• Supplier is a Sub-processor of Client Information
• Client Information includes Personal Data
• The Sub-processor is located in France
• The Sub-processor is based within the EEA
• The Supplier works with a number of Third Parties to provide the Supplier Data used as part of these Overseas Employment Screening Services. Full details are provided in the Additional Terms below.

The Supplier Data that GBG uses to provide Overseas Employment Screening Services (KYP-ORC-S20) is supplied by GBG’s Data Supplier and its Third Parties. GBG is obliged under the terms of its agreement with its Data Supplier to ensure that all End Users agree to comply with the provisions set out below. These terms apply to all Employment Screening checks. Individual Employment Screening checks are identified by a two-letter country code and ID Number on the End User’s Order Form.

1. DEFINITIONS
1.1. In these Additional Terms, the following definitions shall apply, in addition to the definitions set out in the General Terms:
“Permitted Purpose” means the use of Supplier Data for the purposes of overseas Employment Screening Services
“Third Parties” as defined at clause 3.2 below

2. LIABILITY
2.1. GBG’s Data Supplier, its Group Companies and its Third Parties shall have no liability to the End User in the event that a search cannot be completed or carried out due to circumstances beyond their control.

3. DATA PROTECTION AND COMPLIANCE WITH RELEVANT LAWS
3.1 In order to perform the Services, the Data Supplier shall act as a Sub-processor of Client Information (including any Personal Data supplied) for the sole purpose of delivering this element of the Service. The End User authorises GBG to appoint the Data Supplier and as Sub-Processors for the purposes specified in this clause 3.1.
3.2 The End User acknowledges and accepts that the nature of the Services requires the Sub-processors to transfer Client Information to Third Parties, including without limitation to: (a) any authorities in the relevant country or jurisdiction of the search; and/or (b) the Applicant’s current and past employers or educational institutions (“Third Parties”) that will process Client Information in their capacity as Controller and not Sub-processor. The End User’s request for this Service will be deemed to be the End User’s instruction to GBG for its Sub-processors to disclose Client Information to Third Parties as necessary to perform this Service.
3.3 Where GDPR applies to the End User, the End User acknowledges, that prior to submitting Client Information to GBG for processing as part of a search which involves employment screening in a country or jurisdiction located outside of the EEA, it shall determine, and is solely liable for ensuring that it can rely on a derogation to transfer Client Information to Third Parties based outside of the EEA in accordance with Article 49 GDPR.