• Supplier hosts the Supplier Data
• The Supplier receives and processes End User Data in its capacity as a processor
• Under Brazilian Law, GBG receives and processes End User Data in its capacity as a processor
• Brazil CPF End User Data includes personal data
• The Supplier is located in Brazil
• GBG relies on a derogation to transfer Brazil CPF End User Data to the Supplier in accordance with Article 49(1)(c) UK GDPR
• This Dataset is only recommended for ID verification of Brazilian data subjects and residents

The Supplier Data used to provide the 0534 Brazil CPF is provided by GBG’s Supplier. GBG is obliged under the terms of its agreement with its Supplier to ensure that all End Users agree to comply with the following licencing provisions.

1. DEFINITIONS
1.1. In these Additional Terms, the following definitions shall apply, in addition to the definitions set out in the General Terms and Product Terms:
“Brazil CPF End User Data” means any data provided by the End User to GBG and this Supplier for processing including where relevant any personal data in accordance with these Additional Terms and any relevant terms within the Agreement

2. USE OF THE DATASET
2.1. This Dataset may only be used for the Customer Use Cases detailed below, provided that such Customer Use Case is selected on the End User’s Order Form and the End user complies with any use case restrictions set out in the Agreement:
• ID Verification – Fraud
• ID Verification - Regulatory
2.2. The End User warrants that it will not use this Dataset for any reason outside of the Customer Use Case.

3. LIABILITY
3.1. GBG and the Supplier will not be held responsible for any losses caused by possible errors, fraud or poor quality of the Brazil CPF End User Data that is shared with Supplier as part of this element of the Service.

4. SERVICE AVAILABILITY
4.1. Notwithstanding the Service Levels in the Agreement, the End User acknowledges and accepts that:
(a) For any incidents requiring technical support, GBG can only contact the Supplier via means of a service request from Mondays – Fridays between 8am-6pm Brazilian time only.
(b) The Supplier does not provide resolution times for incidents that affects their services therefore the service resolution times as part of GBG’s Standard Support Services do not apply for this Dataset.

5. TERMINATION OF THE SERVICES
5.1. The End User acknowledges and accepts that the Supplier may terminate its contract with GBG at any time upon providing 30 days’ notice. The End User acknowledges that in the event of this termination, the Dataset will no longer be available to the End User and this element of the Service will be terminated without liability. GBG may have to immediately suspend this element of the Services in circumstances in where the Supplier third party authorisations have been revoked. The End User shall not be entitled to compensation in such circumstances.

6. DATA PROTECTION AND COMPLIANCE WITH RELEVANT LAWS
6.1. Notwithstanding the standard data protection provisions between GBG and End User in the General Terms, where Brazilian Law is applicable, the End User acknowledges and accepts that GBG shall act as processor in relation to Brazil CPF End User Data provided to GBG for this element of the Service, and the processing provisions set out in the relevant clauses of the Agreement shall apply.
6.2. Relationship of the Parties. The End User is the controller of the Brazil CPF End User Data. Where Brazilian Law is applicable to GBG, the End User appoints GBG as a processor to process the Brazil CPF End User Data for the purposes of delivering the Dataset to the End User.
6.3. The Supplier Data used to provide you with this Dataset is hosted by the Supplier in Brazil. In order to deliver this dataset, the Supplier shall receive and process Brazil CPF End User Data as processor. The End User acknowledges that GBG relies on a derogation to transfer Brazil CPF End User Data to the Supplier for processing in accordance with Article 49 (1)(c) of UK GDPR.
6.4. The End User acknowledges that this Dataset is only recommended for ID verification of Brazilian data subjects and residents. Whilst GBG confirms that the Supplier has passed privacy due diligence and that the Supplier Data used to provide this Dataset has been gathered lawfully by the Supplier in accordance with privacy laws in Brazil, the Supplier may not adhere to other privacy laws.