Representatives of non-Union-based controllers or processors
Where Article 3(2) applies, the controller or processor shall designate in writing a representative in the Union.
The obligation contained in paragraph 1 of this article does not apply to:
occasional processing that does not involve large-scale processing of special categories of personal data referred to in Article 9(1) or processing of personal data relating to criminal convictions and offenses referred to in Article 10, and is likely to present a low risk to the rights and freedoms of natural persons, taking into account the nature, context, scope and purposes of the processing; or
a government agency or public body.
The representative shall be established in one of the member states where the data subjects whose personal data are processed in connection with the offering of goods or services to them, or whose behavior is observed, are located.
In order to ensure compliance with this Regulation, the representative shall be authorized by the controller or processor to be contacted in addition to him or in his place, in particular by the supervisory authorities and data subjects, on all matters related to the processing.
The fact that the controller or processor appoints a representative does not affect the possibility of bringing claims against the controller or processor itself.
