• Data Supplier hosts the Supplier Data
• The Data Supplier receives and processes Client Information in its capacity as a processor
• Under Brazilian Law, GBG receives and processes Client Information in its capacity as a processor
• Brazil CPF Client Information includes personal data
• The Supplier is located in Brazil
• GBG relies on a derogation to transfer Brazil CPF Client Information to the Data Supplier in accordance with Article 49(1)(c) UK GDPR
• This Dataset is only recommended for ID verification of Brazilian data subjects and residents.

The Supplier Data used to provide the 0534 Brazil CPF is provided by GBG’s Data Supplier. GBG is obliged under the terms of its agreement with its Supplier to ensure that all Clients agree to comply with the following licencing provisions.

1. DEFINITIONS
1.1. In these Additional Terms, the following definitions shall apply, in addition to the definitions set out in the General Terms:
“Brazil CPF Client Information” means any data provided by the Client to GBG and its Data Supplier for processing including where relevant any personal data in accordance with these Additional Terms and any relevant terms within the Agreement.
“Permitted Purpose” means use of the Supplier Data solely for the purpose of identity verification.

2. USE OF THE DATASET
The Supplier Data may only be used for the Permitted Purpose in accordance with these Terms.

3. LIABILITY
3.1. GBG and the Data Supplier will not be held responsible for any losses caused by possible errors, fraud or poor quality of the Brazil CPF Client Information that is shared with the Data Supplier as part of this element of the Service.

4. SERVICE AVAILABILITY
4.1. Notwithstanding the Service Levels in the Agreement, the Client acknowledges and accepts that:
(a) For any incidents requiring technical support, GBG can only contact the Data Supplier via means of a service request from Mondays – Fridays between 8am-6pm Brazilian time only.
(b) The Data Supplier does not provide resolution times for incidents that affects their services therefore the service resolution times as part of GBG’s Standard Support Services do not apply for this Dataset.

5. TERMINATION OF THE SERVICES
5.1. The Client acknowledges and accepts that the Data Supplier may terminate its contract with GBG at any time upon providing 30 days’ notice. The Client acknowledges that in the event of this termination, the Dataset will no longer be available to the Client and this element of the Service will be terminated without liability. GBG may have to immediately suspend this element of the Services in circumstances in where the Data Supplier third party authorisations have been revoked. The Client shall not be entitled to compensation in such circumstances.

6. DATA PROTECTION AND COMPLIANCE WITH RELEVANT LAWS
6.1. Notwithstanding the standard data protection provisions between GBG and the Client in the General Terms, where Brazilian Law is applicable, the Client acknowledges and accepts that GBG shall act as processor in relation to Brazil CPF Client Information provided to GBG for this element of the Service, and the processing provisions set out in the relevant clauses of the Agreement shall apply.
6.2. Relationship of the Parties. The Client is the controller of the Brazil CPF Client Information. Where Brazilian Law is applicable to GBG, the Client appoints GBG as a processor to process the Brazil CPF Client Information for the purposes of delivering the Dataset to the Client.
6.3. The Supplier Data used to provide you with this Dataset is hosted by the Data Supplier in Brazil. In order to deliver this dataset, the Data Supplier shall receive and process Brazil CPF Client Information as processor. The Client acknowledges that GBG relies on a derogation to transfer Brazil CPF Client Information to the Data Supplier for processing in accordance with Article 49 (1)(c) of UK GDPR.
6.4. The Client acknowledges that this Dataset is only recommended for ID verification of Brazilian data subjects and residents. Whilst GBG confirms that the Supplier has passed privacy due diligence and that the Supplier Data used to provide this Dataset has been gathered lawfully by the Supplier in accordance with privacy laws in Brazil, the Supplier may not adhere to other privacy laws.