• Supplier hosts the Supplier Data
• The Supplier receives and processes End User Data in its capacity as an independent controller
• GBG receives and processes EDD End User Data and the EDD Report in its capacity as a processor
• EDD End User Data includes personal data
• The Supplier processes the End User Data in Ireland.
• The End User Data will be processed by the Supplier in Ireland, within the EEA. The EEA is deemed to offer an adequate level of data protection for personal data by the United Kingdom, therefore the End User Data can be safely transferred to the Supplier without further data export safeguards.

The Supplier Data used to provide the EDD Report is supplied by GBG’s Supplier. GBG is obliged under the terms of its agreement with its Supplier to ensure that all End Users agree to comply with the following provisions.

1. DEFINITIONS
1.1. In these Additional Terms, the following definitions shall apply, in addition to the definitions set out in the General Terms and Product Terms:
“Data Input Template” means the template form which must be completed by the End User and provided to GBG in order to access the EDD Services
“EDD End User Data” means any data provided to GBG by the End User for processing in accordance with the terms of the Agreement including where relevant any personal data.
“EDD Report” means the report document that contains information, extrapolated from multiple publicly available sources across a variety of jurisdictions related to a company, corporation or business or to an individual’s identity, address, occupation, business and occupational background, associated individuals and entities as well as a summary of potential risk factors as at the time of reporting. The content and level of detail in each EDD Report will depend on the type of report purchased as detailed in the Order Form and the date on which the EDD Report is created.
“EDD Request” means the submission of a Data Template requesting an EDD Report.
“Permitted Purpose” means the purposes, restrictions and/or conditions for the use of the Dataset outlined by the Supplier as set out in clause 2.1 below as applicable in addition to the Customer Use Case set out in the Agreement and at clause 2.1.

2. USE OF THE DATASET
2.1. This Dataset may only be used for the Customer Use Cases detailed below, provided that such Customer Use Case is selected on the End User's Order Form and the End User complies with any use case restrictions set out in the Agreement or these Additional Terms:
• ID Verification – Fraud
• ID Verification – Regulatory
2.2. In addition to the Customer Use Case restrictions contained within clause 2.1 (including any conditions that apply to that Customer Use Case), in order to access this Dataset the End User must complete the Data Input Template. The End User shall be solely responsible for the completion of the Data Input Template.
2.3. The End User warrants that it will not use this Dataset and the EDD Report for any reason outside of the Customer Use Case and the Permitted Purpose.

3. TIMESCALES AND EXCLUSION OF WARRANTIES
3.1 All EDD Reports are produced by the Supplier. On receipt of an EDD Request, the Supplier shall use its reasonable endeavours to create an EDD Report within a reasonable timescale.
3.2 As the information and Supplier Data used by the Supplier to provide this Dataset and the EDD Report is supplied by third parties, the Supplier does not have direct control over the quality and accuracy of such information. Whilst the Supplier has used its reasonable endeavours to ensure the accuracy of the EDD Report, the End User acknowledges and accepts that the information and Supplier Data obtained by the Supplier may contain errors or omissions and that the EDD Report is provided without any warranties regarding the obtained quality or accuracy of any information or Supplier Data contained within it.
3.3 Nothing within the EDD Report should be taken as a recommendation on the suitability of the EDD Report for any commercial transaction, and the End User accepts full responsibility for any business decisions made using this EDD Report.
3.4 All individuals and businesses having negative media and/or allegations of any criminal activity must be deemed to be innocent until proven guilty in a court of law. GBG and the Supplier accept no responsibility to the End User or to the individual or business who are the subject of an EDD Report for any decision made as a result of the End User’s use of the EDD Report.

4. DATA PROTECTION AND COMPLIANCE WITH RELEVANT LAWS
4.1. Notwithstanding the standard data protection provisions between GBG and the End User in the General Terms, the End User acknowledges and accepts that GBG shall act as a data processor in relation to EDD End User Data provided to the Supplier, and the processing provisions set out in the relevant clauses of the Agreement shall apply.
4.2. The Supplier Data used to provide you with this Dataset is hosted by the Supplier in Ireland. In order to deliver the Dataset, the Supplier shall receive and process End User Data as a controller appointed by GBG in its capacity as a processor.
4.3. The Dataset is hosted by the Supplier in Ireland. Ireland is deemed to offer an adequate level of data protection for personal data by the European Commission, therefore the Parties acknowledge that EDD End User Data can be safely transferred to the Supplier for processing without further data export safeguards.