Representation of GDPR controllers or processors established outside the EU

If you are a controller or processor established outside the EU, you are processing personal data of data subjects who are in the Union, and your processing activities relate to:

(a) the offering of goods or services, irrespective of whether a payment of the data subject is required, to such data subjects in the Union; or

(b) the monitoring of their behaviour as far as their behaviour takes place within the Union,

you must appoint a representative in the Union.

You must mandate your representative to be addressed (in addition to or instead of yourselves) by, in particular, supervisory authorities and data subjects, on all issues related to processing, for the purposes of ensuring compliance with the GDPR.

Legal Pathways can act as your appointed, official GDPR representative in the EU. It can also provide associated support, solutions and services, either based on your own platform or using Legal Pathway’s comprehensive, proprietary platform for your processing records, GDPR assessments (legal base, public and legitimate interest, data protection impact assessment etc.), standard operating procedures for handling data subject requests, demonstrating GDPR compliancy (accountability) and counseling.