• Supplier hosts the Supplier Data
• Supplier is a Sub-processor of Client Information
• Client Information includes Personal Data
• The Sub-processor is located in the UK
• The Sub-processor is based within the EEA

The Supplier Data that GBG uses to provide UK Education Data is supplied by GBG’s Data Supplier. GBG is obliged under the terms of its agreement with its Data Supplier to ensure that all End Users agree to comply with the following provisions:

1. DEFINITIONS
1.1. In these Additional Terms, the following definitions shall apply, in addition to the definitions set out in the General Terms:
“JSSA Service” means the dataset being provided by the Data Supplier in accordance with these Additional Terms and the Agreement.
“Permitted Purpose” means the use of the JSSA Service for the verification and/or validation of the age and identity of Data Subjects for the purposes of providing services to which they have requested access to.

2. END USER OBLIGATIONS
2.1. The End User may not access the JSSA Service in a UK embargoed country or in violation of any UK export law or regulation.

3. EXCLUSION OF WARRANTY
3.1. The End User acknowledges and agrees that the data is provided “as is”, however, it is provided with reasonable care and skill. GBG and the Data Supplier do not assume any responsibility or liability in respect of adverse effects, if any, due to any modification or adaptation made by the End User in any portion of the JSSA Services without GBG and the Data Supplier’s prior written consent.

4. DATA PROTECTION AND COMPLIANCE WITH RELEVANT LAWS
4.1. The Supplier Data used to provide you with the JSSA Service is hosted by the Data Supplier. In order to perform the JSSA Service, the Data Supplier shall act as Sub-processor of Client Information (including any Personal Data supplied) for the sole purpose of delivering the JSSA Service as part of the Service. The End User authorises GBG to appoint the Data Supplier as Sub-Processor for the purposes specified in this clause 4.1.
4.2. The Data Supplier is based in the UK which is located within the EEA. On this basis, Personal Data is not transferred outside of the EEA in order to provide End Users with access to the JSSA Service.