• Supplier hosts the Supplier Data
• Supplier is a Sub-processor of Client Information
• Client Information includes Personal Data
• The Sub-processor is based in Switzerland
• The Sub-processor is located outside of the EEA
• The Sub-processor uses further Sub-processors based in Russia
• Where GDPR applies to the Client, the Client must rely on a derogation to transfer Client Data to the Sub-processor based outside of the EEA in accordance with Article 49 GDPR.

The Supplier Data that GBG uses to provide Russia Population Check is supplied by GBG’s Data Supplier. GBG is obliged under the terms of its agreement with GBG’s Data Supplier to ensure that all End Users agree to comply with the following provisions:

1. DEFINITIONS
1.1. In these Additional Terms, the following definitions shall apply, in addition to the definitions set out in the General Terms:
“Permitted Purpose” means use of the Supplier Data solely for the purpose of identity verification and/or fraud prevention.

2. USE OF THE DATA
2.1. The Supplier Data may only be used for the Permitted Purpose in accordance with these terms.
2.2. The End User warrants that it will not use the Supplier Data for any reason outside of the Permitted Purpose, and shall not forward, send or disseminate the Supplier Data or information contained within to any other party.

3. DATA PROTECTION AND COMPLIANCE WITH RELEVANT LAWS
3.1. The Supplier Data used to provide the End User within this element of the Service is hosted by the Data Supplier. In order to perform the Services, the Data Supplier shall act as Sub-processor of your Client Information (including any Personal Data supplied) for the sole purpose of delivering this element of the Service. The End User authorises GBG to appoint the Data Supplier as Sub-Processor for the purposes specified in this clause 3.1.
3.2. The Data Supplier is based in Switzerland and uses Sub-processors based in Russia, which is located outside of the EEA. Where GDPR applies to the End User, the End User acknowledges that prior to submitting Client Information to GBG for processing it shall determine, and is solely liable for ensuring that it can rely on a derogation to transfer Client Information to the Sub-processor based outside of the EEA in accordance with Article 49 GDPR.

4. LIABILITY
4.1. The Data Supplier shall not be liable for (i) decisions of the End User based on the Supplier Data (ii) errors or inconsistency of information in the Supplier Data, or (iii) errors or inconsistency in the information provided by the End User.

5. TERMINATION
5.1. Notwithstanding the termination provisions between GBG and the End User in the General Terms, under the terms of GBG’s agreement with the Data Supplier, the supply of the Supplier Data can be terminated in the event of changes in legal obligations, regulations, administrative acts, legal interpretations or other such cases affecting the legislation in force applicable to the Supplier Data, which make it impossible or difficult to continue the relationship. GBG will use reasonable endeavours to find an alternative supplier for the Data on the same or similar commercial terms. In the event that GBG is unable to find an alternative at an acceptable cost to both Parties, either Party may terminate this part of the Service.

6. FEES
6.1. The Data Supplier reserves the right to adjust the fees for providing the Data on 10 days’ written notice to GBG should there be any changes to the costs and obligations of providing the data. Should GBG’s Data Supplier increase its fees, GBG shall, on providing 10 days’ written notice to the End User, be entitled to increase its prices by the same amount. This price increase will occur no more than once per year.