• Supplier hosts the Supplier Data
• Supplier is a Sub-processor of Client Information
• Client Information includes Personal Data
• The Sub-processor is located in Belgium
• The Sub-processor is based within the EEA

The Supplier Data that GBG uses to provide Belgium Population Data is supplied by GBG’s Data Supplier. GBG is obliged under the terms of its agreement with its Data Supplier to ensure that all End Users agree to comply with the following provisions:

1. DEFINITIONS
1.1. In these Additional Terms, the following definitions shall apply, in addition to the definitions set out in the General Terms:
“Permitted Purpose” means use of the Supplier Data solely for the purpose of identity verification.

2. USE OF THE SUPPLIER DATA
2.1. The End User may only use the Supplier Data for the Permitted Purpose in accordance with these terms and may not use the Supplier Data within the human resources/know-your employee sector.
2.2. The End User must not under any circumstances use the Supplier Data for the purpose of any other direct or indirect, free of charge or for a fee, service to third parties (such as any form of sale, transfer or license to third parties) or any other form of use by third parties. In its communication with consumers, the End User is not allowed to make any direct or indirect reference to the Supplier Data or to the checks performed by the Data Supplier.
2.3. GBG will inform the Data Supplier of the End Users that will make use of the Supplier Data and the Data Supplier has the right to refuse the use of its information by a specific End User, provided that such discretion to refuse use shall be exercised on reasonable grounds.
2.4. The End User acknowledges that the refusal to contract with a data subject can never be based solely on the information delivered by the Data Supplier.
2.5. Each validation may only be used once. The End User may not store the result of a validation for any reason other than keeping an audit trail of past decisions. For every new check of a data subject (whether by the same or another end user), a new validation will have to take place and be accounted for.
2.6. Under no circumstance can the Supplier Data be used for activities that may potentially compete with the activities of the Data Supplier or to compile directories or for the provision of information services in whatever form.

3. DATA PROTECTION AND COMPLIANCE WITH RELEVANT LAWS
3.1. The Supplier Data used to provide this element of the Service is hosted by the Data Supplier. In order to perform the Services, the Data Supplier shall act as Sub-processor of Client Information (including any Personal Data supplied) for the sole purpose of delivering this element of the Service. The End User authorises GBG to appoint the Data Supplier as Sub-Processor for the purposes specified in this clause 3.
3.2. The Data Supplier is based in Belgium which is located within the EEA. On this basis, Personal Data is not transferred outside of the EEA in order to provide End Users with access to this element of the Service.