• Supplier hosts the Supplier Data
• Supplier is a Sub-processor of Client Information
• Client Information includes Personal Data
• The Sub-processor is located in Brazil
• The Sub-processor is located outside of the EEA
• GBG has an arrangement in place with the Sub-processor to maintain appropriate safeguards

The Supplier Data that GBG uses to provide Brazil Identity is supplied by GBG’s Data Supplier GBG is obliged under the terms of its agreement with it Data Supplier to ensure that all End Users agree to comply with the following provisions:

1. DEFINITIONS
1.1. In these Additional Terms, the following definitions shall apply, in addition to the definitions set out in the General Terms:
“Permitted Purpose” means any lawful purpose for verifying the identity of Brazilian citizens.

2. USE OF THE SERVICE
2.1. The Client may only use Brazil Identity for the Permitted Purpose in accordance with the terms contained within these terms.

3. DATA PROTECTION AND COMPLIANCE WITH RELEVANT LAWS
3.1. The Supplier Data used to provide you with this element of the Service is hosted by the Data Supplier. In order to perform the Services, the Data Supplier shall act as Sub-processor of your Client Information (including any Personal Data supplied) for the sole purpose of delivering this element of the Service. The End User authorises GBG to appoint the Data Supplier as Sub-Processor for the purposes specified in this clause 3.1.
3.2. The Data Supplier is based in Brazil which is located outside of the EEA. To ensure that GBG is able to lawfully transfer Personal Data to the Data Supplier (acting as Sub-processor of the Client Information) and to enable GBG to provide and maintain appropriate safeguards with the Data Supplier, the End User hereby grants GBG a mandate to conclude EU Model Clauses with the Sub-processor on behalf of the End User. GBG shall be entitled to sign the EU Model Clauses as Data Processor on behalf of its End Users generally and shall not be required to name the End User in such document.