Mandate template for the EU representative (Art. 27 GDPR)
- Art. 27 GDPR
- About 20 minutes
- Italiano · Deutsch · Français · English
In brief
The mandate by which you designate your representative in the European Union. You need it if you have no establishment in the EU but offer goods or services to people there, or monitor their behaviour.
- Who it is for
- The representative, who signs it with you. It is a contract between the two parties.
- To decide first
- In which Member State the representative is established and from when the mandate takes effect; in the text you complete the fee, the notice period, the applicable law and the place of jurisdiction.
- Afterwards
- Both sign it, then state the representative's name and address in your privacy notices.
What it contains
- 1Recitals
- 2Designation
- 3Tasks of the representative
- 4Obligations of the principal
- 5Liability
- 6Independence of the function
- 7Confidentiality and data protection
- 8Remuneration
- 9Term and termination
- 10Applicable law and place of jurisdiction
- 11Signatures
An excerpt
1. Recitals
The principal is not established in the European Union, but processes personal data of persons who are in the Union because it offers them goods or services or monitors their behaviour (Art. 3(2) GDPR). It must therefore designate in writing a representative in the Union (Art. 27(1) GDPR).
The obligation does not apply if the processing is occasional, does not include, on a large scale, processing of special categories of data or of data relating to criminal convictions and offences, and is unlikely to result in a risk to individuals (Art. 27(2) GDPR). The principal has assessed this exception and has decided to proceed with the designation.
2. Designation
With effect from __________ the principal designates the representative as its representative in the European Union within the meaning of Art. 27 GDPR. The representative accepts.
The full text is generated on the platform, with your organisation's details already in place.
Related templates
A template is general information, not advice on your case: it must be adapted to your organisation. For a question on your case there is Advisorn's consulting. By Advisorn, updated on 20 October 2026.