• Supplier hosts the Supplier Data
• The Supplier receives and processes End User Data
• End User Data includes personal data
• The Supplier is located in Brazil
• The Supplier is located outside of the EEA and the United Kingdom
• GBG relies on a derogation to transfer End User Data to the Supplier base outside of the EEA and the United Kingdom in accordance with Article 49 (1)(c) UK GDPR
• This Dataset is only recommended for ID verification of Brazilian data subjects

The Supplier Data used to provide the Brazil Population Dataset is supplied by GBG’s Supplier. GBG is obliged under the terms of its agreement with its Supplier to ensure that all End Users agree to comply with the following licencing provisions:

1. DEFINITIONS
1.1. In these Additional Terms, the following definitions shall apply, in addition to the definitions set out in the General Terms and Product Terms:
“End User Data” means any data provided to GBG by the End User for processing in accordance with the terms of the Agreement including where relevant any personal data.

2. USE OF THE DATASET
2.1. This Dataset may only be used for the Customer Use Cases detailed below, provided that such Customer Use Case is selected on the End User's Order Form and the End User complies with any use case restrictions set out in the Agreement:
• ID Verification – Fraud
• ID Verification – Regulatory
2.2. The End User warrants that it will not use this Dataset for any reason outside of the Customer Use Case.

3. DATA PROTECTION AND COMPLIANCE WITH RELEVANT LAWS
3.1. The Supplier Data used to provide this Dataset is hosted by the Supplier in Brazil. In order to deliver this Dataset, the Supplier shall receive and process End User Data.
3.2. The Supplier is based in Brazil, which is located outside of the EEA and the UK. The End User acknowledges that GBG relies on a derogation to transfer End User Data to the Supplier for processing in accordance with Article 49 (1)(c) of UK GDPR.
3.3. The End User acknowledges that this Dataset is only recommended for ID verification of Brazilian data subjects. Whilst GBG confirms that the Supplier has passed privacy due diligence and that the Supplier Data used to provide this Dataset has been gather lawfully by the Supplier in accordance with the privacy laws in Brazil, the Supplier may not adhere to other privacy laws.