<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
        xmlns:image="http://www.google.com/schemas/sitemap-image/1.1">
  <url>
    <loc>https://gdprrepresentative.com/change-eu-representative/</loc>
    <lastmod>2026-08-09</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
    <image:image>
      <image:loc>https://gdprrepresentative.com/img/eu-representative-designation-letter-signing-1600.webp</image:loc>
      <image:title>Signing a new Article 27 designation before revoking the previous one</image:title>
    </image:image>
    <image:image>
      <image:loc>https://gdprrepresentative.com/img/change-eu-representative-steps-1200.webp</image:loc>
      <image:title>Five steps to change EU representative without a gap: sign the new designation first, update the privacy notic</image:title>
    </image:image>
    <image:image>
      <image:loc>https://gdprrepresentative.com/img/change-representative-what-to-ask-1200.webp</image:loc>
      <image:title>What to ask the outgoing and incoming representative when switching provider under Article 27 GDPR</image:title>
    </image:image>
  </url>
  <url>
    <loc>https://gdprrepresentative.com/eu-representative-for-ecommerce/</loc>
    <lastmod>2026-08-09</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
    <image:image>
      <image:loc>https://gdprrepresentative.com/img/gpsr-responsible-person-eu-compliance-1600.webp</image:loc>
      <image:title>Online shop preparing orders for European customers under the GDPR and the GPSR</image:title>
    </image:image>
    <image:image>
      <image:loc>https://gdprrepresentative.com/img/ecommerce-two-obligations-1200.webp</image:loc>
      <image:title>An online shop selling into the EU has two obligations: an Article 27 GDPR representative for customer data an</image:title>
    </image:image>
    <image:image>
      <image:loc>https://gdprrepresentative.com/img/ecommerce-representative-annual-cost-1200.webp</image:loc>
      <image:title>Annual cost of an Article 27 representative alone, both obligations together, two providers separately, and a </image:title>
    </image:image>
  </url>
  <url>
    <loc>https://gdprrepresentative.com/eu-representative-for-processors/</loc>
    <lastmod>2026-08-09</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
    <image:image>
      <image:loc>https://gdprrepresentative.com/img/eu-representative-request-desk-meeting-1600.webp</image:loc>
      <image:title>Request desk in the Union receiving a data subject request on behalf of a processor</image:title>
    </image:image>
    <image:image>
      <image:loc>https://gdprrepresentative.com/img/processor-vs-controller-representative-1200.webp</image:loc>
      <image:title>Controller and processor compared: Article 30(1) record versus Article 30(2) record, and how data subject requ</image:title>
    </image:image>
    <image:image>
      <image:loc>https://gdprrepresentative.com/img/processor-request-routing-1200.webp</image:loc>
      <image:title>How a data subject or authority request is logged, referenced and routed when the representative acts for a pr</image:title>
    </image:image>
  </url>
  <url>
    <loc>https://gdprrepresentative.com/eu-representative-for-saas-companies/</loc>
    <lastmod>2026-08-09</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
    <image:image>
      <image:loc>https://gdprrepresentative.com/img/gdpr-representative-service-eu-compliance-1600.webp</image:loc>
      <image:title>Software company reviewing an enterprise security questionnaire asking for its EU representative</image:title>
    </image:image>
    <image:image>
      <image:loc>https://gdprrepresentative.com/img/saas-eu-representative-triggers-1200.webp</image:loc>
      <image:title>Five moments a SaaS company falls within Article 3(2) GDPR: first EU trial signup, euro pricing, product analy</image:title>
    </image:image>
    <image:image>
      <image:loc>https://gdprrepresentative.com/img/saas-vendor-onboarding-representative-1200.webp</image:loc>
      <image:title>Stages of an enterprise deal blocked by a missing Article 27 designation: security questionnaire, DPA, privacy</image:title>
    </image:image>
  </url>
  <url>
    <loc>https://gdprrepresentative.com/gdpr-representative-fines/</loc>
    <lastmod>2026-08-09</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
    <image:image>
      <image:loc>https://gdprrepresentative.com/img/gdpr-enforcement-supervisory-authority-1600.webp</image:loc>
      <image:title>Supervisory authority reviewing a privacy notice for the Article 27 representative</image:title>
    </image:image>
    <image:image>
      <image:loc>https://gdprrepresentative.com/img/gdpr-article-27-fine-exposure-1200.webp</image:loc>
      <image:title>Exposure under Article 83(4)(a) GDPR: 2% of worldwide annual turnover or 10 million euro, whichever is higher</image:title>
    </image:image>
    <image:image>
      <image:loc>https://gdprrepresentative.com/img/what-authorities-look-at-first-1200.webp</image:loc>
      <image:title>What a supervisory authority checks first: whether a representative is named, whether it is established in the</image:title>
    </image:image>
  </url>
  <url>
    <loc>https://gdprrepresentative.com/gpsr-etsy/</loc>
    <lastmod>2026-08-09</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
    <image:image>
      <image:loc>https://gdprrepresentative.com/img/gpsr-product-compliance-consultation-1600.webp</image:loc>
      <image:title>Handmade seller checking product compliance before listing in the European Union</image:title>
    </image:image>
    <image:image>
      <image:loc>https://gdprrepresentative.com/img/gpsr-etsy-responsible-person-fields-1200.webp</image:loc>
      <image:title>Where the EU responsible person details go on Etsy: shop manager fields and the label on the product itself</image:title>
    </image:image>
    <image:image>
      <image:loc>https://gdprrepresentative.com/img/gpsr-etsy-handmade-seller-checklist-1200.webp</image:loc>
      <image:title>Checklist for handmade Etsy sellers under the GPSR: appoint a responsible person, write the technical file, la</image:title>
    </image:image>
  </url>
  <url>
    <loc>https://gdprrepresentative.com/privacy-notice-representative-wording/</loc>
    <lastmod>2026-08-09</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
    <image:image>
      <image:loc>https://gdprrepresentative.com/img/eu-representative-contact-point-gdpr-1600.webp</image:loc>
      <image:title>Reader looking for the EU representative named in a privacy notice</image:title>
    </image:image>
    <image:image>
      <image:loc>https://gdprrepresentative.com/img/privacy-notice-representative-wording-1200.webp</image:loc>
      <image:title>Where the EU representative belongs in a privacy notice under Article 13(1)(a) and Article 14(1)(a) GDPR</image:title>
    </image:image>
    <image:image>
      <image:loc>https://gdprrepresentative.com/img/privacy-notice-wording-mistakes-1200.webp</image:loc>
      <image:title>Five privacy notice wordings that fail Article 27: generic compliance claims, naming a DPO, giving a warehouse</image:title>
    </image:image>
  </url>
  <url>
    <loc>https://gdprrepresentative.com/subsidiary-or-eu-representative/</loc>
    <lastmod>2026-08-09</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
    <image:image>
      <image:loc>https://gdprrepresentative.com/img/gdpr-article-27-representative-consultation-1600.webp</image:loc>
      <image:title>Company weighing an EU subsidiary against appointing an Article 27 representative</image:title>
    </image:image>
    <image:image>
      <image:loc>https://gdprrepresentative.com/img/subsidiary-or-representative-test-1200.webp</image:loc>
      <image:title>Test for whether an EU entity is an establishment under Recital 22 GDPR: registered in a Member State, staff a</image:title>
    </image:image>
    <image:image>
      <image:loc>https://gdprrepresentative.com/img/subsidiary-vs-representative-cost-1200.webp</image:loc>
      <image:title>Subsidiary compared with an Article 27 representative: setup time, annual cost, tax exposure, whether it satis</image:title>
    </image:image>
  </url>
  <url>
    <loc>https://gdprrepresentative.com/swiss-representative/</loc>
    <lastmod>2026-08-09</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
    <image:image>
      <image:loc>https://gdprrepresentative.com/img/eu-representative-gdpr-article-27-prague-czech-republic-1600.webp</image:loc>
      <image:title>EU representative established in Prague acting for a company based in Switzerland</image:title>
    </image:image>
    <image:image>
      <image:loc>https://gdprrepresentative.com/img/swiss-representative-two-regimes-1200.webp</image:loc>
      <image:title>Switzerland under two regimes: the revised Federal Act on Data Protection at home and the GDPR when reaching p</image:title>
    </image:image>
    <image:image>
      <image:loc>https://gdprrepresentative.com/img/swiss-company-eu-representative-triggers-1200.webp</image:loc>
      <image:title>When a Swiss company falls within Article 3(2) of the GDPR: shipping to the EU, euro pricing, analytics on EU </image:title>
    </image:image>
  </url>
  <url>
    <loc>https://gdprrepresentative.com/what-happens-after-appointing-eu-representative/</loc>
    <lastmod>2026-08-09</lastmod>
    <changefreq>monthly</changefreq>
    <priority>0.8</priority>
    <image:image>
      <image:loc>https://gdprrepresentative.com/img/gpsr-responsible-person-contact-point-1600.webp</image:loc>
      <image:title>Contact point in the Union logging and forwarding a request after the designation is signed</image:title>
    </image:image>
    <image:image>
      <image:loc>https://gdprrepresentative.com/img/non-eu-company-what-happens-after-1200.webp</image:loc>
      <image:title>What happens after appointing an EU representative: designation signed, wording published, requests logged and</image:title>
    </image:image>
    <image:image>
      <image:loc>https://gdprrepresentative.com/img/representative-what-we-do-and-do-not-1200.webp</image:loc>
      <image:title>What an Article 27 representative does and does not do: contact point, logging and forwarding, records held, v</image:title>
    </image:image>
  </url>
</urlset>
