Privacy notice: Bank of Uganda Internship Programme
Version: Draft for DPO approval
Who we are
The Bank of Uganda runs this internship system and decides how the information in it is used. Questions about your information go to the Data Protection Officer, Bank of Uganda.
What we collect
- Your name, e-mail address, telephone number, gender and date of birth.
- Your institution, programme, course, year of study, CGPA and class.
- Your department choices, preferred intake and placement preferences.
- The documents you upload: CV, transcript, cover letter, recommendation letter and identification.
- If you are placed: your department, supervisor, daily logbook entries, weekly ratings, final report and evaluation.
- Questions you send through the inquiry form.
- Security records: when you sign in, from which network address and device, and what you change.
We do not ask for health, disability, religious or political information. Please do not include it in your documents.
Why we use it
- To assess your application, choose interns and place them in departments.
- To run the internship: supervision, the logbook, the evaluation and your certificate.
- To contact you about your application and internship.
- To keep the system secure and to be able to show who did what (audit trail).
- To produce programme reports for the Bank, mostly as totals.
The minimum CGPA
The programme requires a CGPA of at least 2.9 out of 5.0. If the CGPA you enter is lower, the system does not reject your application on its own: HR checks it first and then either confirms that it is unsuccessful or sends it for review. If you entered your CGPA wrongly, send an inquiry with your application number and transcript.
Who sees it
People and Culture (HR) staff, the head of the department you chose and any supervisor they ask to review your application, the CEO who makes the final decision, and, if you are placed, your supervisor. System administrators can see records when they need to support or secure the system. Every view and change by staff is recorded.
The system runs on the Bank's own servers. Two outside services handle some data: e-mails to you are sent through the Bank's mail service (or, if it is unavailable, a commercial e-mail delivery provider), and uploaded files are checked for viruses by an external scanning service before they are stored.
How long we keep it
- Unsuccessful applications and their documents: 2 years after the decision.
- Internship records (application, logbook, evaluation): 7 years after the internship ends. After that the certificate can no longer be verified online.
- Inquiries: 2 years after the reply.
- Accounts that are no longer used and have no application: 3 years after the last sign-in.
- Security and audit records: up to 2 years.
Your rights
You can ask to see the information we hold about you, have it corrected, or object to how it is used, and you can ask for it to be deleted where the Bank does not need to keep it. Contact the Data Protection Officer, Bank of Uganda. If you are not satisfied with the answer you can complain to the Personal Data Protection Office of Uganda.
Who can apply
You must be 18 or older to apply.