• Schufa hosts the Supplier Data
• Schufa receives and processes Schufa End User Data in its capacity as controller 
• GBG receives and processes Schufa End User Data and Supplier Data in its capacity as a processor
• Insic receives and processes Schufa End User Data and Supplier Data in its capacity as a GBG’s processor
• Schufa End User Data includes personal data
• Schufa and Insic GmbH are based in Germany
• Schufa and Insic GmbH are based within the EEA

The Supplier Data used to provide the 0410 Birthplace Germany Dataset is supplied by GBG’s Supplier, Schufa. GBG is obliged under the terms of its agreement with Schufa to ensure that all End Users agree to comply with the following licencing provisions:

1. DEFINITIONS
1.1. In these Additional Terms, the following definitions shall apply, in addition to the definitions set out in the General Terms and Product Terms:
“End User Agreement” means an agreement on the Schufa’s terms providing for access to and use of the Dataset and the Supplier Data.
“Permitted Purpose” means the purposes, restrictions and/or conditions for the use of the Dataset outlined by the Schufa as set out in clause 2.2 below, in addition to the Customer Use Case set out in the Agreement and at clause 2.1.
“Schufa End User Data” any data provided by the End User to GBG and Schufa for processing, including where relevant any personal data, in accordance with these Additional Terms and any relevant terms within the Agreement.

2. USE OF THE DATASET
2.1. This Dataset may only be used for the Customer Use Cases detailed below, provided that such Customer Use Case is selected on the End User's Order Form and the End User complies with any use case restrictions set out in the Agreement:
• ID Verification – Fraud
• ID Verification – Regulatory
2.2. In addition to the Customer Use Case restrictions contained within clause 2.1 (including any conditions that apply to that Customer Use Case) Schufa requires all End Users to execute and maintain an End User Agreement with Schufa in order to access this Dataset.
2.3. The End User warrants that it will not use this Dataset for any reason outside of the Customer Use Case and Permitted Purpose.

3. DATA PROTECTION AND COMPLIANCE WITH RELEVANT LAWS
3.1. Notwithstanding the standard data protection provisions between GBG and the End User in the General Terms, the End User acknowledges and accepts that GBG shall act as a data processor in relation to Schufa End User Data provided to GBG for this element of the Service, and the processing provisions set out in the relevant clauses of the Agreement shall apply.
3.2. The End User is the controller of Schufa End User Data. The End User appoints GBG as a processor to process the Schufa End User Data for the purposes of delivering the Dataset to the End User.
3.3. In order to deliver the Dataset, the Schufa End User Data is sent by GBG to Schufa through Insic GmbH’s Supplier Technology. GBG appoints Insic GmbH as a processor to process the Schufa End User Data where Insic GmbH provide support and maintenance services to the Supplier Technology. Insic GmbH is located in Germany.
3.4. The Supplier Data used to provide this Dataset is hosted by Schufa in Germany. In order to deliver this Dataset, Schufa shall receive and process Schufa End User Data as an independent controller appointed by GBG in its capacity as a processor. In addition, Schufa may retain copies of Schufa End User Data for audit and compliance purposes.

4. TERMINATION
4.1 Notwithstanding the termination provisions between GBG and the End User in the General Terms, in the event of expiry or termination of the End User Agreement or the Agreement, the End User must cease to use this Dataset and the Supplier Data immediately.