SANCTIONS AND PEPS INVESTIGATIONS | ID NUMBER 100065 & 100086

• Supplier hosts the Supplier Data
• This Dataset is supplier directly to the End User by the Supplier
• The Supplier receives and processes DI End User Data and the Detailed Investigation Service in its capacity as an independent controller
• GBG receives and processes DI End User Data in its capacity as a processor
• DI End User Data includes personal data
• The Supplier is located in the United Kingdom
• The United Kingdom is deemed to offer an adequate level of data protection for personal data by the European Commission

Where the End User has purchased the Enhanced PEP Intelligence Dataset (ID Number 100068) and/or the Enhanced Sanctions and Enforcements Dataset (ID Number 100069), the End User may elect to add on this Dataset to provide additional detail in relation to the Results generated. The Supplier Data used to provide this Dataset is supplied by the Supplier. GBG is obliged under the terms of its agreement with GBG’s Supplier to ensure that all End Users agree to comply with the following licensing provisions:

1. DEFINITIONS
1.1. In these Additional Terms, the following definitions shall apply, in addition to the definitions set out in the General Terms and Product Terms:
Annual Licence” means a licence which grants the End User the right to carry out a specified number of Searches which includes access to the Detailed Investigation Service during each calendar month of a 12 month licence period subject to the payment of an annual fee. This is shown on the Order Form as the purchase of Sanctions & PEPs Investigation (Annual Fee) and is identified by ID Number 100065.
Database” means any database of Supplier Data which is managed by the Supplier and updated on a daily basis, against which a Data Entity may be matched.
Data Entity” means a logical subset of data. The data sent to the Data Supplier as part of the DI End User Data will comprise of a number of Data Entities.
Detailed Investigation Service” means the provision of an interactive web page which displays information from the Database and allows the End User to search and cross-reference matched records.
DI End User Data” any data provided by the End User to GBG and the Supplier for processing, including where relevant any personal data, in accordance with these Additional Terms and any relevant terms within the Agreement.
Per Click Licence” means a licence which entitles the End User the carry out Searches which include access to the Detailed Investigation Service on a pay per click basis. This is shown on the Order Form as the purchase of Sanctions & PEPs Investigation (Click) and is identified by ID Number 100086.
Search” means a search carried out using the Detailed Investigation Service in which DI End User Data/Data Entities are matched against the Database and the returning of Results.

2. USE OF THE DATASET
2.1 This Dataset may only be used for the Customer Use Cases detailed in this clause 2.1, provided that such Customer Use Case is selected on the End User's Order Form and the End User complies with any use case restrictions set out in the Agreement or these Additional Terms:
• ID Verification – Fraud
• ID Verification – Regulatory
2.2 The End User warrants that it will not use this Dataset for any reason outside of the Customer Use Case.

3 PROVISION OF THE DATASET
3.1. The End User can purchase access to the Supplier’s Detailed Investigation Service as an add-on to the standard Enhanced PEP Intelligence check (ID Number 100068) and/or the Enhanced Sanctions and Enforcements check (ID Number 100069) as an Annual Licence or on a Per Click Licence basis.
3.2. Where the End User has purchased an Annual Licence for this Dataset the End User shall be entitled to carry out a specified number of Searches per calendar month, as set out in the Order Form. Where the End User has purchased this Dataset on a Per Click Licence basis, the End User will be charged on pay per click basis based on the volume of searches carried out each calendar month.
3.3. Each Search result will contain a link to the Supplier’s Detailed Investigation Service which will be available for the End User to view for a period of thirty (30) days from the date of the relevant Search. After this period the Detailed Investigation Service will no longer be available and the End User will need to carry out a further Search to regain access to the Detailed Investigation Service.
3.4. Detailed Investigation Service is only offered in conjunction with the standard Enhanced PEP Intelligence check (ID Number 100068) and/or the Enhanced Sanctions and Enforcements check (ID Number 100069) and is not offered independently.
3.5. Where an End User exceeds the total number of Searches permitted by its Annual Licence during any calendar month, GBG reserves the right to charge the End User £10 per for each additional Search carried out in the relevant calendar month and to increase the Charges payable for the following 12 month Annual Licence period.

4. DATA PROTECTION AND COMPLIANCE WITH RELEVANT LAWS
4.1. Notwithstanding the standard data protection provisions between GBG and the End User in the General Terms, the End User acknowledges and accepts that GBG shall act as a data processor in relation to DI End User Data provided to the Supplier, and the processing provisions set out in the relevant clauses of the Agreement shall apply.
4.2. Relationship of the Parties. The End User is the controller of DI End User Data. The End User appoints GBG as a processor to process DI End User Data for the purposes of delivering the Dataset and Detailed Investigation Service to the End User.
4.3. The Supplier Data used to provide you with this Dataset is hosted by the Supplier in the United Kingdom. In order to deliver this Dataset, the Supplier shall receive and process DI End User Data as an independent controller appointed by GBG in its capacity as a processor.
4.4. The Supplier is based in the United Kingdom. The United Kingdom is deemed to offer an adequate level of data protection for personal data by the European Commission, therefore the Parties acknowledge that DI End User Data can be safely transferred to the Supplier for processing without further data export safeguards.