UK CARD VERIFICATION CHECK (Item check 0120) | ID NUMBER 100720

• Supplier hosts the Supplier Data
• Supplier is a Sub-processor of Client Information 
• Client Information includes Personal Data
• The Sub-processor is located in the United Kingdom
• The Sub-processor is based within the EEA
The Supplier Data that GBG uses to provide UK Card Verification is supplied by GBG’s Data Supplier. GBG is obliged under the terms of its agreement with its Data Supplier to ensure that all End Users agree to comply with the following provisions:
1. DEFINITIONS
1.1. In these Additional Terms, the following definitions shall apply, in addition to the definitions set out in the General Terms:
Permitted Purpose” means the authorisation of credit and debit card transactions.
 
2. USE OF THE SUPPLIER DATA 
2.1. The End User may only use the Supplier Data for the Permitted Purpose in accordance with these terms.  
2.2. The End User agrees to use the terminology “UPG” in any communication with its acquiring bank when describing this element of the Service.
3. EXCLUSION OF WARRANTY/IES 
3.1. The End User acknowledges and agrees that the data is provided “as is”, “as available” and with all faults and is provided without any covenants, promises or guarantees as to accuracy, functionality, performance, merchantability, system integration, data accuracy or fitness for any purpose. Any conditions, terms or warranties as to the same implied or imposed by statue or common law are hereby excluded to the fullest extent permitted by law.
4. DATA PROTECTION AND COMPLIANCE WITH RELEVANT LAWS
4.1. The Supplier Data used to provide this element of the Service is hosted by the Data Supplier. In order to perform the Services, the Data Supplier shall act as Sub-processor of Client Information (including any Personal Data supplied) for the sole purpose of delivering this element of the Service. The End User authorises GBG to appoint the Data Supplier as Sub-Processor for the purposes specified in this clause 4.1. 
4.2. The Data Supplier is based in the United Kingdom which is located within the EEA. On this basis, Personal Data is not transferred outside of the EEA in order to provide End Users with access to this element of the Service.
5. TERMINATION 
5.1. Notwithstanding the termination provisions between GBG and the End User in the General Terms, under the terms of GBG’s agreement with its Data Supplier, the supply of the Supplier Data can be terminated on 6 months’ notice.