REP27 · EU representative · Argentina
Article 27 GDPR · Argentina
If your company is established in Argentina and you offer goods or services to people in the European Union — or you monitor their behaviour — Article 27 of the GDPR requires you to designate, in writing, a representative inside the Union. We are that representative: named in your privacy notice, reachable by all 27 supervisory authorities, and verifiable by anyone holding the code on your certificate.
Law 25.326 governs data protection in Argentina, and the country holds an EU adequacy decision. Adequacy concerns transfers of data into Argentina; it says nothing about Article 27, which applies because your establishment is outside the Union and your customers are inside it.
€525,000The Dutch supervisory authority fined Locatefamily.com €525,000 for failing to designate an EU representative, and added periodic penalties until the company complied. No other breach was needed.
Software and IT outsourcing for European clients, agritech and food exporters, wine producers selling direct, and fintech serving the Spanish and Italian markets.
Paid or free, physical or digital. Article 3(2)(a) looks at whether you envisage customers in the Union — a language option, a currency or EU shipping is usually enough.
Analytics, profiling, advertising pixels or app telemetry on people located in the Union fall under Article 3(2)(b), even when you never sell to them.
Processors are covered too. Naming a representative is increasingly a condition to pass vendor onboarding with EU customers.
Law 25.326 governs data protection and the AAIP supervises it. Argentina holds one of the oldest adequacy decisions with the Union, which concerns transfers into Argentina.
the Agencia de Acceso a la Información Pública. None of them can receive a request under Article 27(4) on your behalf, and none of them appears in your privacy notice for European purposes.
Argentinian companies reach the Union through software and IT outsourcing for European clients, wine and food exports, agritech, and fintech serving Spain and Italy.
One designation, published in your notice, verifiable by anyone with the code. Requests logged and forwarded within two business days, with the GDPR deadline already counted for you.
The written designation Article 27(1) requires, countersigned by Europe Services, SE and signed electronically under eIDAS, naming the member states covered.
A certificate with a QR code and a public verification page, so a regulator, a client or a buyer can confirm the designation is live at that moment.
A dedicated address, inbox and form. Every request from a data subject or an authority is logged and forwarded to you within two business days.
No. Adequacy lets EU personal data flow to Argentina without additional safeguards. Article 27 asks a different question: who answers inside the Union on your behalf.
Usually yes, and Article 27 applies to processors caught by Article 3(2) just as it does to controllers. Your European client's designation does not extend to you.
It is an Argentinian register held by an Argentinian authority. Article 27 wants an entity established in the Union, published in your privacy notice.
The designation letter and certificate are issued within 24 working hours of the form and payment, after a person reviews the file. Higher-risk sectors take up to five business days.
From €290 a year, billed annually in advance and renewing automatically until you cancel before the renewal date. No fee per request from the Standard plan up.
No. Under EDPB guidance one entity cannot be both. We are the contact point under Article 27(4): we receive, log and forward, hold your Article 30 records, and never answer on the merits or give legal advice.
Argentinian software firms usually come to us with the European client's questionnaire already in hand, which makes the file quick.
Free check first: we read your public privacy notice and tell you in ten seconds whether a representative is named. If one is, we say so and you close the tab.
Run the free check