MYDATA | ID NUMBER 201208

• GBG hosts the Customer Database
• No Suppliers are used to provide this element of the Service

GBG requires that all Customers agree to comply with the following provisions in order to receive this element of the Service:

1. DEFINITIONS
1.1. In these Additional Terms, the following definitions shall apply, in addition to the definitions set out in the General Terms and Product Terms:
Customer Database” means a database uploaded by the Customer into the Service, that has been collected and created solely by the Customer and in accordance with Applicable Data Protection Laws and other lawful obligations and is used within MyData and updated by the Customer for the Customer’s own internal business purposes.
MyData” means the service provided by GBG that incorporates the Customer Database into the Service for use as a Per Click Dataset. 

2. UPLOADING CUSTOMER DATABASE
2.1. Instructions associated with the expected format of the Customer Database and the transfer over secure file transfer protocol for use in MyData will be provided.
2.2. The Customer shall nominate the individual(s) responsible for uploading the Customer Database into MyData.
2.3. The Customer may transfer or update the Customer Database used within MyData as many times as required during the terms of the Agreement but only one copy of the Customer Database will be permitted at any time. 
2.4. The Customer is responsible for the creation, maintenance, accuracy and lawfulness of the Customer Database and warrants that the personal data within the Customer Database is sourced lawfully and the Customer is solely responsible for determining the purpose for which the Customer Database may be used for processing as part of the MyData service.
2.5 The Customer must not submit special category data or criminal convictions/ offences data as defined under Articles 9 and 10 of the UK GDPR in their Customer Database for processing as part of MyData. Furthermore, the use of financial information including but not limited to bank account or credit card information must not be submitted to MyData.
2.6. GBG shall endeavour to upload the Customer Database into MyData within three weeks of receipt, however the Customer acknowledges that GBG shall upload the Customer Database and incorporate it into MyData in accordance with its general updates schedule which takes place on a monthly basis and therefore GBG cannot agree to bespoke timescales in relation to the upload of the Customer Database.

3. DATA PROTECTION
3.1. As set out in the Product Terms, GBG shall act as a processor in respect of the Customer Database and process the Customer Database on the documented instructions of the Customer, the controller of the Customer Database.
3.2. The processing provisions set out in the relevant clauses of the Agreement shall apply.