When do you have to appoint a Data Protection Representative?
According to Art. 27 GDPR, you are required to appoint a Data Protection Representative in the European Union (EU) if your company is based outside the EU and you do not have an establishment in the EU. In other words, you do not have any subsidiaries, offices, production or sales sites, etc. in the EU, but you process data of EU citizens to whom you supply goods or for whom you provide services or whose behavior you observe, e.g., through website tracking.