REP27 · EU representative · Chile
Article 27 GDPR · Chile
If your company is established in Chile and you offer goods or services to people in the European Union — or you monitor their behaviour — Article 27 of the GDPR requires you to designate, in writing, a representative inside the Union. We are that representative: named in your privacy notice, reachable by all 27 supervisory authorities, and verifiable by anyone holding the code on your certificate.
Law 19.628 and the new Law 21.719, which creates the Chilean data protection agency, govern processing at home. Neither discharges Article 27 for a Chilean company that sells to people in the European Union.
€525,000The Dutch supervisory authority fined Locatefamily.com €525,000 for failing to designate an EU representative, and added periodic penalties until the company complied. No other breach was needed.
Wine and fruit exporters, salmon and seafood, mining technology, and SaaS built in Santiago for European buyers.
Regulators read the site the way a customer would. Prices in euro, a shipping option to Ireland, a checkout in French: each one is evidence you envisaged the Union.
Store listings available in EU countries, telemetry from European devices and accounts held by people in the Union all bring you inside Article 3(2).
As a processor you are caught in your own right. Your client's designation covers your client, never you.
Law 19.628 governed data protection for two decades, and Law 21.719 has created a dedicated Chilean agency with GDPR-style powers. Both concern Chile, not the Union.
the new Agencia de Protección de Datos Personales. None of them can receive a request under Article 27(4) on your behalf, and none of them appears in your privacy notice for European purposes.
Chilean companies reach the Union through wine, fruit and seafood exports, mining technology, and SaaS built in Santiago for European buyers.
One designation, published in your notice, verifiable by anyone with the code. Requests logged and forwarded within two business days, with the GDPR deadline already counted for you.
The written designation Article 27(1) requires, countersigned by Europe Services, SE and signed electronically under eIDAS, naming the member states covered.
A certificate with a QR code and a public verification page, so a regulator, a client or a buyer can confirm the designation is live at that moment.
A dedicated address, inbox and form. Every request from a data subject or an authority is logged and forwarded to you within two business days.
No. Law 21.719 concerns representation before the Chilean agency. The GDPR wants a representative established in an EU member state. Two laws, two roles, two designations.
Almost always: buyer contacts, quality inspectors, logistics staff at European companies, plus anyone using your traceability portal. If those people are in the Union, Article 3(2) can apply.
The habits transfer, the obligation does not. Records you keep for the Chilean agency will usually satisfy what we hold under Article 30(4), which makes the onboarding faster.
The designation letter and certificate are issued within 24 working hours of the form and payment, after a person reviews the file. Higher-risk sectors take up to five business days.
From €290 a year, billed annually in advance and renewing automatically until you cancel before the renewal date. No fee per request from the Standard plan up.
No. Under EDPB guidance one entity cannot be both. We are the contact point under Article 27(4): we receive, log and forward, hold your Article 30 records, and never answer on the merits or give legal advice.
Chile is the country where the new domestic law is doing our explaining for us: companies already understand the structure.
Free check first: we read your public privacy notice and tell you in ten seconds whether a representative is named. If one is, we say so and you close the tab.
Run the free check