• Supplier hosts the Supplier Data
• The Supplier receives and processes End User Data in its capacity as an independent controller
• End User Data includes personal data
• The Supplier is located in Mexico
• The Supplier is based outside of the EEA and the United Kingdom
• GBG has an arrangement in place with the Supplier to maintain appropriate safeguards

The Supplier Data used to provide the Mexico Population Dataset is provided by GBG’s Supplier. GBG is obliged under the terms of its agreement with its Supplier to ensure that all End Users agree to comply with the following licencing provisions:

1. DEFINITIONS
1.1. In these Additional Terms, the following definitions shall apply, in addition to the definitions set out in the General Terms and Product Terms:
“C2C Model Clauses” means the model clauses for the transfer of personal data to controllers established in third countries approved by the European Commission, the approved version, of which, in force at present is that set out in the European Commission’s Decision 2004/915/EC of 27 December 2004 (available at https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32004D0915) as such model clauses may be amended or superseded by the European Commission from time to time. 
“End User Data” means any data provided to GBG by the End User for processing in accordance with the terms of the Agreement including where relevant any personal data.

2. USE OF THE DATASET
2.1. This Dataset may only be used for the Customer Use Cases detailed below, provided that such Customer Use Case is selected on the End User's Order Form and the End User complies with any use case restrictions set out in the Agreement:
• ID Verification – Fraud
• ID Verification – Regulatory
2.2. The End User warrants that it will not use this Dataset for any reason outside of the Customer Use Case.

3. DATA PROTECTION AND COMPLIANCE WITH RELEVANT LAWS
3.1. The Supplier Data used to provide you with this Dataset is hosted by the Supplier in Mexico. In order to deliver this Dataset, the Supplier shall receive and process End User Data in its capacity as an independent controller.
3.2. The Supplier is based in Mexico. GBG has entered into C2C Model Clauses with the Supplier to ensure safe onward transit of End User Data.