Who does this Recruitment Privacy Notice apply to?

This Recruitment Privacy Notice applies to any person, other than an independent contractor, who applies for employment with MTN MoMo whether for a permanent, temporary or fixed-term contract (hereinafter referred to as “Job Applicants” / “you” / “your”). This Recruitment Privacy Notice applies to Job Applicants whether they apply for a position directly with MTN MoMo or indirectly through, for example, a recruitment agent.

What are the important terms you need to understand when reading this Recruitment Privacy Notice?

Applicable Data Protection Law(s)	Data privacy and data protection legislation and regulations applicable to the Processing of Personal Data carried out by the MTN MoMo, or for or on behalf of the MTN MoMo.
Data Subject	An identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. It shall also include any additional persons afforded data privacy rights and protection of Personal Data in terms of Applicable Data Protection Law(s).
Local Regulatory Requirements	Legal, statutory, regulatory, license conditions rules, guidelines, Ministerial/National Security orders or directives, and Directives relating to public safety (where applicable) and data sovereignty-related requirements with which MTN MoMo is required to comply by applicable authorities in the jurisdictions in which MTN MoMo operates. “Data sovereignty” relates to the laws and governance structures that Personal Data is subject to, due to the geographical location of where it is Processed.
Personal Data	Any information relating to a Data Subject. Examples of “Personal Data” includes, but is not limited to, the following: a name; any identifying number, symbol; contact information (e.g., e-mail address, postal address, telephone number); location data or physical address; online identifier or other assignment to the person; the biometric information of the Data Subject; the personal opinions, views or preferences of the Data Subject; correspondence sent by the Data Subject that is implicitly or explicitly of a private or confidential nature or further correspondence that would reveal the contents of the original correspondence; the views or opinions of another person about the Data Subject; the name of the Data Subject if it appears with other Personal Data relating to the Data Subject or if the disclosure of the name itself would reveal information about the Data Subject; and Sensitive Personal Data.
Personal Data Breach	An event or occurrence (including but not limited to a breach of security) leading to the accidental or unlawful destruction, loss or damage, alteration, disclosure of, or access to, Personal Data transmitted, stored or otherwise Processed.
Processing	Any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, including collection, receipt, recording, organisation, structuring, collation, storage, adaptation or alteration, updating, retrieval, consultation, use, dissemination, disclosure by means of transmission, or otherwise making available, alignment or combination, merging, restriction, erasure, destruction, and/or degradation.
Sensitive Personal Data	A sub-set of Personal Data which is considered more sensitive than other categories of Personal Data. Sensitive Personal Data includes but is not limited to Personal Data revealing a Data Subject’s racial or ethnic origin, political opinions or persuasions, religious or philosophical beliefs, trade union membership, criminal behavior relating to the alleged commission of a crime or proceedings relating to the alleged commission of a crime, genetic data, biometric data, data concerning health, and/or data concerning a Data Subject’s sex life or sexual orientation.

What Personal Data does MTN MoMo collect and use?

We Process Personal Data which is required in terms of our internal recruitment processes. This information typically includes, but is not limited to, your name, contact details, current job title and position, professional employment history, language skills, experience, qualifications, education as well as your current and expected earnings, results from personality or cognitive ability tests (or any psychometric tests), opinions of others about you (e.g., through reference letters).

We also Process electronic identification data to the extent that you apply through our web-based application portal (e.g., login information, online identifiers/cookies) or when you use an electronic signature to complete any necessary forms.

What Sensitive Personal Data does MTN MoMo Process?

In some cases, the Personal Data of Job Applicants that we collect will also include Sensitive Personal Data, such as:

diversity related information (including data about citizenship and status of citizenship applications, applications for working rights, racial and ethnic origin) that may be required by Applicable Data Protection Law(s) or Local Regulatory Requirements;
health data where this is relevant to the job being applied for (such as vaccination status and disability records) to address your specific needs and ensure that you will receive adequate employee benefits;
data about alleged or proven criminal offences for the safety and security of MTN MoMo and other employees; and
biometric information for background checks before any offers of employment can be made.

Where does MTN MoMo collect my Personal Data from?

In most circumstances we collect Personal Data directly from you, for instance, when you complete your information on our website career portal, send us your curriculum vitae (CV) and where you provide information about yourself during interviews.

In some cases, MTN MoMo will also collect Personal Data indirectly from third parties, such as:

recruitment agencies;
previous employers;
other entities within the MTN group of companies if you transferred to us from that MTN entity;
background check providers such as former employer, referees; and/or pre-employment check providers such as medical institutions, Security institution for criminal background checks, citizenship;
publicly available sources such as LinkedIn

For what purposes does MTN MoMo use my Personal Data?

MTN MoMo is committed to only Process Personal Data for specified, explicit and legitimate purposes related to its business activities.

We Process Personal Data of Job Applicants to assess your suitability for a role within MTN MoMo in accordance with our recruitment and selection policies and procedures and, if the application is successful, for the execution of the employment relationship.

If you are unsuccessful in the role you applied for, we continue to store your Personal Data for a limited period to maintain a record of the recruitment process should the fairness of the process be contested by an unsuccessful Job Applicant.

We may also request to retain your Personal Data for consideration of any other suitable positions that may become vacant in the future. We may proactively contact you in respect of any suitable vacancies that arise.

MTN MoMo will not further Process Personal Data for any purpose that is incompatible with the original purpose that the Personal Data was collected for unless:

such further Processing is authorised in terms of Applicable Data Protection Law(s);
we have obtained your consent to the further Processing;
further Processing is necessary to comply with an obligation imposed by Local Regulatory Requirements or for conducting proceedings in a court or tribunal; or

it is for scientific or historical research purposes or statistical purposes.

Is MTN MoMo allowed to Process my Personal Data?

We are allowed to Process Personal Data, so long as we have a legal basis to do so. When we Process your Personal Data, we will rely on one of the following legal bases as appropriate having regard to the purpose of Processing:

Legal Basis	Examples
Processing of Personal Data is necessary in order to carry out actions necessary for the conclusion of a contract (i.e., employment contract) to which you are or may be a party.	Verifying the Personal Data provided by you during the job application process before entering into an employment contract. Agreeing on the terms and conditions of your employment prior to entering into an employment contract with you.
Processing of Personal Data is necessary in order to comply with legal obligations, such as Local Regulatory Requirements, to which MTN MoMo is subject to.	To comply with Local Regulatory Requirements (i.e., labour laws) applicable to recruitment of Job Applicants. To comply with Local Regulatory Requirements which seek to achieve a diverse workforce, which promote recruitment of local nationals, or which promote employment opportunities for certain categories of persons. To motivate the recruitment of foreign nationals as may be required by Local Regulatory Requirements.
Processing is necessary for pursuing the legitimate business interests of MTN MoMo or of a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of Personal Data.	Identification, prevention and investigation of any fraudulent or criminal activities and to safeguard our IT systems, assets, and places of work. To benefit from cost effective services (e.g., we may opt to use certain IT platforms offered by suppliers) or share basic Personal Data with another MTN group entity if you transfer to that entity, for use by that entity in conducting legally required background checks without collecting the information from you again). To support in our decision making we may obtain information which is publicly available on professional social networks such as LinkedIn, to maintain a record of the recruitment process should the fairness of the process be contested by an unsuccessful Job Applicant.
You have given consent to the Processing of your Personal Data for one or more specific purposes. You may withdraw such consent at any time.	We will only Process your Personal Data in this way if you agree to us doing so. For example, we request your consent to perform reference checks or verifying your qualifications. We will ensure the purpose for Processing your Personal Data is clearly communicated at the time that we request your consent so that you can make an informed decision. We will also provide you with any other relevant information you require to make an informed decision.

We will not Process your Sensitive Personal Data unless there is a lawful basis to do so as set out above and one of the following exceptions apply to the Processing:

You have given explicit consent to the Processing of your Sensitive Personal Data for one or more specified purposes (e.g., when performing criminal background checks). You may withdraw such consent at any time.
Processing is necessary for the purposes of carrying out the obligations and exercising your or MTN MoMo’s specific rights in the field of employment, social security and social protection law.
Processing is necessary to protect your vital interests or of another natural person where you are physically or legally incapable of giving consent.
Processing relates to Sensitive Personal Data which was intentionally made public by you.
Processing is necessary for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity.

Processing of Personal Data related to criminal behavior is obtained and used in accordance with Local Regulatory Requirements.

Is it mandatory to provide MTN MoMo the Personal Data asked for?

It is voluntary to apply for a job with MTN MoMo. However, if you choose to apply for a job with MTN MoMo, the provision of the Personal Data requested is a requirement of our recruitment process to ensure we are able to assess each candidate fairly. Failing to provide the Personal Data requested may result in us being unable to fully assess your suitability for the position applied for and being unable to offer you the position within MTN MoMo. You are responsible for determining the nature and extent to which you share your Personal Data with MTN MoMo and acknowledge that you may share Personal Data that MTN MoMo has not specifically requested during the recruitment process ( e.g., where you have disclosed your hobbies in your CV).

Does MTN MoMo Process my Personal Data automatically?

MTN MoMo does not perform any automated decision making (including profiling) which results in legal consequences for you and/or which affects you in a similarly significant manner. Should this change in the future, we will notify you and update this Recruitment Privacy Notice accordingly.

How long does MTN MoMo keep my Personal Data for?

We make reasonable efforts to retain Personal Data only for so long as:

the Personal Data is necessary to comply with our obligations to you in terms of our job application process, policies and procedures;
is necessary to comply with legal, regulatory, or internal policy requirements that may apply; and/or

is necessary to evidence the fairness of the recruitment process should it be contested by an unsuccessful Job Applicant within a reasonable period of time.

The retention of Job Applicants’ records will be in accordance with our retention policies and retention schedule which is available on the 212 Space. These policies or relevant extracts may be requested by Job Applicants by contacting the Data Protection Office at dataprotectionofficeUG@mtn.com

The storage and destruction of Personal Data will be in accordance with legal, regulatory, or internal policy requirements that may apply.

Does MTN MoMo transfer my Personal Data to third parties?

Yes, we may share Personal Data with third parties, as necessary for our legitimate business needs, to carry out your requests, and/or as required or permitted by Local Regulatory Requirements and Applicable Data Protection Law(s). This may include, but not limited to:

Our service providers: we transfer your Personal Data to our third-party service providers, such as our (IT) systems providers, hosting providers, payroll providers, consultants (such as legal advisers) and other services providers. These providers Process your Personal Data on behalf of MTN MoMo in terms of a binding agreement with appropriate security safeguards. MTN MoMo will only transfer Personal Data to them when they meet our strict standards on the Processing of data and security. We only share Personal Data that allows our service providers to provide their services and they are not allowed to Process your Personal Data for any other purpose.
Courts, tribunals, law enforcement, or regulatory bodies: MTN MoMo will disclose Personal Data in order to respond to requests of courts, tribunals, government, or law enforcement agencies or where it is necessary or prudent to comply with Local Regulatory Requirements, court or tribunal orders or rules, or government regulations. We will also disclose Personal Data necessary to defend the fairness of the recruitment process.

Does MTN MoMo transfer my Personal Data internationally?

Yes, MTN MoMo may transfer Personal Data outside of Uganda but only if such transfers are permitted in terms of Local Regulatory Requirements and Applicable Data Protection Law(s).

MTN MoMo may transfer your Personal Data to other entities within the MTN group of companies. All MTN entities are bound by the MTN Binding Corporate Rules which ensures that the MTN entity receiving your Personal Data protects your Personal Data in accordance with those binding corporate rules.

MTN MoMo may also transfer certain Personal Data outside of Uganda to third parties working with us or on our behalf for the purposes described in this Recruitment Privacy Notice. When transferring Personal Data internationally to third parties we will ensure your Personal Data will continue to be protected for example, by entering to agreement incorporating clauses which protect your Personal Data or by ensuring there are adequate data privacy and protection laws, which requires the relevant third party to adhere to the data handling and data protection requirements, acceptable to MTN MoMo.

How does MTN MoMo secure my Personal Data?

MTN MoMo secures the integrity and confidentiality of the Personal Data in its possession or under its control by implementing appropriate, reasonable technical, physical, and organisational measures to prevent:

accidental loss of, damage to, or unauthorised destruction of your Personal Data;
unlawful or unauthorised access to / dissemination of your Personal Data; and
unlawful or unauthorised Processing of your Personal Data.

As part of its processes, MTN MoMo takes reasonable measures to regularly identify and assess all reasonably foreseeable internal and external risks to Personal Data in its possession or under its control and implements reasonable and appropriate technical, physical and organisational security measures to protect against the identified risks.

How does MTN MoMo handle Personal Data Breaches?

While MTN MoMo implements reasonable measures to prevent or reduce the likelihood and impact of Personal Data Breaches, this risk cannot be completely eliminated. If MTN MoMo becomes aware of or reasonably suspects a Personal Data Breach has occurred or that the integrity or confidentiality of Personal Data has been compromised, MTN MoMo adheres to its Personal Data Breach Incident Management and Notification Guidelines governing the handling and reporting of Personal Data Breaches. This guideline may be requested by Job Applicants by contacting Human Resources at AskHR.UG@mtn.com

What are my rights?

If MTN MoMo Processes Personal Data about you, you have the following rights:

- Access and correction: you have the right to access the Personal Data retained by MTN MoMo. This is sometimes called a ‘Data Subject Access Request’. If we are obliged to provide Personal Data to you, we will provide it to you free of charge. Before providing Personal Data to you, we may ask for proof of identity and sufficient information about your interactions with us in order to locate your Personal Data. If the Personal Data we hold about you is incorrect, you are entitled to ask us to correct any inaccuracies in the Personal Data.
- Object to Processing: you have the right to object to us Processing your Personal Data, on grounds relating to your particular situation, under certain circumstances. For example, if we are Processing your Personal Data on the basis that is necessary for purposes of our or a third party’s legitimate interest. You may also object if you believe there is no legal basis for us to Process your Personal Data anymore.

Withhold consent: you have the right to withhold your consent without any fear of negative repercussions in circumstances that we seek your consent to Process your Personal Data. If you experience any intimidation or negative repercussions for withholding your consent, you should report this to your local whistleblower hotline at anonymous@tip-offs.com and 0800 212 800.

Withdraw consent: you also have the right to withdraw your consent at any time and we will cease Processing your Personal Data unless there is an alternative legal basis to continue Processing your Personal Data. We will advise you if we intend to continue Processing your Personal Data in these circumstances.

Disposal / Restrictions: in addition, you may have rights to have your information deleted / destroyed if we are keeping it too long or have no legal basis to Process it. You may also request that the Processing of your Personal Data is restricted in certain circumstances.

Lodge complaints: you have the right to lodge a complaint regarding the way your Personal Data is being Processed with MTN MoMo or if you believe there has been a breach of MTN MoMo privacy policies and/or Applicable Data Protection Law(s).

You can make a request or exercise these rights by contacting MTN MoMo at dataprotectionofficeUG@mtn.com.and we will make all reasonable and practical efforts to comply with your request, so long as it is consistent with Local Regulatory Requirements, Applicable Data Protection Law(s) and MTN MoMo’s internal policies.

Finally, you always have the right to lodge a complaint with the supervisory authority in charge of protecting Personal Data, the Personal Data Protection Office, Uganda, whose contact details are:

[Postal Address:] Plot 7A, Rotary Avenue, Rotary Avenue

[Email Address:] info@pdpo.go.ug

[Telephone number:] 0417801008/9

[Website:] www.pdpo.go.ug

Who does this Recruitment Privacy Notice apply to?

This Recruitment Privacy Notice applies to any person, other than an independent contractor, who applies for employment with MTN MoMo whether for a permanent, temporary or fixed-term contract (hereinafter referred to as “Job Applicants” / “you” / “your”). This Recruitment Privacy Notice applies to Job Applicants whether they apply for a position directly with MTN MoMo or indirectly through, for example, a recruitment agent.

What are the important terms you need to understand when reading this Recruitment Privacy Notice?

Applicable Data Protection Law(s)	Data privacy and data protection legislation and regulations applicable to the Processing of Personal Data carried out by the MTN MoMo, or for or on behalf of the MTN MoMo.
Data Subject	An identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. It shall also include any additional persons afforded data privacy rights and protection of Personal Data in terms of Applicable Data Protection Law(s).
Local Regulatory Requirements	Legal, statutory, regulatory, license conditions rules, guidelines, Ministerial/National Security orders or directives, and Directives relating to public safety (where applicable) and data sovereignty-related requirements with which MTN MoMo is required to comply by applicable authorities in the jurisdictions in which MTN MoMo operates. “Data sovereignty” relates to the laws and governance structures that Personal Data is subject to, due to the geographical location of where it is Processed.
Personal Data	Any information relating to a Data Subject. Examples of “Personal Data” includes, but is not limited to, the following: a name; any identifying number, symbol; contact information (e.g., e-mail address, postal address, telephone number); location data or physical address; online identifier or other assignment to the person; the biometric information of the Data Subject; the personal opinions, views or preferences of the Data Subject; correspondence sent by the Data Subject that is implicitly or explicitly of a private or confidential nature or further correspondence that would reveal the contents of the original correspondence; the views or opinions of another person about the Data Subject; the name of the Data Subject if it appears with other Personal Data relating to the Data Subject or if the disclosure of the name itself would reveal information about the Data Subject; and Sensitive Personal Data.
Personal Data Breach	An event or occurrence (including but not limited to a breach of security) leading to the accidental or unlawful destruction, loss or damage, alteration, disclosure of, or access to, Personal Data transmitted, stored or otherwise Processed.
Processing	Any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, including collection, receipt, recording, organisation, structuring, collation, storage, adaptation or alteration, updating, retrieval, consultation, use, dissemination, disclosure by means of transmission, or otherwise making available, alignment or combination, merging, restriction, erasure, destruction, and/or degradation.
Sensitive Personal Data	A sub-set of Personal Data which is considered more sensitive than other categories of Personal Data. Sensitive Personal Data includes but is not limited to Personal Data revealing a Data Subject’s racial or ethnic origin, political opinions or persuasions, religious or philosophical beliefs, trade union membership, criminal behavior relating to the alleged commission of a crime or proceedings relating to the alleged commission of a crime, genetic data, biometric data, data concerning health, and/or data concerning a Data Subject’s sex life or sexual orientation.

What Personal Data does MTN MoMo collect and use?

We Process Personal Data which is required in terms of our internal recruitment processes. This information typically includes, but is not limited to, your name, contact details, current job title and position, professional employment history, language skills, experience, qualifications, education as well as your current and expected earnings, results from personality or cognitive ability tests (or any psychometric tests), opinions of others about you (e.g., through reference letters).

We also Process electronic identification data to the extent that you apply through our web-based application portal (e.g., login information, online identifiers/cookies) or when you use an electronic signature to complete any necessary forms.

What Sensitive Personal Data does MTN MoMo Process?

In some cases, the Personal Data of Job Applicants that we collect will also include Sensitive Personal Data, such as:

diversity related information (including data about citizenship and status of citizenship applications, applications for working rights, racial and ethnic origin) that may be required by Applicable Data Protection Law(s) or Local Regulatory Requirements;
health data where this is relevant to the job being applied for (such as vaccination status and disability records) to address your specific needs and ensure that you will receive adequate employee benefits;
data about alleged or proven criminal offences for the safety and security of MTN MoMo and other employees; and
biometric information for background checks before any offers of employment can be made.

Where does MTN MoMo collect my Personal Data from?

In most circumstances we collect Personal Data directly from you, for instance, when you complete your information on our website career portal, send us your curriculum vitae (CV) and where you provide information about yourself during interviews.

In some cases, MTN MoMo will also collect Personal Data indirectly from third parties, such as:

recruitment agencies;
previous employers;
other entities within the MTN group of companies if you transferred to us from that MTN entity;
background check providers such as former employer, referees; and/or pre-employment check providers such as medical institutions, Security institution for criminal background checks, citizenship;
publicly available sources such as LinkedIn

For what purposes does MTN MoMo use my Personal Data?

MTN MoMo is committed to only Process Personal Data for specified, explicit and legitimate purposes related to its business activities.

We Process Personal Data of Job Applicants to assess your suitability for a role within MTN MoMo in accordance with our recruitment and selection policies and procedures and, if the application is successful, for the execution of the employment relationship.

If you are unsuccessful in the role you applied for, we continue to store your Personal Data for a limited period to maintain a record of the recruitment process should the fairness of the process be contested by an unsuccessful Job Applicant.

We may also request to retain your Personal Data for consideration of any other suitable positions that may become vacant in the future. We may proactively contact you in respect of any suitable vacancies that arise.

MTN MoMo will not further Process Personal Data for any purpose that is incompatible with the original purpose that the Personal Data was collected for unless:

such further Processing is authorised in terms of Applicable Data Protection Law(s);
we have obtained your consent to the further Processing;
further Processing is necessary to comply with an obligation imposed by Local Regulatory Requirements or for conducting proceedings in a court or tribunal; or

it is for scientific or historical research purposes or statistical purposes.

Is MTN MoMo allowed to Process my Personal Data?

We are allowed to Process Personal Data, so long as we have a legal basis to do so. When we Process your Personal Data, we will rely on one of the following legal bases as appropriate having regard to the purpose of Processing:

Legal Basis	Examples
Processing of Personal Data is necessary in order to carry out actions necessary for the conclusion of a contract (i.e., employment contract) to which you are or may be a party.	Verifying the Personal Data provided by you during the job application process before entering into an employment contract. Agreeing on the terms and conditions of your employment prior to entering into an employment contract with you.
Processing of Personal Data is necessary in order to comply with legal obligations, such as Local Regulatory Requirements, to which MTN MoMo is subject to.	To comply with Local Regulatory Requirements (i.e., labour laws) applicable to recruitment of Job Applicants. To comply with Local Regulatory Requirements which seek to achieve a diverse workforce, which promote recruitment of local nationals, or which promote employment opportunities for certain categories of persons. To motivate the recruitment of foreign nationals as may be required by Local Regulatory Requirements.
Processing is necessary for pursuing the legitimate business interests of MTN MoMo or of a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of Personal Data.	Identification, prevention and investigation of any fraudulent or criminal activities and to safeguard our IT systems, assets, and places of work. To benefit from cost effective services (e.g., we may opt to use certain IT platforms offered by suppliers) or share basic Personal Data with another MTN group entity if you transfer to that entity, for use by that entity in conducting legally required background checks without collecting the information from you again). To support in our decision making we may obtain information which is publicly available on professional social networks such as LinkedIn, to maintain a record of the recruitment process should the fairness of the process be contested by an unsuccessful Job Applicant.
You have given consent to the Processing of your Personal Data for one or more specific purposes. You may withdraw such consent at any time.	We will only Process your Personal Data in this way if you agree to us doing so. For example, we request your consent to perform reference checks or verifying your qualifications. We will ensure the purpose for Processing your Personal Data is clearly communicated at the time that we request your consent so that you can make an informed decision. We will also provide you with any other relevant information you require to make an informed decision.

We will not Process your Sensitive Personal Data unless there is a lawful basis to do so as set out above and one of the following exceptions apply to the Processing:

You have given explicit consent to the Processing of your Sensitive Personal Data for one or more specified purposes (e.g., when performing criminal background checks). You may withdraw such consent at any time.
Processing is necessary for the purposes of carrying out the obligations and exercising your or MTN MoMo’s specific rights in the field of employment, social security and social protection law.
Processing is necessary to protect your vital interests or of another natural person where you are physically or legally incapable of giving consent.
Processing relates to Sensitive Personal Data which was intentionally made public by you.
Processing is necessary for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity.

Processing of Personal Data related to criminal behavior is obtained and used in accordance with Local Regulatory Requirements.

Is it mandatory to provide MTN MoMo the Personal Data asked for?

It is voluntary to apply for a job with MTN MoMo. However, if you choose to apply for a job with MTN MoMo, the provision of the Personal Data requested is a requirement of our recruitment process to ensure we are able to assess each candidate fairly. Failing to provide the Personal Data requested may result in us being unable to fully assess your suitability for the position applied for and being unable to offer you the position within MTN MoMo. You are responsible for determining the nature and extent to which you share your Personal Data with MTN MoMo and acknowledge that you may share Personal Data that MTN MoMo has not specifically requested during the recruitment process ( e.g., where you have disclosed your hobbies in your CV).

Does MTN MoMo Process my Personal Data automatically?

MTN MoMo does not perform any automated decision making (including profiling) which results in legal consequences for you and/or which affects you in a similarly significant manner. Should this change in the future, we will notify you and update this Recruitment Privacy Notice accordingly.

How long does MTN MoMo keep my Personal Data for?

We make reasonable efforts to retain Personal Data only for so long as:

the Personal Data is necessary to comply with our obligations to you in terms of our job application process, policies and procedures;
is necessary to comply with legal, regulatory, or internal policy requirements that may apply; and/or

is necessary to evidence the fairness of the recruitment process should it be contested by an unsuccessful Job Applicant within a reasonable period of time.

The retention of Job Applicants’ records will be in accordance with our retention policies and retention schedule which is available on the 212 Space. These policies or relevant extracts may be requested by Job Applicants by contacting the Data Protection Office at dataprotectionofficeUG@mtn.com

The storage and destruction of Personal Data will be in accordance with legal, regulatory, or internal policy requirements that may apply.

Does MTN MoMo transfer my Personal Data to third parties?

Yes, we may share Personal Data with third parties, as necessary for our legitimate business needs, to carry out your requests, and/or as required or permitted by Local Regulatory Requirements and Applicable Data Protection Law(s). This may include, but not limited to:

Our service providers: we transfer your Personal Data to our third-party service providers, such as our (IT) systems providers, hosting providers, payroll providers, consultants (such as legal advisers) and other services providers. These providers Process your Personal Data on behalf of MTN MoMo in terms of a binding agreement with appropriate security safeguards. MTN MoMo will only transfer Personal Data to them when they meet our strict standards on the Processing of data and security. We only share Personal Data that allows our service providers to provide their services and they are not allowed to Process your Personal Data for any other purpose.
Courts, tribunals, law enforcement, or regulatory bodies: MTN MoMo will disclose Personal Data in order to respond to requests of courts, tribunals, government, or law enforcement agencies or where it is necessary or prudent to comply with Local Regulatory Requirements, court or tribunal orders or rules, or government regulations. We will also disclose Personal Data necessary to defend the fairness of the recruitment process.

Does MTN MoMo transfer my Personal Data internationally?

Yes, MTN MoMo may transfer Personal Data outside of Uganda but only if such transfers are permitted in terms of Local Regulatory Requirements and Applicable Data Protection Law(s).

MTN MoMo may transfer your Personal Data to other entities within the MTN group of companies. All MTN entities are bound by the MTN Binding Corporate Rules which ensures that the MTN entity receiving your Personal Data protects your Personal Data in accordance with those binding corporate rules.

MTN MoMo may also transfer certain Personal Data outside of Uganda to third parties working with us or on our behalf for the purposes described in this Recruitment Privacy Notice. When transferring Personal Data internationally to third parties we will ensure your Personal Data will continue to be protected for example, by entering to agreement incorporating clauses which protect your Personal Data or by ensuring there are adequate data privacy and protection laws, which requires the relevant third party to adhere to the data handling and data protection requirements, acceptable to MTN MoMo.

How does MTN MoMo secure my Personal Data?

MTN MoMo secures the integrity and confidentiality of the Personal Data in its possession or under its control by implementing appropriate, reasonable technical, physical, and organisational measures to prevent:

accidental loss of, damage to, or unauthorised destruction of your Personal Data;
unlawful or unauthorised access to / dissemination of your Personal Data; and
unlawful or unauthorised Processing of your Personal Data.

As part of its processes, MTN MoMo takes reasonable measures to regularly identify and assess all reasonably foreseeable internal and external risks to Personal Data in its possession or under its control and implements reasonable and appropriate technical, physical and organisational security measures to protect against the identified risks.

How does MTN MoMo handle Personal Data Breaches?

While MTN MoMo implements reasonable measures to prevent or reduce the likelihood and impact of Personal Data Breaches, this risk cannot be completely eliminated. If MTN MoMo becomes aware of or reasonably suspects a Personal Data Breach has occurred or that the integrity or confidentiality of Personal Data has been compromised, MTN MoMo adheres to its Personal Data Breach Incident Management and Notification Guidelines governing the handling and reporting of Personal Data Breaches. This guideline may be requested by Job Applicants by contacting Human Resources at AskHR.UG@mtn.com

What are my rights?

If MTN MoMo Processes Personal Data about you, you have the following rights:

- Access and correction: you have the right to access the Personal Data retained by MTN MoMo. This is sometimes called a ‘Data Subject Access Request’. If we are obliged to provide Personal Data to you, we will provide it to you free of charge. Before providing Personal Data to you, we may ask for proof of identity and sufficient information about your interactions with us in order to locate your Personal Data. If the Personal Data we hold about you is incorrect, you are entitled to ask us to correct any inaccuracies in the Personal Data.
- Object to Processing: you have the right to object to us Processing your Personal Data, on grounds relating to your particular situation, under certain circumstances. For example, if we are Processing your Personal Data on the basis that is necessary for purposes of our or a third party’s legitimate interest. You may also object if you believe there is no legal basis for us to Process your Personal Data anymore.

Withhold consent: you have the right to withhold your consent without any fear of negative repercussions in circumstances that we seek your consent to Process your Personal Data. If you experience any intimidation or negative repercussions for withholding your consent, you should report this to your local whistleblower hotline at anonymous@tip-offs.com and 0800 212 800.

Withdraw consent: you also have the right to withdraw your consent at any time and we will cease Processing your Personal Data unless there is an alternative legal basis to continue Processing your Personal Data. We will advise you if we intend to continue Processing your Personal Data in these circumstances.

Disposal / Restrictions: in addition, you may have rights to have your information deleted / destroyed if we are keeping it too long or have no legal basis to Process it. You may also request that the Processing of your Personal Data is restricted in certain circumstances.

Lodge complaints: you have the right to lodge a complaint regarding the way your Personal Data is being Processed with MTN MoMo or if you believe there has been a breach of MTN MoMo privacy policies and/or Applicable Data Protection Law(s).

You can make a request or exercise these rights by contacting MTN MoMo at dataprotectionofficeUG@mtn.com.and we will make all reasonable and practical efforts to comply with your request, so long as it is consistent with Local Regulatory Requirements, Applicable Data Protection Law(s) and MTN MoMo’s internal policies.

Finally, you always have the right to lodge a complaint with the supervisory authority in charge of protecting Personal Data, the Personal Data Protection Office, Uganda, whose contact details are:

[Postal Address:] Plot 7A, Rotary Avenue, Rotary Avenue

[Email Address:] info@pdpo.go.ug

[Telephone number:] 0417801008/9

[Website:] www.pdpo.go.ug

MoMo

MTN Recruitment Privacy Notice

Toll Free

Phone contact

General Inquiries

Chat on Whatsapp

Physical address

Postal address