3.1 Roles and Regulatory Compliance; Authorisation.
3.1.1 Processor and Controller Responsibilities. The parties acknowledge and agree that:
(a) Google is a processor of Brazilian Customer Personal Data under the LGPD;
(b) Customer is a controller or processor, as applicable, of Brazilian Customer Personal Data under the LGPD; and
(c) each party will comply with the obligations applicable to it under the LGPD with respect to the processing of Brazilian Customer Personal Data.
3.1.2 Authorisation by Third Party Controller. If Customer is a processor, Customer warrants to Google that Customer’s instructions and actions with respect to Brazilian Customer Personal Data, including its appointment of Google as another processor, have been authorised by the relevant controller.
3.2 Customer’s Instructions. By entering into this LGPD Processor Addendum, Customer instructs Google to process Brazilian Customer Personal Data only in accordance with applicable law:
(a) to provide the Processor Services and any related technical support;
(b) as further specified via Customer’s use of the Processor Services (including in the settings and other functionality of the Processor Services) and any related technical support;
(c) as documented in the form of the Agreement, including this LGPD Processor Addendum; and
(d) as further documented in any other written instructions given by Customer and acknowledged by Google as constituting instructions for purposes of this LGPD Processor Addendum.
3.3 Google’s Compliance with Instructions. Google will comply with the instructions described in Section 3.2 (Customer’s Instructions) unless applicable laws to which Google is subject require other processing of Brazilian Customer Personal Data by Google.
3.4 Additional Products. If Customer uses any Additional Product, the Processor Services may allow that Additional Product to access Brazilian Customer Personal Data as required for the interoperation of the Additional Product with the Processor Services. For clarity, this LGPD Processor Addendum does not apply to the processing of personal data in connection with the provision of any Additional Product used by Customer, including personal data transmitted to or from that Additional Product.