Personal Information Collection Statement

1. Your Privacy

MTR Corporation Limited (“MTR”, “we”, “our” or “us”) and our subsidiaries and affiliates respect your legal rights of privacy when collecting, storing, using and transmitting personal data and this PICS explains our privacy practices. It is our policy to comply with the requirements of the Personal Data (Privacy) Ordinance (Cap. 486) of the Laws of the Hong Kong Special Administrative Region and all related codes of practice and guidance notes issued by the Privacy Commissioner.

In doing so, we will ensure compliance by our staff with the strictest standards of security and confidentiality. MTR is the data controller for your personal data processed in connection with the 【MTR Metaverse Generative AI Train Competition】Campaign (the “Campaign”). If you have questions about our processing of your data, please contact us using the contact information under Section 10 below.

Please read the following carefully to understand our policy and practices regarding how your personal data will be treated. This policy may from time to time be revised, or otherwise changed where we deem necessary. Please check this PICS from time to time to understand your privacy rights.

If there is any inconsistency between the English and Chinese version of this PICS, the English version shall prevail.

“Personal data” means any personally identifying information or data (such as names, titles, email addresses, departments, divisions, office locations, photos, videos, device name, etc.) from which it is practicable for the identity of an individual to be ascertained directly or indirectly.

2. Collection of Personal Data

Your participation with the【MTR Metaverse Generative AI Train Competition】Campaign is entirely voluntary. If you choose to register and participate in the Campaign, you must provide your personal data including but not limited to your name, email address, mobile number and MTR Mobile registration number. The above personal data also applies to the delegate if the Top 3 Winners are not able to redeem the prize in person.

3. Purposes for which we will use your Personal Data

We may collect, obtain, process, access, use, store and/or handle your personal data for any or all of the following purposes:-

Provision, operation, administration, management and improvement of the Campaign (including, without limitation, verification of your identity, arrangements for collection of prize, by or through use of customer research, profiling, surveys, or other statistical tools, etc.);

Other purposes ancillary or directly related to any of the above.

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose.

4. Disclosure and Transfer of Personal Data

We will take all reasonably practicable steps to keep your personal data confidential. We may need, for any of the circumstances below, to disclose, transfer or assign your personal data to any of the following parties:

any person (including but not limited to government authorities, regulatory or administrative bodies or law enforcement agencies) to whom MTR is under an obligation to make disclosure under the requirements of any law binding on MTR or for the purposes of any guidelines or codes of practice issued by regulatory or other authorities with which MTR is expected to comply;
our subsidiaries and/or affiliates for or in relation to the management, operation of, and/or collaboration for or relating to the Campaign;
any agent, advisor, auditor, consultant, contractor and/or third-party service provider who provides advisory, consultancy, administrative, telecommunications, publicity, advertising, customer services assistance and support, technology, payment, fraud prevention, insurance, data processing and/or other services to MTR for, in connection with or with respect to the operation of the Campaign, our relevant businesses and/or who otherwise processes personal data for and on our behalf. For avoidance of doubt, we will not share, disclose or transfer your personal data to any data brokers for market research, analytics or profiling purposes;
if MTR decides to sell any relevant part of its business, to any actual or proposed assignee, transferee or successor of or to MTR’s rights in respect of your personal data.

5. Cookies

Our website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies” to help our websites analyze how users use those websites. A cookie is a small text file that is stored on your device (e.g. on your computer) when you visit or access a website. A cookie can be used to identify a computer or a mobile device. It, however, is not used to collect any personal information and do not recognize you personally. In other words, it does not have the function of identifying an individual user of our websites.

Within our website cookies are used to track the use of and monitor traffic on our websites, as well as to improve, customize and enhance your browsing experience, for example:

Strictly necessary cookies are used to indicate your active using of our websites and remember the information you’ve entered in a form or details about a payment you want to make. Without them, the information would be lost every time you move to a new page;
Performance cookies are used to collect anonymous information about how you use our websites, such as which pages you visit on our websites. We use this aggregated information to improve our websites;
Functional cookies are used to record information about choices you’ve made and to recommend contents of our websites that are relevant to you and your interests;

If you use or continue using our websites, we will assume that you are happy for us to set cookies. You may choose to reject all or some cookies at any time by changing the setting of your web browser on your device. Please visit www.allaboutcookies.org to find out how to manage cookies. However, please be aware that if you choose to delete or restrict cookies, you will not be able to use some of the functions of our websites.

6. Security

Except for the data disclosure and transfer scenarios under Section 4, your personal data will be accessed only by authorised personnel of MTR and its authorized contractors. Where personal data are stored electronically, they will be kept on a secured server and will be password-protected (or under some equivalent protection) and accessible only by those authorised personnel. Network transmission of personal data will be secured. Authorized personnel designated to process and handle personal data will be instructed to do so only in accordance with this PICS.

7. Use of Personal Data in Legal Proceedings

If it becomes necessary that we have to take action against you for any reason whatsoever including any breach of the terms in respect of the Campaign, you expressly agree that the personal data provided by you can be relied upon in identifying and taking legal action against you.

8. Your Right to Access and Correction

You may at any time request access to and to correct personal data relating to you in any of our records. You may also ask us to delete you or your personal data from any active mailing or distribution list. To exercise any of your rights, contact us at the address, facsimile number or email below, marking your communication “Confidential”. In response, we may ask you to provide certain details about yourself so that we can be sure you are the person to whom the data refers. We are required to respond to your requests within 40 days, but we may charge you a reasonable fee for doing so.

9. Retention of Data

We will keep your personal data for as long as necessary to fulfil the aforesaid purposes. Personal data which is no longer required will be destroyed or anonymised as soon as practicable, unless their retention is required to satisfy any applicable legal, regulatory or accounting requirements or to protect MTR’s interests.

10. Questions and Complaints

The person to whom (1) requests (i) for access to data or correction of data, (ii) for general information regarding our policies and practices with respect to personal data and (iii) about the kinds of personal data that we hold and (2) general questions and complaints should be addressed is as follows:

MTR Corporation Limited

Personal Data Privacy Officer

Legal – General Department

(Marked Confidential)

Address: MTR Headquarters Building
Telford Plaza, Kowloon Bay
Kowloon, Hong Kong

email: PDPO@mtr.com.hk

Version: 08 September 2023