A seller in Osaka lost nineteen days to a single line that was missing from his privacy notice.
The buyer was a company in Munich. The contract was agreed, the price was agreed, procurement was running its last checks. Then someone in their legal team asked the question that ends a lot of onboarding processes: who is your EU representative?
He answered the way most people do — our privacy policy is on the site. It was. It just did not name anyone. Legal replied that they needed the name, and the onboarding was paused until they had it.
Nineteen days later it moved again. The fix itself takes twenty-four hours.
This is the part of Article 27 that nobody sells you on, because it has nothing to do with fines. Enterprise buyers in Europe now run supplier due diligence on data protection before signing, and the representative is one of the easiest boxes on the form: it is either named in your public notice or it is not. Procurement does not debate it. They pause.
What actually closes it is three things. A signed designation that exists, in writing, as Article 27(1) requires. The exact Articles 13 and 14 wording published in your privacy notice, in every language your site runs in — because the buyer's lawyer reads the notice, not your contract. And a verification code the buyer can check himself, instead of a PDF he has to take on trust.
The same applies in reverse. If a supplier of yours sells into Europe from outside it, open their privacy notice and search for "representative". Thirty seconds, and you learn something about how they run compliance.
Who we are: Europe Services, SE — Prague, established since 2014, IČO 03571785 — for the European Union, and REP27 LTD, company number 17385889, for the United Kingdom. Two companies, because they are two separate obligations.
From €290 a year, €240 from the second year, no fee per request. The United Kingdom adds €100. Signed within 24 hours, for companies and for private individuals, with a website or marketplace listings only.
Free check: we read your public privacy notice and tell you in about ten seconds whether a representative is named. No account, no card. If the answer is that you do not need one — a real establishment in a member state, or occasional low-risk processing under Article 27(2) — we say that too.
gdprrepresentative.com · rep27.com














