• Supplier hosts the Supplier Data
• The Supplier receives and processes End User Data
• End User Data includes personal data
• The Supplier is located in South Africa
• The Supplier is located outside of the EEA and the United Kingdom
• GBG relies on a derogation to transfer End User Data to the Supplier based outside of the EEA and the United Kingdom in accordance with Article 49 (1)(c) UK GDPR

The Supplier Data used to provide the South Africa Population Dataset is supplied by GBG’s Supplier. GBG is obliged under the terms of its agreement with its Supplier to ensure that all End Users agree to comply with the following licensing provisions:

1. DEFINITIONS
1.1. In these Additional Terms, the following definitions shall apply, in addition to the definitions set out in the General Terms and Product Terms:
“End User Data” any data provided to GBG by the End User for processing in accordance with the terms of the Agreement including where relevant any personal data.
“Permitted Purpose” means the purposes, restrictions and/or conditions for the use of the Dataset outlined by the Supplier as set out in clause 2.2 below as applicable in addition to the Customer Use Case set out in the Agreement and at clause 2.1.

2. USE OF THE DATASET
2.1. This Dataset may only be used for the Customer Use Case detailed in this clause 2.1, provided that such Customer Use Case is selected on the End User’s Order Form and the End User complies with any use case restrictions set out in the Agreement or these Additional Terms:
• ID Verification – Fraud
• ID Verification - Regulatory
2.2. In addition to the Customer Use Case restrictions contained within clause 2.1 (including any conditions that apply to that Customer Use Case) the End User warrants that it will not forward, send or disseminate the Supplier Data or information obtained from the Supplier Data or Dataset to any other third party.
2.4 The End User warrants that it will not use this Dataset for any reason outside of the Customer Use Cases and the Permitted Purpose.

3. DATA PROTECTION AND COMPLIANCE WITH RELEVANT LAWS
3.1 The Supplier Data used to provide you with this Dataset is hosted by the Supplier in South Africa. In order to deliver this Dataset, the Supplier shall receive and process End User Data.
3.2 The Supplier is based in South Africa, which is located outside of the EEA and the United Kingdom. The End User acknowledges that GBG relies on a derogation to transfer End User Data to the Supplier for processing in accordance with Article 49 (1)(c) of UK GDPR.

4. TERMINATION
4.1. Notwithstanding the termination provisions between GBG and the End User in the General Terms, under the terms of GBG’s agreement with the Supplier, the supply of this Dataset can be terminated upon GBG providing the End User with 2 months notice.