GBG Plc

Data Privacy Roles – Loqate Services Only

The following table sets out, in relation to a particular Loqate Service, in what capacity we will act when supplying the Services to you and in what capacity you will be acting when you supply your data to us and/or take the relevant Services. It is particularly important that you understand the capacity in which we both act so that you understand what laws you will need to abide by and which laws we will abide by. You will see that our Local Laws page sets out the laws applicable in each of the UK, EU, Canada and US.

If you are a US Customer, or take US data (which may also be included in our Global Datasets) you will need to review the US Privacy Laws 2023 – Loqate page.
If you are a customer based in Canada, or you take any of our Canada datasets (which may also be included in our Global Datasets), you will need to review the Canada Privacy Laws page.
If you are a customer based in the UK or the EEA, or take any datasets for any country within those areas (which may also be included in our Global Datasets), you will need to review the Europe and United Kingdom Laws - Loqate Services Only page.

Table 1: Data Privacy Roles
Relevant Product (refer to applicable column depending on which Service is noted on Order Form)

Contracting Entity: GB Group plc	CAPTURE, VERIFY & STORE FINDER	CAPTURE & VERIFY	CAPTURE & VERIFY
Contracting Entity: GB Group plc	CUSTOMER DATA: address data	CUSTOMER DATA: EES, GES, business datasets	CUSTOMER DATA: email, phone, bank
In relation to the Services	Customer – controller	Customer – controller	Customer – controller
In relation to the Services	GBG – processor	GBG – controller (1)	GBG – controller (1)
For the Purposes of Load Balancing/ debugging/ infrastructure/ account data/usage data	Customer – N/A	Customer – N/A	Customer – N/A
	GBG – controller	GBG – controller (4)	GBG – controller (5)
For the purposes of creating Derived Data	Customer – N/A	N/A	N/A
For the purposes of creating Derived Data	GBG – controller (3)	N/A	N/A
GBG Audit Trail	N/A	Customer – N/A	Customer – N/A
GBG Audit Trail	N/A	GBG – controller (1) #	GBG – controller (1) #
Customer Audit Trail	N/A	N/A	N/A
Customer Audit Trail	N/A	N/A	N/A

Contracting Entity: GB Group plc	DATA MAINTENANCE	DATA MAINTENANCE EU	SUPPLIER DATA (PII)	RESULTS
Contracting Entity: GB Group plc	CUSTOMER DATA	CUSTOMER DATA
In relation to the Services	Customer – controller	Customer – controller	Customer – N/A	Customer – controller (2)
In relation to the Services	GBG – controller (1)	GBG - Processor	GBG – controller	GBG – controller
For the Purposes of Load Balancing/ debugging/ infrastructure/ account data/usage data	N/A	N/A	N/A	Customer – N/A
	N/A	N/A	N/A	GBG – see Relevant Product column
For the purposes of creating Derived Data	N/A	N/A	N/A	Customer – N/A
For the purposes of creating Derived Data	N/A	N/A	N/A	GBG – see Relevant Product column
GBG Audit Trail	Customer – N/A	N/A	N/A	Customer – N/A
GBG Audit Trail	GBG – controller (1) #	N/A	N/A	GBG – see Relevant Product column
Customer Audit Trail	Customer – controller	N/A	N/A	Customer – see Relevant Product column.
Customer Audit Trail	GBG - processor	N/A	N/A	GBG – see Relevant Product column

Upon receipt from Customer (# audit trail is post-processing)
Upon receipt from GBG
Upon receipt from Customer and where it has been agreed between the Parties within the Agreement – only for further processing compatible with the purposes for which the personal data were initially collected.
For the address elements only of EES and GES (utilities datasets), and business datasets
For debugging only

Contracting Entity: Loqate, Inc.	CAPTURE, VERIFY & STORE FINDER	CAPTURE & VERIFY
Contracting Entity: Loqate, Inc.	Address data	Email, Phone, Bank, EES, GES, business datasets
In relation to the Services	Customer – controller/business	Customer – controller/business
In relation to the Services	GBG – processor/service provider	GBG – processor/service provider
For the Purposes of Load Balancing/ debugging/ infrastructure/ account data/usage data/GBG Audit Trail	Customer – controller/business	Customer – controller/business
	GBG – processor/service provider	GBG – processor/service provider
For the purposes of Derived Data	Customer – controller/business	N/A
For the purposes of Derived Data	GBG – processor/service provider	N/A

Contracting Entity: Loqate, Inc.	DATA MAINTENANCE and DATA MAINTENANCE EU	SUPPLIER DATA (PII)	RESULTS
Contracting Entity: Loqate, Inc.	All datasets
In relation to the Services	Customer – controller/business	Customer – controller/business	Customer – controller/business
In relation to the Services	GBG – processor/service provider	GBG – see relevant product	GBG – see relevant product
For the Purposes of Load Balancing/ debugging/ infrastructure/ account data/usage data/GBG Audit Trail	Customer – controller/business	N/A	N/A
	GBG – processor/service provider	N/A	N/A
For the purposes of Derived Data	N/A	N/A	N/A
For the purposes of Derived Data	N/A	N/A	N/A