• GBG's wholly owned subsidiary ("GBG's Subsidiary") Supplier (“Supplier”) hosts the Supplier Data
• GBG's Subsidiary receives and processes the End User Data
• The End User Data includes personal data
• GBG's Subsidiary processes the End User Data in the EEA

The Supplier Data used to provide Compliance Platform - On Boarding Sanctions & PEPS Dataset is supplied by the Supplier, Diligent Corporation. GBG is obliged to ensure that all End Users agree to comply with the following licencing provisions.

1. DEFINITIONS

1.1. In these Additional Terms, the following definitions shall apply, in addition to the definitions set out in the General Terms and Product Terms:

“End User Data” means any data provided to GBG by the End User for processing in accordance with the terms of the Agreement including where relevant any personal data.

“Permitted Purpose” means the purposes, restrictions and or conditions for use of the Dataset outlined by the Supplier in clauses 2.3-2.4 in addition to the Customer User Case set out in the Agreement and clause 2.1.

2. USE OF THE DATASET

2.1. This Dataset may only be used for the Customer Use Cases detailed below, provided that such Customer Use Case is selected on the End User's Order Form and the End User complies with any use case restrictions set out in the Agreement:

• ID Verification – Fraud
• ID Verification – Regulatory

2.2. The End User shall only use the Services for the sole purpose of mitigating its own compliance and legal risks, with the exclusion of any other use, including commercial use. The End User shall not use the Supplier Data to test, enrich, double check, cross check or verify its own and/or third parties’ information.

2.3. The End User shall with all applicable laws, including but not limited to the Applicable Data Protection Law, when using the Dataset.

2.4. The End User warrants that it will not use this Dataset for any reason outside of the Customer Use Case and the Permitted Purpose.

3. INTELLECTUAL PROPERTY RIGHTS

3.1. The End User shall, refrain from any action or omission that might affect or limit the validity of Diligent Corporation’s Intellectual Property Rights, as well as any action or omission that might constitute infringement of such Intellectual Property Rights. In particular, the End User shall not contest, directly or indirectly the ownership of Diligent Corporation’s Intellectual Property Rights or the validity thereof.

3.2. The End User further disclaims any rights to Diligent Corporation’s Intellectual Property Rights other than the license under to use the Dataset and will not make any claims of ownership of Diligent Corporation’s Intellectual Property Rights. The End User will not use Diligent Corporation’s Intellectual Property Rights for any purpose not expressly permitted under this Agreement.

3.3. Without prejudice to the license right granted in the Agreement, the End User shall not:

(a) adopt, use and/or register, directly or indirectly, in any country in the world trademarks, brand names, words, logos, symbols, letters, design or distinctive signs that are identical or confusingly similar to Diligent Corporation’s Intellectual Property Rights;

(b) modify Diligent Corporation’s trademarks in any way;

(c) take any other action that could diminish Diligent Corporation’s trademarks’ value or damage their associated goodwill and/or reputation;

(d) file or assist anyone else with the filing of any application to register any element of Diligent Corporation’s Intellectual Property Rights, anywhere in the world.

4. CONFIDENTIALITY

4.1 Notwithstanding any confidentiality obligations contained in the General Terms and Product Terms, the End Users acknowledges and accepts that GBG is entitled to provide a copy of the Agreement to Diligent Corporation for contract management purposes.

4. DATA PROTECTION AND COMPLIANCE WITH RELEVANT LAWS

5.1. The Supplier Data used to provide you with this Dataset is hosted by the Supplier.

5.2. Notwithstanding the standard data protection provisions between GBG and the End User in the General Terms, the End User acknowledges and accepts that GBG shall act as a data processor in relation to the End User Data provided to GBG for this element of the Service, and the processing provisions set out in the relevant clauses of the Agreement shall apply.

5.3. The End User appoints GBG as a processor to process the End User Data for the purposes of delivering the Dataset to the End User.

5.4. In order to deliver the Dataset, GBG's Subsidiary shall receive and process the End User Data as an independent controller appointed by GBG. GBG’s Subsidiary processes the End User Data in the EEA.