NEW ZEALAND COMBINED (Item check 0264-6/0297)| ID NUMBER 100657
• Supplier hosts the Supplier Data
• Supplier is a Sub-processor of Client Information
• Client Information includes Personal Data
• The Sub-processor is based in Australia
• The Sub-processor is located outside of the EEA
• Where GDPR applies to the End User, the End User must rely on a derogation to transfer Client Information to the Sub-processor based outside of the EEA in accordance with Article 49 GDPR.
The Supplier Data that GBG uses to provide New Zealand Combined Data is supplied by GBG’s Data Supplier. GBG is obliged under the terms of its agreement with its Data Supplier to ensure that all End Users agree to comply with the following provisions:
1. DEFINITIONS
1.1. In these Additional Terms, the following definitions shall apply, in addition to the definitions set out in the General Terms:
“Permitted Purpose” means use of the Supplier Data solely for the purpose of identity verification and/or fraud prevention.
2. USE OF THE DATA
2.1 The Supplier Data may only be used for the Permitted Purpose in accordance with these terms.
2.2 The End User warrants that it will not use the Supplier Data for any reason outside of the Permitted Purpose, and shall not forward, send or disseminate the Supplier Data or information contained within to any other party.
2.3 The End User acknowledges that the availability of the Supplier Data may be contingent on data sources supplied by third parties, and accordingly the nature and content of the Supplier Data may be amended by the Data Supplier.
3. DATA PROTECTION AND COMPLIANCE WITH RELEVANT LAWS
3.1 The Supplier Data used to provide this element of the Service is hosted by the Data Supplier. In order to perform the Services, the Data Supplier shall act as Sub-processor of Client Information (including any Personal Data supplied) for the sole purpose of delivering this element of the Service. The End User authorises GBG to appoint the Data Supplier as Sub-Processor for the purposes specified in this clause 3.1.
3.2 The Data Supplier is based in Australia, which is located outside of the EEA. Where GDPR applies to the End User, the End User acknowledges that prior to submitting Client Information to GBG for processing it shall determine, and is solely liable for ensuring that it can rely on a derogation to transfer Client Information to the Sub-processor based outside of the EEA in accordance with Article 49 GDPR.
4. TERMINATION
4.1 Notwithstanding the termination provisions between GBG and the End User in the General Terms, under the terms of GBG’s agreement with the Data Supplier, the supply of the Supplier Data can be terminated on 6 months’ notice, or immediately in the event that:
(a) the Data Supplier’s respective partners are no longer able to provide the Data Supplier with access to the Supplier Data due to changes in the enforcement of the local privacy laws, or changes in the marketplace that make it commercially impractical or cost prohibitive to collect the Supplier Data; or
(b) the Supplier Data materially changes as a result of the reasons in 4.1(a) and is no longer usable for the Permitted Purpose.
