NFC STANDARD DATASET | ID NUMBER 201175

• GBG incorporates the Supplier Technology into its own Services and/or Services
• The Supplier is a processor of End User Data appointed by GBG in its capacity as an independent controller
• End User Data includes personal data
• The Supplier is located in Netherlands
• The Supplier is based within the EEA
• The Supplier uses further processors based in Netherlands and Ireland.
• The further processors are located within the EEA

The Supplier Technology used to provide this Dataset is supplied by GBG’s Supplier GBG is obliged under the terms of its agreement with the Supplier to ensure that all End Users agree to comply with the following licensing provisions:


1. DEFINITIONS
1.1. In these Additional Terms the following definitions shall apply, in addition to the definitions set out in the General Terms and Product Terms:
“End User Data” means any data provided to GBG by the End User for processing in accordance with the terms of the Agreement including where relevant any personal data
“ReadID Analytics Data” means the aggregated analytical statistics regarding the use of this Dataset by the End User. These analytical statistics do not include personal data;
“ReadID Ready App” means the application provided by the Supplier which is part of GBG’s Services and/or Software, and which communicates with the ReadID SaaS server;
“ReadID SaaS server” means the ReadID server, on which the ReadID technology is installed and running, provided by the Supplier to GBG as a service (Software-as-a-Service), as hosted in the public cloud;
“ReadID SDK” means a Software Development Kit (SDK) that may be provided by the Supplier to GBG to enable an End User to use this Dataset.
“ReadID Technology or Software” means the technology enabling an End User to process End User Data for its internal identity document interpretation and/or verification purposes using ReadID through GBG’s Services and/or Software. This definition includes the ReadID SaaS server, ReadID SDK, ReadID API and ReadID Ready App.
“Permitted Purpose” means the purposes, restrictions and or conditions for the use of the Dataset outlined by the Supplier as set out in clauses 2.3-2.4 below, in addition to the Customer Use Case set out in the Agreement and at clause 2.1

2. USE OF THIS DATASET
2.1. This Dataset may only be used for the Customer Use Cases detailed below, provided that such Customer Use Case is selected on the End User's Order Form and the End User complies with any use case restrictions set out in the Agreement:
• ID Verification – Fraud
• ID Verification – Regulatory
2.2. In addition to the Customer Use Case restrictions contained within clause 2.1 (including any conditions that apply to that Customer Use Case) the following terms set out in clauses 2.3 – 2.4 also apply
2.3. The End User must not under any circumstances use this Dataset for the purpose of commercial time-sharing, rental or service bureau use.
2.4. The End User acknowledges that the Supplier uses additional third parties to deliver this Dataset and the Supplier has the right to change to other suppliers and can make adjustments to the technology. GBG shall inform the End User of the intended changes as soon as possible following notice from the Supplier.
2.5 The End User warrant that it will not this Dataset for any reason outside of the Permitted Purpose or Customer Use Case.

3. INTELLECTUAL PROPERTY RIGHTS
3.1. The End User acknowledges that it grants the Supplier a free unencumbered, non-exclusive perpetual licence to use the ReadID Analytics Data in connection with improving the Supplier Technology and/or statistical purposes. For the avoidance of doubt this clause 3.1 does not include a licence to use personal data.
3.2. The Supplier Technology used in connection with this Dataset may be provided by a third party as part of the ReadID SDK and/or ReadID Ready App. That third-party software may be governed by the open source licence conditions or other conditions of those third parties. The End User warrants that it accepts and will strictly comply with those third-party conditions and agrees to indemnify GBG and the Supplier against any third-party claims in this respect. This third party software does not comprise software or material, which subject to licence terms such as the GPL, whereby the combination of an open source software with a non-open source software shall entail that the combination of the software shall be open source. A list of third party software of third parties, including but not limited to the use of open source licenses with LGPL, Apache 2.0, MIT, BSD, Unicode Licence Agreement - Data Files and Software, OpenSSL License, SSleay License or the same conditions as those already being used. The End User understands and agrees that neither GBG nor the Technology Provider is liable whatsoever for (i) such third party software, nor (ii) such third party supplier itself.

4. DATA PROTECTION AND COMPLIANCE WITH RELEVANT LAWS
4.1. GBG incorporates the Supplier Technology into its own Services and/or Software.
4.2. In order to perform this Dataset, the Supplier shall receive and process End User Data as a processor appointed by GBG in its capacity as an independent controller for the purpose of delivering this Dataset.

5. INDEMNIFICATION
5.1. The End User agrees to indemnify GBG against any claims made by the Supplier that the End User’s use of this Dataset is in breach of these Additional Terms.
5.2. The End User agrees to bring any claim associated with this Dataset or the Supplier Technology against GBG only and not the Supplier. The End User shall defend, indemnify and hold GBG harmless from and against any claims, demands, actions or causes of action arising from or in any way relating to claims brought against GBG by the Supplier as a result of the End User failing to comply with this clause 5.2.