• Supplier hosts the Supplier Data.
• Supplier receives and processes TransUnion End User Data in its capacity as controller.
• GBG receives and processes TransUnion End User Data and Supplier Data in its capacity as a processor.
• TransUnion End User Data includes personal data.
• The Supplier is based in the UK.

The Supplier Data used to provide Exempted Credit Report is supplied by GBG’s Supplier, TransUnion International UK Limited (“TransUnion”) GBG is obliged under the terms of its agreement with its Supplier to ensure that all End Users agree to comply with the following licencing provisions:

1. DEFINITIONS
1.1. In these Additional Terms, the following definitions shall apply, in addition to the definitions set out in the General Terms and Product Terms:
“End User” means an end user who falls within the definition of Police and has entered into an End-User Agreement with TransUnion in respect of the Service.
“End User Agreement” means an agreement on the TransUnion’s terms providing for access to and use of the Dataset and the Supplier Data.
“Output” means all data, scores, results, flags, reports, documents, advice, guidance and other output and information provided by TransUnion and/or GBG as part of the Services.
“Permitted Purpose” means the purposes, restrictions and/or conditions for the use of the Dataset outlined by TransUnion as set out in clauses 2.3 and 2.7 below, in addition to the Customer Use Case set out in the Agreement and at clause 2.1.
“Police’’ means (a) any police force in Great Britain; (b) the Police Service of Northern Ireland and the Police Service of Northern Ireland (Reserve); (c) the National Crime Agency; (d) the National Fraud Intelligence Bureau; and (e) any body of constables established under an Act of Parliament.
“TransUnion End User Data” means any data provided by the End User to GBG and TransUnion for processing, including where relevant any personal data, in accordance with these Additional Terms and any relevant terms within the Agreement.

2. USE OF THE DATASET
2.1. This Dataset may only be used by the End User and for the Customer Use Cases detailed below, provided that such Customer Use Case is selected on the End User's Order Form and the End User complies with any use case restrictions set out in the Agreement:
• Law Enforcement
2.2. In addition to the Customer Use Case restrictions contained within clause 2.1 (including any conditions that apply to that Customer Use Case) clauses 2.3 -2.7 shall also apply.
2.3. The End User must execute and maintain an End User Agreement directly with TransUnion in order to access this Dataset.
2.4. The End User shall not share the Output with any other party including data subjects.
2.5. The End User acknowledges that the Dataset and Output are not suitable for “screen scraping” (whereby a system reads data directly from a screen when screen are loaded into a client environment) and the GBG and TransUnion shall not be liable for any inaccurate data due to use by the End User of such processes.
2.6. The End User acknowledges and accepts that TransUnion is a CRA and in utilising the services of a CRA, the End User is required by TransUnion to include a link to the Credit Reference Agency Information Notice (commonly known as “CRAIN”) as set out below within their own fair processing notice or provide an off-line route to access information about CRAIN, such as printed copies. The CRAIN notice link is as follows https://www.transunion.co.uk/legal-information/privacy-centre
2.7. The End User shall fully indemnify GBG against all liabilities, costs, expenses, damages and losses incurred by GBG as a result of the End User’s failure to incorporate the CRAIN notice within their fair processing policy.
2.8. The End User acknowledges and accepts that GBG is acting as an agent for and on behalf of TransUnion in relation to this Dataset.
2.9. The End User warrants that it will not use this Dataset for any reason outside of the Customer Use Case and Permitted Purpose.

3. DUE DILLIGENCE AND AUDIT
3.1. Prior to entering into an End User Agreement and to granting the End User access to the Dataset, the End User acknowledges that GBG must use reasonable endeavours to ensure that the End User has a legitimate reason to access the Service and that the End User’s intended use or the Service complies with relevant laws and meets the minimum standards specified by TransUnion.
3.2. The End User acknowledges and agrees that access to the Dataset is dependent on it passing GBG’s review carried out in accordance with clause 3.1 and that it shall cooperate with GBG and provide all necessary information to enable GBG to comply with its obligations.
3.3. The End User shall cooperate with GBG and TransUnion in relation to any audit or review carried out in accordance with this clause 3 and/or any audit right contained within the General Terms, including any requests to correct any deficiencies discovered during such audits within a period of time mutually agreed upon. In such circumstances, GBG reserves the right to suspend delivery of the Dataset until such deficiencies are corrected.

4. DATA PROTECTION AND COMPLIANCE WITH RELEVANT LAWS
4.1. Notwithstanding the standard data protection provisions between GBG and the End User in the General Terms, the End User acknowledges and accepts that GBG shall act as a data processor in relation to TransUnion End User Data provided to GBG for this element of the Service, and the processing provisions set out in the relevant clauses of the Agreement shall apply.
4.2. The End User is the controller of TransUnion End User Data. The End User appoints GBG as a processor to process the TransUnion End User Data for the purposes of delivering the Dataset to the End User.
4.3. The Supplier Data used to provide the End User with the Dataset is hosted by TransUnion in the UK. In order to deliver the Dataset, TransUnion receives and processes TransUnion End User Data as an independent controller appointed by GBG in its capacity as a processor. In addition, TransUnion may retain copies of TransUnion End User Data for audit and compliance purposes.