Privacy Policy

In accordance with article 25 paragraph 3 of the Law No. 8/2005 – Personal Data Protection Act, in regard to the “Disclosure of Data Processing”, Macau Urban Transportation Co. Ltd. (hereinafter referred to as “the Company”) provides you the basic information on the processing of personal data by the Company.

I. Categories of Data Subjects and of Data, Purposes of Processing, and Data Recipients

(i) Citizen Data
1. Processing of service applications, inquiries, opinions, suggestions, commendations, and complaints

(1) Categories of Data Subjects: Applicants, inquirers, commenters, suggesters, persons giving commendations, complainants, and persons involved in the relevant processing.

(2) Categories of Data: Personal information provided by the data subjects and personal information collected in the course of processing service applications, inquiries, comments, suggestions, commendations, and complaints.

(3) Purposes of Processing: To process service applications, inquiries, comments, suggestions, commendations, and complaints.

(4) Data Recipients

4.1 The employee responsible for this job.
4.2 The entity that is required to be notified upon the data subject’s consent or request.
4.3 The information may be transferred to lawyers appointed by the Company, service providers, police authorities or judicial authorities for legal and regulatory, criminal investigation and/or litigation or contractual purposes.

2. Staff Recruitment

(1) Categories of Data Subjects: Job seekers.

(2) Categories of Data

2.1 Identification Information: Name, gender, date of birth, place of birth, marital status, nationality, address, telephone number, education level, type, number and copy of identification documents, etc.
2.2 Resume information.
2.3 Other information: Other information collected in accordance with legal requirements or with the consent of the data subjects.

(3) Purpose of Processing: Staff recruitment.

(4) Data Recipients

4.1 The employee responsible for this job.
4.2 For admitted non-resident applicants, all or part of the information will be transferred to the labour company with which the Company has a labour relationship, human resources office, and Immigration Department, due to the relevant procedures.

3. Bus Captain Trainee

(1) Categories of Data Subjects: Training applicants.

(2) Categories of Data

(3) Purpose of Processing

3.1 Recruitment of bus captain trainee.
3.2 Application for admission after being recruited.

(4) Data Recipients

4.1 The employee responsible for this job.
4.2 All or part of the information will be transferred to a Macau qualified lawyer for the purpose of signing the “Declaration of Indebtedness”.
4.3 All or part of the information will be transferred to the relevant government departments for the purpose of the application.
4.4 In case of machine test application, all or part of the information will be transferred to the motor vehicle driving schools approved by the competent authority for the purpose of application to the government.

4. Free Bus Pass Application

(1) Categories of Data Subjects: Employees’ family members and eligible persons.

(2) Categories of Data

2.1 Identification Information: Name, date of birth, identification documents (number and copy).
2.2 Personal information collected in the course of applying for the free bus pass.

(3) The purpose of processing is the application for the free bus pass.

(4) Data Recipients

4.1 The employee responsible for this job.
4.2 All or part of the information will be transferred to the bus pass provider for card production purposes.

5. Chartered Customers

(1) Categories of Data Subjects: Chartered customers (including contact persons)

(2) Categories of Data: Personal information provided by the data subjects and personal information collected in the course of processing the charter services.

(3) Purpose of Processing: To provide charter services.

(4) Data Recipients: The employee responsible for this job.

6. Temporary Services

(1) Categories of Data Subjects: Temporary or short-term service providers

(2) Categories of Data: Personal information provided by the data subjects and personal information collected in the course of processing temporary services.

(3) Purpose of Processing: To establish a cooperative relationship and to retain evidence of monetary transactions.

(4) Data Recipients

7. Visitor Registration

(1) Categories of Data Subjects: Visitors of the Company.

(2) Categories of Data:

2.1 Identification Information: Name, identification document (type and number) or work permit number.
2.2 Information of Organization: Name of the organization to which the visitor is affiliated, as provided by the visitor when visiting on behalf of the organization.

(3) Purpose of Processing: Concierge security.

(4) Data Recipients

4.1 The employee responsible for this job. (Employee of the Company or assignees of the outsourcing companies).
4.2 The entity that is required to be notified upon the data subject’s consent or request.
4.3 The information may be transferred to lawyers appointed by the Company, service providers, police authorities or judicial authorities for legal and regulatory, criminal investigation and/or litigation or contractual purposes.

8. Lost and Found

(1) Categories of Data Subjects: Person claiming the lost and found.

(2) Categories of Data

2.1 Identification Information: Copy of the ID card of the claimant.
2.2 Personal information collected in the course of processing the lost and found.

(3) Purpose of Processing: Lost and Found.

(4) Data Recipients: The employee responsible for this job.

9. Management of the Company Website

(1) Categories of Data Subjects: Users of the Company’s website (including the Company’s mobile apps).

(2) Categories of Data

2.1 The Internet domain name, IP address and location of the users.
2.2 Date and time of the start and end of browsing.
2.3 The web pages visited.
2.4 The domain name of the website if hyperlinks from other websites are used to access this website.

(3) Purpose of Processing: Management of the Company’s website.

(4) Data Recipients

4.1 The person who is responsible for improving the service, quality and maintenance of the website (Employee of the Company or assignees of the outsourcing companies).
4.2 The information may be transferred to lawyers appointed by the Company, service providers, police authorities or judicial authorities for legal and regulatory, criminal investigation and/or litigation or contractual purposes.

10. Organizing Events

(1) Categories of Data Subjects: Participants and related parties who participate in events organized (including hosted, co-hosted and co-organized etc.) by the Company.

(2) Categories of Data

2.1 Identification and Contact Information: Name, date of birth or age, gender, nationality, address, telephone number, fax number, email address, education level, common language, type, number and copy of identification documents, occupation, position, institution of employment or study, type, number and copy of student card; and information of parents/guardians/tutors of minors, prohibited or prospective prohibited persons, if any.
2.2 Event Information: Audio and video (e.g. photographs, audio and video recordings), performance, evaluation, awards, etc. of the event.
2.3 Financial Information: When money payments such as application fees and bonuses are involved, the bank account information of the persons concerned, etc..
2.4 Other Information: Other information related to the event.

(3) Purpose of Processing: To organize events; for event records and historical records.

(4) Data Recipients

4.1 The employee responsible for this job.
4.2 The entity that is required to be notified upon the data subject’s consent or request.
4.3 The relevant insurance company that provides the insurance.
4.4 The information may be transferred to lawyers appointed by the Company, service providers, police authorities or judicial authorities for legal and regulatory, criminal investigation and/or litigation or contractual purposes.

11. Processing of Various Applications

(1) Categories of Data Subjects: Applicants and the person(s) involved in the relevant application.

(2) Categories of Data

2.1 Identification Information: Name, address, telephone number, fax number, email address, type, number and copy of identification documents, etc..
2.2 Other Information: Information collected in accordance with legal requirements or with the consent of the data subjects.

(3) Purpose of Processing: To process the various applications submitted to the Company in accordance with the provisions of the Personal Data Protection Act.

(4) Data Recipients

(ii) Employee Personal Information
1. Human Resources Management

(1) Categories of Data

1.1 Identification Information: Name, date of birth, place of birth, gender, nationality, address, telephone number, education level, identification documents (type, number and copy), driving license (type, number and copy), taxpayer number, social security fund beneficiary number, etc..
1.2 Family Status: Marital status, name of spouse, children, and other personal information of employee’s family members used for providing benefits or participating in Company events and related documents.
1.3 Occupational Activity Information: Type of occupation, working hours and location, employee number and effective date, length of service, rank, compensation level, contract nature and duration, etc..
1.4 Compensation-related Information: Basic compensation, other fixed and variable compensation, allowances, vacation, attendance records, special leave, and information related to mandatory or non-mandatory deductions or taxes, etc..
1.5 Disciplinary Information: Internal disciplinary records and disciplinary information collected in accordance with legal requirements.
1.6 Other Information: Other information related to human resource management areas and information collected in accordance with legal requirements or with the consent of the data subjects.

(2) Purpose of Processing

2.1 To handle all matters related to the scope of human resources work. Including but not limited to: employee registration, calculation and payment of compensation, provision of benefits, training activities, performance evaluation, promotion planning, registration for participation in Company events, purchase of employee insurance and work accident reporting, handling labour relation issues, reporting to related entities or handling administrative procedures, etc..
2.2 To handle all activities of the employees in the Company. Including but not limited to: the use of the check-in system, the activation of the electronic bus fare collection machine, the gatehouse management system, etc..
2.3 To handle all applications or other related matters from employees for their professional activities. Including but not limited to: application for certificates, absence from work, accident case handling, appeal or grievance application, provision of advice, etc..
2.4 To handle applications and renewals of foreign employee identification documents. For example: pass, non-resident worker’s identification card, etc..

(3) Data Recipients

3.1 The employee responsible for this job or being authorized for the handling.
3.2 The organizer/trusted institution/entrusted training instructor which the Company enrolls training courses for its employees.
3.3 Organizations that assist the Company in organizing events or related activities. . Including but not limited to: travel agencies, dragon boat races organized by the authorities.
3.4 The entity that is required to be notified in accordance with legal requirements or upon the data subject’s consent or request (including but not limited to: the Financial Services Bureau, the Identification Bureau, the Social Security Fund, the Labour Affairs Bureau, the Human Resources Office, the Immigration Department of Public Security Police Force, the employment agencies for foreign workers, etc.).
3.5 Insurance companies that provide insurance / provident fund for employees.
3.6 For legal and regulatory reasons, labour relations issues, criminal investigations and/or litigation or contractual needs, such information may be transferred to lawyers appointed by the Company, the Labour Affairs Bureau, service providers, police authorities or judicial authorities.

2. Email and Internet Monitoring

This section only applies to employees who use the email account provided by the Company to send and receive emails, and who use the information equipment provided by the Company to browse the Internet.

(1) Categories of Data

1.1 The email address, date, time, title and content of the emails sent and received by employees.
1.2 The time, pages, and data sent or received by employees when browsing the Internet.

(2) Purpose of Processing: To ensure service quality, information security, and evaluation of employee performance.

(3) Data Recipients

3.1 Supervisor who evaluates employee performance.
3.2 Personnel responsible for improving the service, quality and maintenance of the network system (Employee of the Company or assignees of the outsourcing companies).
3.3 For the purpose of disciplinary investigation, the relevant information may be transferred to the personnel responsible for disciplinary investigation of the Company.
3.4 For legal and regulatory reasons, labour relations issues, criminal investigations and/or litigation or contractual needs, such information may be transferred to lawyers appointed by the Company, the Labour Affairs Bureau, service providers, police authorities or judicial authorities.

3. Event Photos and Videos

(1) Categories of Data Subjects: Employees and related persons who participated in the event.

(2) Categories of Data: Portraits and images.

(3) Purpose of Processing

3.1 Event records.
3.2 To upload to the Company intranet for sharing of internal activity highlights.
3.3 To upload to the Company website for public announcement.
3.4 Company promotion activities. Including but not limited to: company bulletin boards, publications and mass media, TV, newspapers, etc..

(4) Data Recipients

4.1 Company employees and related parties.
4.2 The general public.
4.3 The entity that is required to be notified upon the data subject’s consent or request.
4.4 The information may be transferred to lawyers appointed by the Company, service providers, police authorities or judicial authorities for legal and regulatory, criminal investigation and/or litigation or contractual purposes.

(iii) Other Information
1. Video Surveillance

This section only applies to the use of video surveillance equipment installed in the Company (including the Company’s buses).

(1) Categories of Data Subjects: All persons who pass through the video surveillance equipment installed in the Company (including the Company’s buses).

(2) Categories of Data

2.1 Images of all persons passing through the video surveillance equipment installed in the Company (including the Company’s buses).
2.2 Sound of all persons passing through the video surveillance equipment installed in the Company (including the Company’s buses).

(3) Purpose of Processing: Security surveillance (monitoring of bus money boxes, as well as their loading, unloading, fare counting, payment collection), protection of personal and property safety of employees and passengers, crime prevention and criminal investigation, and other legitimate interests.

(4) Data Recipients

4.1 The entity that is required to be notified upon the data subject’s consent or request.
4.2 For the purpose of disciplinary and security investigations, the information may be transferred to the person in charge of the disciplinary investigation (Employee of the Company, personnel of the Transport Bureau, or assignees of the outsourcing companies).
4.3 For legal and regulatory reasons, labour relations issues, criminal investigations and/or litigation or contractual needs, such information may be transferred to lawyers appointed by the Company, the Labour Affairs Bureau, service providers, police authorities or judicial authorities.

2. Telephone Monitoring

This section only applies to the use of the Company’s recorded telephone calls.

(1) Categories of Data Subjects: The user of the recorded telephone calls.

(2) Categories of Data: The phone number, date, start time, end time and content recording of outgoing and incoming calls.

(3) Purpose of Processing: To ensure the service quality, evaluation of employee performance, and to protect the legitimate rights and interests of the Company.

(4) Data Recipients

4.1 Supervisor who evaluates employee performance.
4.2 For the purpose of disciplinary investigation, the relevant information may be transferred to the personnel responsible for disciplinary investigation of the Company.
4.3 The information may be transferred to lawyers appointed by the Company, service providers, police authorities or judicial authorities for legal and regulatory, criminal investigation and/or litigation or contractual purposes.

3. Recording Telephone Voicemail

This section only applies to the use of the Company’s telephone recordings to leave messages.

(1) Categories of Data Subjects: The users of the recording telephone voicemail.

(2) Categories of Data: Date of recording, start time and message content.

(3) Purpose of Processing: To receive messages.

(4) Data Recipients

4.1 The employee responsible for this job.
4.2 Employees who follow up on the subsequent work involved after the message.
4.3 The information may be transferred to lawyers appointed by the Company, service providers, police authorities or judicial authorities for legal and regulatory, criminal investigation and/or litigation or contractual purposes.

4. Management of Suppliers and Service Providers

(1) Categories of Data Subjects: Suppliers and service providers.

(2) Categories of Data

2.1 Identification Information: Name, address, telephone number, fax number, email address.
2.2 Other Information: Payment method, bank account number.

(3) Purpose of Processing: To contact suppliers and service providers for business cooperation.

(4) Data Recipients

5. Receipt and Delivery of Documents and File Management

(1) Categories of Data Subjects: Senders and recipients, persons involved in the archived documents.

(2) Categories of Data

2.1 Identification Information: Name, address, telephone number, fax number, email address.
2.2 Other Information: Information related to the archived documents.

(3) Purpose of Processing: Delivering and receiving of documents and file management.

(4) Data Recipients

6. Public Relations

(1) Categories of Data Subjects: Persons contacted by the Company for the purpose of public relations work.

(2) Categories of Data

2.1 Identification Information: Name, address, telephone number, fax number, email address, type, number and copy of identification documents, occupation, position, organization name, etc..
2.2 Other Information: Information involved in the public relations work.

(3) Purpose of Processing: Public relations work.

(4) Data Recipients

II. Combination and Transfer of Personal Data

(1) The Company will not combine the information held with the information of other organizations’ databases; if there is a need for data sharing due to special circumstances, the Company will notify and obtain your consent in advance.

(2) In general, the Company will not transfer the personal information held by the Company to places outside Macau, where the personal data protection regulations or privacy policies applicable in the respective jurisdictions may differ from those of the Macau, except in accordance with legal requirements, with your consent or at your request.

III. Restrictions on Disclosure of Personal Information

The Company respects and protects your data privacy and must not disclose any of your personal information to any third party except with your prior consent or as required by relevant laws.

IV. Retention and Protection of Personal Information

(1) Retention
The Company retains your personal information in accordance with laws and regulations and for the period necessary to fulfill the purposes for which the personal information is collected and processed and does not retain or store the personal information for longer than it is necessary to fulfill the relevant collection purposes.

(2) Protection
The Company takes all reasonable measures to enhance the security of personal information.

V. Rights of Data Subjects

According to the provisions of articles 10 to 12 of Law No. 8/2005 – Personal Data Protection Act, you have the right to information, the right of access, the right of correction and the right of objection. If you wish to exercise these rights, please write to the Company or send an email to the Company at [email protected]/ [email protected]. The Company will respond to the request made in accordance with the applicable laws upon receipt of the letter or email, and will charge a fee, if any.

VI. Protection of Personal Information

In order to ensure the security of the personal information and to avoid unauthorized access, disclosure or use for other purposes, the Company has established the “Guidelines for Employees” to regulate the protection of personal information. Your personal information will be stored in a confidential manner and only authorized employees will be allowed to access and handle it.

VII. Amendments to the Data Privacy Policy

The Company has the right to edit, amend or delete the contents of this Data Privacy Policy at any time without prior notice to you. The Company encourages you to review this Data Privacy Policy from time to time to ensure that you are aware of the latest version.

VIII. Terms and Conditions

This Data Privacy Policy does not affect the Company’s rights and obligations under other terms of service, contracts, agreements and rules.

IX. Disclaimer

The contents of this website (including the Company’s mobile apps) are for reference only and the Company shall not be liable for any errors or omissions in the information provided on this website (including the Company’s mobile apps). The Company shall not be liable for any damages arising out of the use or inability to use the information on this website (including the Company’s mobile apps), whether based on contract, infringement, negligence, legal liability or other possibility of damage that has been communicated to the Company or to the supplier, if any. If you send any information to the Company’s website (including the Company’s mobile apps) or email, you should be aware that there is a risk that your information (including personal information) may be seen and used by unauthorized third parties if it is transmitted on the public network. The Company shall not be liable for any loss or damage arising from such risk. To avoid such risks, you should endeavour to submit applications for commendations/complaints/positions and messages related to the handling of personal information through means other than the website or email.

X. Contact Us

The Company is committed to protect your personal information. If you have any concerns or suggestions or comments regarding this Data Privacy Policy, you may contact us by the following means:

Telephone: +853 2827 1122 (Hotline)
+853 2827 1133 (Recruitment) Ms. Lee (103) / Mr. Ng (277)
Fax: +853 2823 4416
Email: [email protected]

Office address at Areia Preta: 9th Floor B, Ind. Oceano (Block 1), No. 76, Rua da Doca dos Holandeses, Macau
Office address at Ilha Verde: No.2, Estrada Marginal da Ilha Verde, Macau