EU-Representative
Your Contact for the EU
GDPR Obligations Apply Outside the EU Too
Any company not established in the European Union that offers goods or services to individuals in the EU (whether for payment or free of charge), or monitors their behaviour within the EU, is basically required to appoint an EU representative in accordance with Article 27 GDPR.
We take on this role for you – in a compliant, efficient, and straightforward manner.
Requirements and Background on an EU Representative under Article 27 GDPR
When is an EU representative required?
Many non-EU companies are unaware that the GDPR applies to them – and that they may therefore be required to appoint an EU representative. This applies, for example, to:
- Online shops delivering to customers in the EU
- Platform providers with users from the EU
- Companies running targeted advertising in EU markets
Legal basis: Articles 3 & 27 GDPR
Article 3 GDPR outlines the so-called "marketplace principle": Companies located outside the EU are subject to the GDPR if they offer goods or services to individuals in the EU or monitor their behavior (e.g., through tracking).
Article 27 GDPR requires such companies to appoint an EU representative who acts as a point of contact for data protection authorities and data subjects within the EU — in the relevant local language and with a registered office in the EU.
Our Services as Your EU Representative
With us as your partner, you can meet the obligations of Article 27 GDPR reliably. You benefit from:
- Official appointment as your EU representative
- Certificate for use with business partners and authorities
- Support with data protection requests from individuals or regulators
- Advisory and compliance support on data protection issues
- Easy payment by credit card
- Attractive starter package for small businesses
Frequently Asked Questions (FAQ)
An EU representative is a natural or legal person based in the EU who acts on behalf of a company outside the EU as a point of contact for data protection authorities and individuals.
A company must appoint an EU representative if it is not established in the EU and processes personal data of individuals in the EU, either because it
- offers goods or services to them (whether for payment or free of charge), or
- monitors their behaviour (e.g. through tracking, profiling, etc.).
The EU representative receives inquiries from data protection authorities, handles concerns from data subjects, and coordinates GDPR-compliant communication with the company if needed.
Data protection authorities can impose significant fines – up to €10 million or 2% of the company’s global annual turnover for violations of Article 27 GDPR. Several companies have already been sanctioned in the past for failing to appoint a representative.
Here you will find decisions by supervisory authorities in the EU related to the absence of an EU representative:
GDPR fine for failure to appoint an EU representative - EUR 525,000
Italian SA fines Clearview AI EUR 20 million
Feel free to contact us. We’ll review with you whether you are required to appoint an EU representative – and if so, we will take on this role reliably and in full compliance with the law.
