The Metropolitan Transportation Authority and its subsidiary and affiliated agencies, MTA Metro-North Railroad, MTA Long Island Rail Road, MTA New York City Transit, MTA Bridges and Tunnels, and MTA Construction & Development (collectively the "MTA Agencies") are committed to protecting your privacy when you use the MTA website, at mta.info and mta.org, (the "MTA Website"), MYmta mobile app (“MYmta”), TrainTime app (“TrainTime”), or a version of MTA’s new mobile app in development (“MTA mobile app”), collectively referred to herein as the “MTA Website and Apps”. Consistent with the provisions of the New York State Internet Security and Privacy Act, the New York State Freedom of Information Law, and the New York State Personal Privacy Protection Law, this Policy describes the MTA Agencies’ privacy practices regarding information collected from users of the MTA Website and Apps.
Please carefully read this Policy before submitting any personal information, including your e-mail address, for notification of service updates, purchasing a ticket or fare, initiating an online transaction, providing information with respect to employment opportunities, or for any other reason. Please note that this Policy may change from time to time without special notice to you, so please check back to review the most recent version of this Policy. By using the MTA Website and Apps at any time, you agree to the Policy then in effect.
For purposes of this Policy, "personal information" means any information concerning a natural person, which, because of a name, number, symbol, mark, or other identifier, can be used to identify that natural person. The MTA Agencies collect personal information about you when you provide that information voluntarily by contacting us, initiating an online transaction, submitting information for employment purposes, or for any other reason. The information that is available to us depends on what sections of the MTA Website and Apps you visit and what actions you take during such visit.
Information Collected Automatically When You Visit the MTA Website and Apps
The MTA Agencies monitor MTA Website and Apps user traffic and patterns, and automatically collect certain information about your visit such as the internet domain name from which you access the MTA Website and Apps, the type of browser and operating system you used, the date and time of your visit, the pages you visit, and the referring website address, if any. This information is used to improve the content of the MTA Website and Apps and to help the MTA Agencies understand how users are interacting with the MTA Website and Apps. This information is not collected for commercial marketing purposes, and the MTA Agencies will not sell or otherwise disclose the information collected from the MTA Website and Apps for commercial marketing purposes.
Cookies and Web Beacons
From time to time, MTA also may use web beacons, alone or in conjunction with cookies, to determine what MTA ads your browser is showing, what ads you click and other actions you take on the Internet, to help us better provide relevant products, services, and information to you and to help us effectively measure advertising effectiveness. We also collect information on our website through the use of web beacons or 1x1 pixels. A web beacon is a transparent 1x1 pixel image that has been placed on a web page and sends a signal when a user has visited that page. The third party is required to protect the privacy of the information it receives using Web beacons or cookies, and is not allowed to use the information it receives for any purpose beyond what is necessary to assist us. We do not sell, rent, trade, or otherwise distribute information about you gathered through the web beacons or pixels with any third parties.
Information Collected When You Contact Us Via the MTA Website and Apps, Initiate an Online Transaction, or Submit Information For Employment Purposes
During your visit to the MTA Website and Apps, you may place an order for goods or services, submit feedback or an inquiry, and/or submit information concerning opportunities for employment. The information, including personal information, volunteered by you in initiating such transactions is used by one or more of the MTA Agencies to provide you with goods, services, and information or to undertake the employment review process. The information collected by one or more of the MTA Agencies may be shared among them and disclosed by them for those purposes that may be reasonably ascertained from the nature and terms of the transaction in connection with which the information was submitted. The information is not collected for commercial marketing purposes and the MTA Agencies will not sell or otherwise disclose the information collected from the MTA Website and Apps for commercial marketing purposes.
The MTA Agencies do not collect any personal information about you during your visit to the MTA Website and Apps unless you provide that information voluntarily by submitting feedback or an inquiry; initiating an online transaction such as purchasing a fare or ticket; completing a registration or order form; or for purposes of employment. You may choose not to send us feedback or inquiries, purchase a fare or ticket, register online for a service, complete an online order form, or submit information for employment purposes, or where applicable, do so without providing personal information. While your choice not to participate in these activities may limit your ability to receive specific services or products through the MTA Website and Apps, it will not prevent you from requesting services or products from the MTA Agencies by other means and will normally not have an impact on your ability to take advantage of other features of the MTA Website and Apps, including browsing or downloading most publicly available information.
The MTA Agencies do not knowingly collect personal information from children or create profiles of children through the MTA Website and Apps. Users are cautioned, however, that the collection of personal information submitted in an e-mail or through an online transaction will be treated as though it was submitted by an adult, and may, unless exempted by federal or state law, be subject to public access. The MTA Agencies strongly encourage parents, teachers and other caretakers to be involved in children's Internet activities and to provide guidance whenever children are requested or otherwise have the opportunity to provide personal information online.
The MTA Website and Apps may request that you share your location in order to use specific functionality or purchase particular ticket or fare products. Depending on the function or transaction, your web browser, and/or your device’s operating system, you may be prompted to - and you may consent to - sharing your location for a single transaction, for a defined period of time, only while using the MTA Website and Apps, or always.
The MTA Website and Apps use your location, when shared by you, to identify our transportation services near you, including transit routes, stations, bus stops, trains, and buses. This information can be used to provide you with real-time information about the services that may be near you or that you may be using or wish to use. The MTA Website and Apps also may use your location to determine your eligibility to purchase certain location-based fare products.
When you share your location with the MTA Website and Apps, that location may be stored in transactional logs. The MTA Agencies may use the records in these logs from time to time for maintenance of the MTA Website and Apps, and in response to feedback you may submit about these services. Your location typically is not stored with any direct personal identifier, including personal information you may have provided, or any identifier associated with any user account you have established with us. Your device’s IP address may be stored together with your location in these logs.
Additional Data - MTA mobile app
The MTA mobile app allows you to additionally opt in to consenting to always share your location, movement, and other data in order to use the mobile app’s optional "Smart Alerts" functionality. If you choose to use Smart Alerts, the data associated with your use is collected and stored entirely by Axon Vibe, a third-party company, and not by the MTA. Axon Vibe uses your data only to provide you with targeted travel information. The use of that data is governed by Axon Vibe’s Privacy Statement and Terms and Conditions. Axon Vibe will also from time to time share anonymized, aggregated information with the MTA and organizations we work with to help us better understand travel patterns in the region.
Disclosure of Information Collected Through the MTA Website and Apps
The collection of information through the MTA Website and Apps and the disclosure of that information are subject to the provisions of the New York State Internet Security and Privacy Act. The MTA Agencies will only collect personal information through the MTA Website and Apps or disclose personal information collected through the MTA Website and Apps as described in this Policy, if the user has consented to the collection or disclosure of such personal information, or under the circumstances described below. The voluntary disclosure of personal information to the MTA Agencies by the user, including participation in an online transaction, whether solicited or unsolicited, constitutes consent to the collection and disclosure of the information by the MTA Agencies for the purposes reasonably ascertainable from the nature and terms of the disclosure.
The MTA Agencies may collect or disclose personal information without user consent if the collection or disclosure is: (1) necessary to perform the statutory duties of the MTA Agencies, or necessary for the MTA Agencies to operate a program authorized by law, or authorized by state or federal statute or regulation; (2) made pursuant to a court order or required by law; (3) required for the purpose of validating the identity of the user; or (4) of information to be used solely for statistical purposes that is in a form that cannot be used to identify any particular person.
Further, the disclosure of information, including personal information, collected through the MTA Website and Apps is subject to the provisions of the New York State Freedom of Information Law and the New York State Personal Privacy Protection Law.
The MTA Agencies may in their discretion disclose personal information to federal, state or local law enforcement authorities where appropriate to protect MTA assets or public safety – for example, to enforce the MTA Agencies’ rights against unauthorized access or attempted unauthorized access to the MTA Agencies’ information technology assets; to protect against other inappropriate use of the MTA Website and Apps or any MTA facilities; or to support investigation of crimes committed within the MTA transit system.
Retention of Information Collected Through the MTA Website and Apps
The information collected through the MTA Website and Apps is retained by the MTA Agencies in accordance with the applicable records retention and disposition requirements of New York law. Information concerning these records retention and disposition schedules may be obtained at the New York State Archives and by contacting the MTA as listed below.
Access to and Correction of Personal Information Collected Through the MTA Website
Any user may submit a request to the MTA to determine whether personal information pertaining to that user has been collected and retained through the MTA Website and Apps. Any such request shall be made in writing to the address below and must be accompanied by reasonable proof of identity of the user. Reasonable proof of identity may include verification of a signature, inclusion of an identifier generally known only to the user, or other appropriate identification. Such a request should be sent via U.S. Mail to:
MTA Website and Apps Privacy
Metropolitan Transportation Authority
New York, New York 10004
The MTA shall, within (5) business days of the date of the receipt of a proper request: (i) provide access to the personal information; (ii) deny access in writing, explaining the reasons therefor; or (iii) acknowledge the receipt of the request in writing, stating the approximate date when the request will be granted or denied, which date shall not be more than thirty (30) days from the date of the acknowledgment.
In the event that the MTA Agencies have collected and retained personal information pertaining to a user through the MTA Website and Apps and that information is to be provided to the user pursuant to the user's request, the MTA Agencies shall inform the user of his or her right to request that the personal information be amended or corrected under the procedures set forth in section 95 of the New York Public Officers Law.
Confidentiality and Integrity of Personal Information Collected Through the MTA Website and Apps
The MTA Agencies are strongly committed to protecting personal information collected through the MTA Website and Apps against unauthorized access, use, or disclosure. Consequently, the MTA Agencies limit employee access to personal information collected through the MTA Website and Apps to only those employees who need access to the information in the performance of their official duties. Employees who have access to this information are required to maintain its confidentiality and disclose it only as permitted under this Policy.
In addition, the MTA Agencies have implemented procedures to safeguard the integrity of their information technology assets, including, but not limited to, authenticating, monitoring, auditing, and encrypting. Security procedures have been integrated into the design, implementation, and day-to-day operations of the MTA Website and Apps as part of our continuing commitment to the security of electronic content as well as the electronic transmission of information.
As an additional security measure, many areas of the MTA Website and Apps require the use of a User ID and Password or employ an alternate authentication mechanism to help protect your confidential information. This allows the MTA Agencies to verify who you are, thereby allowing you access to your account information, and preventing unauthorized access. You are responsible for maintaining the confidentiality of your MTA or third-party authentication password and account, and/or your mobile device when used for text message-based authentication, and agree to immediately notify the MTA Agencies of any unauthorized use of your password, account, or mobile device, or any other breach of security.
For security purposes and to maintain the availability of the MTA Website and Apps for all users, the MTA Agencies employ software to monitor traffic to identify unauthorized attempts to upload or change information or otherwise damage the MTA Website and Apps.
One or more of the MTA Agencies have retained independent contractors or third party service providers to perform special contract functions in connection with the MTA Website and Apps, including, but not limited to, providing e-commerce services, computer programming, storing and managing customer information, processing transactions, and providing advice about and support of our products and services. As users navigate the MTA Website and Apps they may not be able to identify which services are provided by such contractors or providers and which services are provided directly by the MTA Agencies. These third party contractors or service providers may obtain and store and/or process your personal information on their own computer systems. The contracts between the MTA Agencies and these entities require them to treat your personal information securely.
The information provided in this Policy should not be construed as giving business, legal, or other advice, or warranting as fail proof, the security of information provided through the MTA Website and Apps.
For questions regarding this Policy, please contact us through the privacy portal or send regular mail to:
MTA Website and Apps Privacy
Metropolitan Transportation Authority
New York, New York 10004