• Data Supplier hosts the Supplier Data
• Data Supplier receives and processes Client Information in its capacity as independent controller
• Client Information includes Personal Data
• The Data Supplier is located in Peru
• The Data Supplier is based outside of the EEA and the United Kingdom
• GBG has an arrangement in place with the Data Supplier to maintain appropriate safeguards

The Supplier Data used to provide 0520 Peru Identity Dataset is supplied by GBG’s Data Supplier. GBG is obliged under the terms of its agreement with its Data Supplier to ensure that all Clients agree to comply with the following licencing provisions.

1. DEFINITIONS
1.1. In these Additional Terms, the following definitions shall apply, in addition to the definitions set out in the General Terms:
“Permitted Purpose” means use of the Supplier Data solely for the purpose of identity verification.
"Standard Contractual Clauses" means: (i) where the EU GDPR applies, the contractual clauses annexed to the European Commission's Implementing Decision 2021/914 of 4 June 2021 on standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council ("EU SCCs"); and (ii) where the UK GDPR applies, standard data protection clauses in the form of the International Data Transfer Addendum to the EU Commission Standard Contractual Clauses adopted pursuant to or permitted under Article 46 of the UK GDPR ("UK SCCs").

2. USE OF THE DATASET
2.1. The Supplier Data may only be used for the Permitted Purpose in accordance with these terms.

3. DATA PROTECTION AND COMPLIANCE WITH RELEVANT LAWS
3.1. The Client warrants that prior to using the Dataset it has obtained the appropriate consent from each individual consumer in accordance with the applicable Peruvian data protection law for the collection, disclosure and use of such consumer's Personal Data, has in place a transparent and compliant privacy policy available to consumers, retains evidence of consent and complies with jurisdiction-specific requirements, such as but not limited to database registration with the competent data protection authority and information about any cross-border data transfers. The Client warrants that it will use such Personal Data only as permitted by such consent.
3.2. The Supplier Data used to provide this Dataset is hosted by the Data Supplier in Peru. In order to deliver the Dataset, the Data Supplier shall receive and process Client Information in its capacity as an independent controller.
3.3. GBG has entered into the Standard Contractual Clauses with the Data Supplier to ensure safe onward transit of End User Data.