• Supplier and Supplier Group Companies are Sub-processors of Client Information
• Client Information includes Personal Data
• The Sub-processors are located in Singapore, Australia, Malaysia, China, Hong Kong and the Philippines
• The Sub-processors are located outside of the EEA
• GBG has an arrangement in place with the Supplier to maintain appropriate safeguards.
• The Supplier will ensure that all Supplier Group Companies that act as a Sub-processor will also be subject to a contractual arrangement to maintain appropriate safeguards
• The Supplier works with a number of Third Parties to provide the Supplier Data used as part of these Employment Screening Services. Full details are provided in the Additional Terms below.

The Supplier Data that GBG uses to provide Overseas Employment Screening Services (KYP OCRC S18) is supplied by GBG’s Data Supplier, its Group Companies and Third Parties. GBG is obliged under the terms of its agreement with its Data Supplier to ensure that all End Users agree to comply with the provisions set out below. These terms apply to all Employment Screening checks. Individual Employment Screening checks are identified by a two-letter country code and ID Number on the End User’s Order Form.

1. DEFINITIONS
1.1. In these Additional Terms, the following definitions shall apply, in addition to the definitions set out in the General Terms:
“Permitted Purpose” means the use of Supplier Data for the purposes of overseas Employment Screening Services
“Third Parties” as defined at clause 3.3 below

2. LIABILITY
2.1. GBG’s Data Supplier, its Group Companies and its Third Parties shall have no liability to the End User in the event that a search cannot be completed or carried out due to circumstances beyond their control.

3. DATA PROTECTION AND COMPLIANCE WITH RELEVANT LAWS
3.1 In order to perform the Services, the Data Supplier and its Group Companies shall act as Sub-processors of Client Information (including any Personal Data supplied) for the sole purpose of delivering this element of the Service. The End User authorises GBG to appoint the Data Supplier and its Group Companies as Sub-Processors for the purposes specified in this clause 3.1.
3.2 The Sub-processors are located in Singapore, Australia, Malaysia, China, Hong Kong and the Philippines which are located outside of the EEA. The End User hereby grants GBG a mandate to conclude EU Model Clauses (“Commission Decision C(2010)593 Standard Contractual Clauses (processors)) with its Data Supplier on behalf of the End User. GBG shall be entitled to sign the EU Model Clauses ("Commission Decision C(2010)593 Standard Contractual Clauses (processors)) as Processor on behalf of its clients generally and shall not be required to name the End User in such document.
3.3 The End User acknowledges and accepts that the nature of the Services requires the Sub-processors to transfer Client Information to Third Parties, including without limitation to: (a) any authorities in the relevant country or jurisdiction of the search; and/or (b) the Applicant’s current and past employers or educational institutions (“Third Parties”) that will process Client Information in their capacity as Controller and not Sub-processor. The End User’s request for this Service will be deemed to be the End User’s instruction to GBG for its Sub-processors to disclose Client Information to Third Parties as necessary to perform this Service.
3.4 Where GDPR applies to the End User, the End User acknowledges, that prior to submitting Client Information to GBG for processing as part of a search which involves employment screening in a country or jurisdiction located outside of the EEA, it shall determine, and is solely liable for ensuring that it can rely on a derogation to transfer Client Information to Third Parties based outside of the EEA in accordance with Article 49 GDPR.