• GBG hosts the Supplier Data
• No Sub-processors used

NOTE:  GBG is currently undertaking a migration project with the Supplier and moving to a new API for this Dataset.  Once this is complete with all End Users GBG will no longer host the Supplier Data. 

The Supplier Data that GBG uses to provide the Enhanced PEP Intelligence check and the Enhanced Sanctions and Enforcements check is supplied by GBG’s Data Supplier. GBG is obliged under the terms of its agreement with GBG’s Data Supplier to ensure that all End Users agree to comply with the following provisions:

1. DEFINITIONS
1.1. In these Additional Terms, the following definitions shall apply, in addition to the definitions set out in the General Terms:
“Identity Verification” means validating that the claimed identity of an individual or company actually exists and verifying that the person or company who lays claim to said identity is actually who they claim to be.
“PEP Screening” means screening for political risk of any nature.
“Permitted Purpose” means the use of this element of the Service for the purposes of Identity Verification, Sanctions Checking and/or PEP Screening
“Sanctions Check” means screening for any sanctions against any party imposed by any governmental of official body.

2. USE OF THE SERVICE
2.1. The End User may only use Enhanced PEP Intelligence check and the Enhanced Sanctions and Enforcements check for the Permitted Purpose.

3. DATA PROTECTION AND COMPLIANCE WITH RELEVANT LAWS
3.1. Until the End User successfully actives the new API, GBG will not use Sub-processors to provide this element of the Service as the Supplier Data is hosted by GBG.

3.2 Upon successful activation of the new API Service, the following terms shall also apply in addition to the terms above:

(a) The Supplier Data used to provide you this Dataset is hosted by the Supplier in the United Kingdom.  In order to deliver this Dataset, the Supplier shall receive and process Client Information in its capacity as an independent controller. 

(b) The Supplier is based in the United Kingdom.  The United Kingdom is deemed to offer an adequate level of data protection for personal data by the European Commission, therefore the Parties acknowledge that Client Information can be safely transferred to the Supplier for processing without further data export safeguards.