As it is mandatory for some companies to have an EU Representative, our mission is to provide this service free of charge to those who present no risk in their data processing.

Register nowSelf-assessment
3

Not only can the penalties be severe monetary fines (up to 20M or 4% of annual revenue), the European Supervisory Authorities reserve the right to limit or eliminate the processing of your data files. The highest fine to date was EUR 740,000,000 to Amazon.

Overview of fines and penalties :

2023.01.12 | SPAIN » EUR 3,000

Art. 6 (1) GDPR
Insufficient legal basis for data processing

source

2023.01.12 | ROMANIA » EUR 2,000

Art. 32 (1) b) GDPR, Art. 32 (2) GDPR
Insufficient technical and organisational measures to ensure information security

source

2023.01.09 | LITHUANIA » EUR 6,000

Art. 5 (1) a) GDPR, Art. 9 (1) GDPR, Art. 13 (1), (2) GDPR, Art. 30 (1), (3) GDPR, Art. 35 (1), (3) GDPR
Insufficient legal basis for data processing

source

2023.01.04 | IRELAND » EUR 390,000,000

Art. 5 (1) a) GDPR, Art. 6 (1) GDPR, Art. 12 GDPR, Art. 13 (1) c) GDPR
Non-compliance with general data processing principles

source

2022.12.29 | SPAIN » EUR 24,000

Art. 6 (1) GDPR
Insufficient legal basis for data processing

source

2022.12.22 | ROMANIA » EUR 10,000

Art. 32 (4) GDPR
Insufficient technical and organisational measures to ensure information security

source

Our expertise is in managing requirements under Article 27 of the GDPR

If your organization is located outside the EU but is offering goods or services to individuals in the EU, or monitoring their behavior, and you are processing their personal data, it is highly likely that you need to appoint an EU Representative under Article 27 of the EU General Data Protection Regulation (GDPR).

What is an EU Representative?
  • hold your Article 30 records of data processing activity
  • act on your behalf in relation to data protection matters in the EU
  • act as the first port of call for the local supervisory authorities in relation to compliance action
  • act as a portal for the receipt of requests from individual data subjects in connection with their data protection rights
How we can help
  • We can act as your EU Representative within the EU
  • We are headquartered in Rotterdam, Netherlands

SUBSCRIPTIONS

We offer EU-Representative  annual subscriptions based on your risk profile.
Simple and general online FAQ support is free. Specific assistance and support is charged at EUR 250/hour.

€ 0.- /year

Registration fee :
€ 95.-

Assistance included :
none

€ 250.- /year

Registration fee :
free

Assistance included :
2 hours /year
for a value of € 500.-

€ 950.- /year

Registration fee :
free

Assistance included :
6 hours /year
for a value of € 1500.-

€ 1750.- /year

Registration fee :
free

Assistance included :
12 hours /year
for a value of € 3000.-

FAQ

I don't need a representative because I only do business in a country outside the EU
Beware of your processors or software: Google, Amazon, Facebook, Apple, Microsoft. Processing any data which can identify an individual human being through a GAFAM or EU-based processor or processing them on EU located servers makes the GDPR compliance compulsory.
Can’t I just get this whenever I need it?
It’s like saying : “Can I drive without car insurance and get it if I have an accident?”

You need that insurance now and you can get it simply and easily at a very low price. Penalties for non GDPR-compliance are severe.

I have set up a GDPR privacy notice on my website, changed my opt-in procedures and sent a GDPR notification to all my customers, isn't that enough?
GDPR compliance is complex, and it’s likely that many companies don’t comply at 100%. Although, the most important is to minimize any risk with best effort.

Not having a EU Representative is a serious offense and any supervisory authority would fix a severe penalty in case of complaint.

I don’t need to be compliant, I only use paper to process personal data

Wrong : as long as personal data from EU residents are processed or stored, whatever the support (electronic, paper, ..), you must comply with GDPR.

What makes an EU representative eligible?
The representative must be incorporated in a country of the EU.
When do I need a DPO and when do I need a representative?
As representative is compulsory once your company is not located in the EU, DPO is only compulsory under certain circumstances, based on sensitive data and large scale processing (Art. 37 GDPR).

Representative and DPO positions cannot be performed by the same entity.