of security and confidentiality.
We limit the access, collection and use of data to the specific information listed below that we need to operate our business, provide our services to you and offer various opportunities and information which may be of interest to you.
In the event that there is any inconsistency between the English and Chinese version of this PPS, the English version shall prevail.
2. Data we access, collect and use
(i) Device information
When you use the Application, we collect certain information about your mobile device. This information may include equipment identifier (e.g. IMEI), device type/manufacturer, Internet Protocol (IP) address, operating system type and version, network type, wireless carrier/operator. We use this information to provide the most effective Application service in different locations, devices, connectivity and situation. We also use this information in the aggregate to improve our products and services.
(ii) Android account name
We collect your account name if you are using Android as the operating system. We use this information to provide the push function of the Application to provide you with the latest news and notice of MTRCL.
(iii) Location
The Application has a location service which will enable you to identify the location of the nearest MTR station to your mobile device. If you activate this service, we will access the location of your mobile device. We need to use this information in order to provide the location service to you.
(iv) Social networking sites connection
Certain features of the Application may be able to connect to third party social networking sites (such as Facebook) ("Social Networking Sites"). If you choose to access Social Networking Sites through the Application, we may be able to collect certain information from your social networking profile that is released by the Social Networking Sites. This information may include, but is not limited to, your basic information. MTRCL collects your personal data only for the purpose of providing you with the connection to the Social Networking Sites. Your personal data collected by us from the Social Networking Sites will be destroyed by us when you logout from the Social Networking Sites.
(v) SD card contents
If there is an SD card available, we access the SD card contents to modify or delete the contents stored in the SD card so as to enable the operation of the Application.
3. Disclosure
We will take all practicable steps to keep your personal data confidential but we may transfer/assign such data to the following parties:
(a) if MTRCL decides to sell any relevant part of its business, to any actual or proposed assignee, transferee or successor of or to MTRCL's rights in respect of your personal data;
(b) any agent, contractor or third party service provider who provides administrative, telecommunications, computer and other services to MTRCL with respect to the operation of its business; and
(c) any person to whom MTRCL is under an obligation to make disclosure under the requirements of any law binding on MTRCL or for the purposes of any guidelines or codes of practice issued by regulatory or other authorities with which MTRCL is expected to comply.
4. Security
Except as mentioned in paragraph 3 above, your personal data, however stored, will be accessed only by our employees or contractors who are authorised to do so. Where personal data is stored electronically, it will be kept on a secured server and will be password-protected (or under some equivalent form of protection) and accessible only by authorised personnel of MTRCL or its contractors. Employees and contractors designated to handle personal data will be instructed to do so only in accordance with this PPS.
5. Questions and Complaints
You have the right to request access to or correction of your personal data held by us. If you want to make such request or have any questions or complaints about our Privacy Policy, please contact us at:
MTR Corporation Limited
MTR Headquarters Building
Telford Plaza
Kowloon Bay
Kowloon, Hong Kong
Attention: Personal Data Privacy Officer
Secretarial & Legal Department
(Marked Confidential)
e-mail: PDPO@mtr.com.hk