• Data Supplier is a Sub-processor of Client Information
• Data Supplier receives and processes Client Information
• Client Information includes Personal Data
• The Sub-processor is located in the United Kingdom
• The Sub-processor is based within the EEA

The Supplier Data that GBG uses to provide KYP REFERENCING SERVICES is supplied by GBG’s Data Supplier. GBG is obliged under the terms of its agreement with its Data Supplier to ensure that all End Users agree to comply with the following provisions:

1. DEFINITIONS
1.1. In these Additional Terms, the following definitions shall apply, in addition to the definitions set out in the General Terms:
“Permitted Purpose” means use of this element of the Service for the purposes of collecting Pre-Employment References, for individuals with whom the End User has a relationship and for whom the End User has a legal right to collect such Pre-Employment References.
“Pre-Employment References” means personal, previous employer, professional membership and academic references.
“Referencing Services” means the processing of Client Information carried out by the Data Supplier in order to collect the Pre-Employment References on the End Users behalf.
“Referee” means an authorised person or organisation that discloses reference information regarding an Applicant.

For the purposes of these Additional Terms, the definition of Data Supplier as set out in the Agreement, shall also mean a third party appointed by GBG to carry out this element of the Service.

2. USE OF THE SERVICE
2.1 The End User may only use the KYP REFERNCING SERVICES for the Permitted Purpose and in accordance with these terms.
2.2 The End User instructs GBG to collect Pre-Employment References on its behalf as part of the Referencing Services.
2.3 The End User agrees GBG will outsource the Referencing Services to its Data Supplier.
2.4 The Data Supplier will process Client Information on behalf of the End User at the instruction of GBG and solely for the purpose of providing the Referencing Services.
2.5 The End User acknowledges and agrees the Data Supplier is responsible for carrying out the end-to-end process of obtaining Pre-Employment References. This includes, but is not limited to:
(a) Obtaining Referee details for previous employers, educational establishments and/or professional bodies as chosen by the End User. This information is obtained from either 1) the Applicant who completes an online Application Form; or 2) the End User who transfers the Applicant Information to the Data Supplier. Both the aforementioned methods to be supplied via a secure sFTP portal.
(b) Making contact with the Referee to collect the Pre-Employment References.
(c) Once the Data Supplier has obtained all of the references requested, it shall produce a report detailing the reference information returned by the Referees.
(d) This information is returned to the End User via a secure sFTP portal.

3. TIMESCALES AND EXCLUSION OF WARRANTIES

3.1 On receipt of a reference request, the Data Supplier shall use its reasonable endeavours to follow the process as further defined in clauses 3.2 to 3.4 below.
3.2 End User provides the reference information:

I. Where the End User is providing the reference data, the Data Supplier will enter 95% of new applications online within one Business Day from receipt of receiving all required information.
II. The Data Supplier may make a 'request for further information' by either telephone or email to the Ens User and/or Applicant, within one Business Day from receipt of receiving the data.
III. If the information requested is not supplied, the Data Supplier will conduct the following chases:
• Chase one: 3 days after initial 'request for further information'
• Chase two: 6 days after initial 'request for further information'
• Chase three: 9 days after initial 'request for further information'
If the information requested is not supplied within 12 days after the initial request for further information, the application will be noted as 'failure to complete'.

3.3 Applicant provides the reference information:
I. Where the Applicant is providing the information required to initiate the screening process for the Referencing Services, 95% of new applications will be initiated online within one Business Day.
II. If the information requested is not supplied, the Data Supplier will conduct the following chases:
• Chase one: 3 days after application initiation
• Chase two: 6 days after application initiation
• Chase three: 9 days after application initiation
If the Applicant has not provided the details requested within 12 days from the initial request for further information, the Applicant will be noted as 'failure to complete'.
3.4. Processing references:
I. Each outstanding reference request will be chased every 3 working days after initial correspondence has been sent, up to and including three chase requests (9 working days).After this period, all outstanding reference requests will be processed as 'Unable to Verify'.

4. DATA PROTECTION AND COMPLIANCE WITH RELEVANT LAWS
4.1 In order to perform the Services, the Data Supplier shall act as Sub-processor of the Client Information (including any Personal Data supplied) for the sole purpose of delivering this element of the Service. The End User authorises GBG to appoint the Data Supplier as Sub-Processor for the purposes specified in this clause 4.1.
4.2 The Data Supplier is based in the United Kingdom which is located within the EEA. On this basis, Personal Data is not transferred outside of the EEA in order to provide End Users with access to this element of the Service