Main Menu
Main Menu
Blog
Main Menu
Main Menu
Blog

UDB Privacy Statement

Uganda Development Bank provides a range of products and services to entities, financial institutions, and public sector agencies. This Privacy statement the “Notice” governs how Uganda Development Bank Limited hereafter, “the Bank”, collects, uses, and discloses personal data about people with whom the Bank interacts with referred to as “you” in this statement as it conducts its business and deal with other relevant persons. These include employees, officers, directors, beneficial owners, service providers and other business counterparties referred to as “Your Organization” in this statement. “Personal data” means information about a person from which the person can be identified. We advise that you read the Notice in its entirety.

Who is responsible for collection of your personal data and how can you contact them?

Uganda Development Bank limited is responsible for the collection of your personal data. The Bank has registered with the Personal Data Protection Office of Uganda as a data collector and processor. The Bank has designated Data Protection Officer Mr. Dan Guwondo who can be contacted via

 

Email: dguwondo@udbl.co.ug

at Uganda Development Bank Limited

Plot 6 Nakasero Road,1st Floor,
Wing B, Rwenzori Towers,

P.O Box 7210, Kampala, Uganda.

What kind of personal data is collected by Uganda Development Bank?

The Bank collects all personal data that is necessary to pursue its legitimate business and under some factors as stated below:

  • The nature of the business purpose necessitates collection of the Personal Data from other persons or bodies.
  • For compliance with any legal obligation to which the Bank is subject.
  • For the performance of a task carried out in the public interest or in the exercise of official authority vested to the Bank.
  • The nature of the Bank’s business purpose necessitates collection of the Personal Data from other persons or bodies.
  • In instances of conducting compliance activities such as impact assessments, audit, and reporting, assessing, and managing risk, maintenance of accounting and tax records, fraud, and anti-money laundering (AML) prevention and measures relating to sanctions and anti- terrorism laws and regulations and fighting crime. This includes know your customer (KYC) screening (which involves identity checks and verifying address and contact details), politically exposed persons screening (which involves screening client records against internal and external databases to establish connections to” politically exposed persons” (PEPs) as part of client due diligence and onboarding) and sanctions screening (which involves the screening of clients and their representatives against published sanctions lists).
  • For the performance of a contract to which you are a party or to take steps at your request before entering a contract.
  • To protect your vital interests or another person.
  • For the legitimate interests pursued by the Bank or data processor by a third party to whom the data is disclosed, except if the processing is unwarranted in any case having regard to the harm and prejudice your rights and freedoms or legitimate interests.
  • Where the Bank must cooperate with, respond to requests from, and to report transactions and/or other activity to, government, tax or regulatory bodies, financial markets, brokers or other intermediaries or counterparties, courts or other third parties;

How do you provide us with Information?

The Bank collects personal data that you voluntarily provide when you use its Services. The Bank collects your personal data to be able to continue serving you and providing the relevant products or services or to do business with you or your organization.

Does Uganda Development Bank Limited disclose your personal data?

The Bank shall not disclose your personal data to the stakeholders without legitimate purpose to process personally identifiable data. under the below circumstances:

  • The Bank may disclose your data to your organization in connection with the products and services that we provide to it if your organization is our client, or otherwise in connection with our dealings with your organization.
  • The service providers that provide application processing, fraud monitoring, call center and/or other customer services, hosting services and other technology and business process outsourcing services.
  • The Bank may share personal data to legal advisors, government and law enforcement authorities and other persons involved in, or contemplating, legal proceedings.
  • Where the disclosure is required by law or to enable products and services to be provided to you or our clients.
  • The Bank may share your personal data with financial institutions, governmental authorities and their agents, insurers, due diligence service providers and credit assessors, in each case in connection with the products and services that we provide to your organization if your organization is our client, including in connection with financings.
  • For the sake of providing professional services, the Bank may share your personal data with the specific providers (e.g., legal advisors, accountants, auditors, insurers, and tax advisors).
  • The Bank may share your personal data to competent regulatory, prosecuting, tax or governmental authorities, courts, or other tribunals in any jurisdiction.

What are your rights as a data subject?

In your use of the Services, the Bank aims to give you more control of your personal data. We conform to the data protection principles that provide you with the following rights:

Right to access – you can ask us whether we are processing your personal data, including where and for what purpose. You can also access an electronic copy of your personal data.

Right to restrict processing – in certain circumstances, you can ask us to restrict our use of your personal data.

Right to rectification – you can ask us to correct inaccurate personal data we hold about you.

Right to erasure (right to be forgotten) – under certain circumstances, you can ask us to erase your personal data.

It is important to note that the above rights are subject to the applicable laws and regulations.

How long does Uganda Development Bank Limited retain Your Personal Data?

The Bank retains your personal data for 10 years after cessation of the relationship with the Bank. This is also in accordance with the applicable laws and regulations.

Will Uganda Development Bank transfer Your Personal Data?

Your personal data may be stored and processed in any country where Uganda Development Bank has facilities or is engaged with data processors in accordance with the applicable data protection laws and regulations. The Bank shall conduct a data impact assessment before transfer of data.

Your Acceptance

You accept that by you using the Services of the Bank implies that you agree to the Bank using your personal data. You also agree not to hold the Bank liable for use or disclosure of your personal data from the Services and for as envisaged herein.