• GBG hosts the Supplier Data
• No personal data is transferred to the Suppliers

The Supplier Data used to provide the National Identity Register Dataset is obtained from a number of GBG’s Suppliers. GBG is obliged under the terms of its agreement with its Suppliers to ensure that all End Users agree to comply with the following licencing provisions:

1. DEFINITIONS
1.1 In these Additional Terms, the following definitions shall apply, in addition to the definitions set out in the General Terms and Product Terms:
“End User Data” means any data provided to GBG by the End User for processing in accordance with the terms of the Agreement including where relevant any personal data.
“Permitted Purpose” means the purposes, restrictions and or conditions for the use of the Dataset outlined by the Suppliers as set out in clause 2.2 in addition to the Customer Use Cases set out in the Agreement and at clause 2.1.

2. USE OF THE DATASET
2.1 This Dataset may only be used for the Customer Use Cases detailed below, provided that such Customer Use Case is selected on the End User's Order Form and the End User complies with any use case restriction set out in the Agreement or these Additional Terms:
• ID Verification – Fraud
• ID Verification – Regulatory
2.2 In addition to the Customer Use Case restrictions contained within clause 2.1 (including any conditions that apply to that Customer Use Case) the End User shall not be permitted to use this Dataset for direct marketing, email marketing, analysis or creating an online directory.
2.3 The End User warrants that it will not use this Dataset for any reason outside the Customer Use Case and Permitted Purpose.

3. DATA PROTECTION AND COMPLIANCE WITH RELEVANT LAWS
3.1 GBG provides this Dataset in its capacity as an independent controller.
3.2 GBG does not transfer End User Data to the Suppliers to provide this Dataset.