Europe Services, SE and REP27 LTD — version 1.3, 17 October 2026. This is the agreement referred to in the designation form. Download as PDF.
The provider is Europe Services, SE, Na Čečeličce 425/4, Smíchov, 150 00 Praha 5, Czech Republic, IČO 03571785, registered at the Municipal Court in Prague, file H 1486. For designations under Article 27 of the UK GDPR the provider is REP27 LTD, company number 17385889, Unit 82a James Carter Road, Mildenhall, Suffolk IP28 7DE, United Kingdom. The client is the company or individual named in the designation form. Where a client buys both territories, each entity contracts for its own territory and neither is liable for the other's mandate.
Under Article 27 GDPR, and where applicable Article 27 of the UK GDPR, the client designates the provider as its representative for the territory stated on the designation. A designation under Article 27 GDPR covers the whole European Economic Area: all 27 EU Member States plus Norway, Iceland and Liechtenstein, at no extra cost. In that capacity the provider is addressed, in addition to or instead of the client, by supervisory authorities and data subjects on all issues related to the processing. Where the client buys the responsible person service, the provider is designated under Article 16 of Regulation (EU) 2023/988 for the products listed in the file.
We publish a contact address the client puts in its privacy notice. We receive requests from data subjects and authorities, log the date of arrival, and forward them to the client within two working days with the original text and the statutory deadline already calculated. We keep a copy of the client's record of processing activities under Article 30(1) and make it available to a supervisory authority on request. We answer procedural questions about the designation itself and confirm its validity to anyone who asks. Paid plans also include, free of charge, the Swiss declaration under Article 14 nFADP described in Annex 4.
We do not answer on the merits in the client's place, do not give legal advice, do not act as data protection officer, do not carry out audits or impact assessments, do not draft the client's privacy notice, do not act as representative in Switzerland under Article 14 nFADP, and do not represent the client in proceedings. The designation is without prejudice to legal actions which may be brought against the client itself, as Article 27(5) GDPR provides.
The client keeps the information in the designation form true and up to date, and tells us within fifteen days of any change to its registered address, activity, processing or contact person. The client publishes the exact wording we supply in its privacy notice. The client supplies its record of processing activities under Article 30(1) and keeps it current. The client replies to forwarded requests within the statutory deadline. The client tells us before it starts any processing that falls within Annex 3.
The client's record stays the client's document: we hold a copy, we do not write it and we do not correct it. Where the client has no record yet, we supply a template. Failure to supply the record does not invalidate the designation but leaves the client exposed if an authority asks us for it.
Fees are those shown at the time of purchase, exclusive of VAT where applicable. The Base plan covers up to ten forwarded requests per year; beyond that the client may move to Standard, which has no limit on forwarded requests, paying only the difference for the remaining term. The Multi plan adds a mailbox dedicated to the client alone. Annual plans carry a seven-day free trial from approval, with no card required; monthly billing exists only for the responsible person service under Article 16 and carries no trial.
Fees are stated in euros (EUR) and the contractual price is always the EUR amount. Where the client chooses to pay in US dollars (USD), pounds sterling (GBP), Canadian dollars (CAD), Australian dollars (AUD), New Zealand dollars (NZD), Swiss francs (CHF), Czech korunas (CZK), Japanese yen (JPY) or Norwegian kroner (NOK), the amount charged is the equivalent of the EUR fee converted at the most recent euro foreign exchange reference rate published by the European Central Bank at the time of payment; this option is available only where no VAT is charged. The invoice states both amounts and the rate applied. Renewals are charged in the same currency as the first payment, converted from the EUR renewal fee at the most recent ECB reference rate published before each renewal; refunds are made in the currency of the original payment. Any conversion charges applied by the client's bank or card issuer are borne by the client.
No refunds are given for a period already paid; the representation remains active until the end of the paid period.
The designation runs for one year from the date of issue and renews for successive years unless either party gives written notice thirty days before expiry. Either party may terminate for material breach with thirty days' written notice, and the provider may terminate with immediate effect where the client carries out an activity listed in Annex 3, refuses to answer forwarded requests, or has given false information in the designation form. On termination the designation is revoked, the verification code shows the mandate as ended, and the client removes our name from its privacy notice without delay.
Where a renewal is not paid, the provider issues reminders and suspends the mandate only after the last failed attempt, with eight days of grace. A client who has paid is never suspended.
The provider is liable for its own failure to receive, log and forward requests. It is not liable for the client's compliance with the GDPR, for the content of the client's replies, or for penalties imposed on the client. Save for damage caused intentionally or by gross negligence, and save for liability that cannot be limited by law, the provider's aggregate liability is limited to the fees paid by the client in the twelve months preceding the event.
Each party keeps confidential what it learns from the other. In receiving and forwarding requests the provider acts as the client's processor: it processes personal data only on the client's documented instructions, keeps it confidential, applies appropriate security measures, assists the client with requests and with Articles 32 to 36, and on termination returns or deletes the data except where retention is required by law. The provider may use sub-processors for hosting, mail delivery and payment, and remains responsible for their acts. Transfers outside the European Economic Area rest on the standard contractual clauses adopted by Commission Implementing Decision (EU) 2021/914.
Appearing on our public client register is optional. Entries are published only with written consent, show the company name, country and a sentence on the sector, and never the name of an individual. Consent can be withdrawn at any time and the entry is removed immediately.
Agreements with Europe Services, SE are governed by Czech law, with jurisdiction of the courts of Prague. Agreements with REP27 LTD are governed by the law of England and Wales, with jurisdiction of the courts of England and Wales. The choice of law does not deprive a consumer of the protection of the mandatory rules of the country where they reside.
Requests reaching us are logged on arrival and forwarded within two working days. Approval of a company file takes up to twenty-four hours; for an individual, up to forty-eight hours, because the identity document is checked by a person.
A request is any message from a data subject exercising rights under Articles 15 to 22, or from a supervisory authority, addressed to the representative. Routine correspondence, marketing and spam are not requests and are not counted against the plan limit.
The provider does not accept a mandate where the client's activity consists of: processing special categories of data under Article 9 or criminal-conviction data under Article 10 as its core business; services aimed at children under sixteen; large-scale systematic monitoring or biometric identification; data brokerage or scraping; adult content; gambling; consumer pharmaceuticals; or any regulated activity carried on without the licence it requires. Incidental content supplied by users in free text is not an excluded activity, provided the client neither seeks it nor uses it.
A client holding an Article 27 GDPR designation on a paid plan, including a free trial once it has been paid, may complete free of charge the Swiss assessment under Article 14 of the Swiss Federal Act on Data Protection (nFADP, nLPD, nDSG). The link to the form is sent with the approval e-mail or, for a free trial, after payment. The form shows the data already given in the designation; the client confirms four answers on its processing and signs them electronically.
Where at least one answer is NO, the provider countersigns a declaration of exemption, issued as a PDF with a verification code and a QR code and published on a verification page. Where all four answers are YES, a representative in Switzerland is required: no declaration is issued, the client is told so at once, and the provider, which does not act as representative in Switzerland, may put the client in contact with one.
The declaration rests entirely on the answers declared and signed by the client, which remains responsible for their accuracy and makes a new declaration if its processing changes. It is not legal advice and does not bind the Federal Data Protection and Information Commissioner (FDPIC). It has the same expiry as the designation and is renewed with it; it is suspended while the designation is suspended, including for an unpaid renewal, and ends with it.
REP27 LTD and Europe Services, SE — version 1.1, 25 September 2026. Manufacturer’s representative in Great Britain under the General Product Safety Regulations 2005. This is the agreement referred to in the designation form for the United Kingdom and EU + UK plans of RP16. Download as PDF.
(1) Europe Services, SE, a European company registered in the Czech Republic, company ID (IČO) 03571785, entered in the commercial register kept by the Municipal Court in Prague, file H 1486, with its registered office at Na Čečeličce 425/4, Smíchov, 150 00 Praha 5, Czech Republic (the “Provider”);
(2) REP27 LTD, a private company limited by shares incorporated in England and Wales, company number 17385889, with its registered office at Unit 82a James Carter Road, Mildenhall, Suffolk IP28 7DE, United Kingdom (the “Responsible Person”); and
(3) The Manufacturer, the company or person identified in section 1 of the Designation, which accepts this Agreement by signing the Designation electronically (the “Manufacturer”).
A. The Manufacturer is not established in the United Kingdom and places, or intends to place, consumer products on the market in Great Britain.
B. Under regulation 2 of the General Product Safety Regulations 2005, where the manufacturer is not established in the United Kingdom, its representative established in the United Kingdom is a “producer” for the purposes of those Regulations.
C. The Manufacturer wishes to appoint the Responsible Person as its manufacturer’s representative in Great Britain, and the Provider, which sells and invoices the service, is willing to arrange that appointment on the terms of this Agreement.
D. The Responsible Person accepts the appointment only for the Products declared by the Manufacturer, only for Great Britain, and only on the basis that the Manufacturer remains responsible for the design, manufacture, safety and conformity of the Products.
The parties agree as follows.
1.1 In this Agreement the following terms have the meanings set out below.
1.2 Headings do not affect interpretation. “Including” means including without limitation. A reference to a law includes that law as amended, extended or replaced.
2.1 The Manufacturer appoints the Responsible Person as its manufacturer’s representative established in the United Kingdom within the meaning of regulation 2 of GPSR 2005, for the Products, in Great Britain only, and the Responsible Person accepts that appointment on the terms of this Agreement.
2.2 The appointment takes effect on the date the Responsible Person accepts the Designation, as shown on the Designation and on the public verification page, and ends on the expiry or termination of this Agreement.
2.3 Northern Ireland is excluded. Products placed on the market in Northern Ireland are subject to Regulation (EU) 2023/988, for which the Manufacturer may appoint the Provider as responsible person in the Union under a separate designation.
2.4 The Responsible Person does not act, and shall not be treated, as the Manufacturer’s importer, distributor, fulfilment service provider, authorised representative under product-specific legislation (including for UKCA marking), responsible person for cosmetic products, or UK responsible person for medical devices, unless the parties expressly agree so in writing for identified products.
2.5 The appointment covers only the Products. The Manufacturer shall not use the Label Block or the Responsible Person’s name for any product that is not a Product, including any Excluded Product.
3.1 During the term of the Designation the Responsible Person shall:
3.2 The Responsible Person performs the services with reasonable skill and care. It may use a mail-handling service at its registered office to receive and forward post, and remains responsible for the services it performs.
4.1 The services do not include, and the Responsible Person does not accept any obligation to provide:
5.1 The Manufacturer remains solely responsible for the design, manufacture, safety, labelling and conformity of the Products, and for compliance with GPSR 2005 and all other law applicable to the Products in Great Britain. Nothing in this Agreement transfers any of those obligations to the Responsible Person or the Provider.
5.2 Before any Product is placed on the market in Great Britain, the Manufacturer shall upload to the Client Area, or send to rp@gdprrepresentative.com, the Technical Documentation listed in Schedule 3, complete, accurate and in English.
5.3 The Manufacturer shall keep the Technical Documentation and the product list up to date, and shall inform the Responsible Person in writing within five Working Days of any change to a Product, its composition, its supplier, its warnings or its labelling, and of any new product it intends to place on the market under the Designation.
5.4 The Manufacturer shall inform the Responsible Person immediately, and in any case within 24 hours of becoming aware, of any accident, injury, complaint, safety incident, risk, withdrawal, recall or contact from an Enforcement Authority or marketplace concerning a Product.
5.5 The Manufacturer shall answer any request of the Responsible Person within three Working Days, or within 24 hours where the request concerns a Serious Risk, and shall provide any information or samples an Enforcement Authority may require.
5.6 The Manufacturer shall take, at its own cost, any corrective action required by law or requested by an Enforcement Authority, including withdrawal or recall, and shall keep the Responsible Person informed of each step.
5.7 The Manufacturer shall not place on the market any product that it knows, or ought to know, is not a safe product, and shall place the Label Block only on Products that comply with the law applicable to them.
5.8 The Manufacturer shall maintain, with a reputable insurer, product liability insurance covering the Products sold in Great Britain, with a limit of indemnity of not less than £1,000,000 per claim, and shall provide evidence of that insurance on request.
5.9 The Manufacturer warrants that all information given in the designation form and in the Technical Documentation is complete, accurate and not misleading, and that it is not subject to sanctions restricting the provision of the services.
6.1 The Manufacturer shall use the Label Block exactly as provided in the Client Area, without additions that suggest that the Responsible Person or the Provider has tested, certified, approved or endorsed the Products.
6.2 The Manufacturer shall not use the names, logos or verification codes of the Responsible Person or the Provider for any other purpose without prior written consent.
6.3 On expiry, suspension or termination of the Designation, the Manufacturer shall stop placing on the market any Product bearing the Label Block and shall remove the Label Block from its online listings within 30 days. The Manufacturer remains responsible for Products already placed on the market.
7.1 The Manufacturer authorises the Responsible Person to disclose to any Enforcement Authority, without further consent, the Technical Documentation, the Designation and any information about the Products and the Manufacturer that the authority requests or that the law requires to be disclosed.
7.2 Where a Serious Risk is reported or suspected, the Responsible Person may, without liability to the Manufacturer, notify the Enforcement Authorities, inform the marketplaces on which the Products are listed, and suspend the Designation until the risk has been addressed to the satisfaction of the Enforcement Authority.
7.3 The Responsible Person shall not admit liability on behalf of the Manufacturer, and shall consult the Manufacturer before answering an Enforcement Authority where time and the law allow.
8.1 The fees are those of the Plan shown on gdprrepresentative.com at the date of purchase. They are invoiced and collected by the Provider through its payment processor (Mollie). The Responsible Person does not invoice the Manufacturer.
8.2 Fees are payable yearly in advance, or monthly where the Manufacturer has chosen monthly billing for a period of twelve months. Prices exclude VAT, which is charged where the law requires it. There are no charges per product, per listing or per authority request within the Plan.
8.3 Where a free trial period is offered, the Designation may be issued before payment, and payment falls due at the end of the trial period. If payment is not made, the Designation is suspended and then revoked.
8.4 If a renewal payment fails, the Designation remains active during a grace period of 8 days, after which it is shown as expired on the public verification page and the Manufacturer must stop using the Label Block.
8.5 A change of Plan made from the Client Area is charged in proportion to the days remaining in the current term; a cheaper Plan takes effect at the next renewal.
8.6 Fees are stated in euros (EUR) and the contractual price is always the EUR amount. Where the Manufacturer chooses to pay in US dollars (USD), pounds sterling (GBP), Canadian dollars (CAD), Australian dollars (AUD), New Zealand dollars (NZD), Swiss francs (CHF), Czech korunas (CZK), Japanese yen (JPY) or Norwegian kroner (NOK), the amount charged is the equivalent of the EUR fee converted at the most recent euro foreign exchange reference rate published by the European Central Bank at the time of payment; this option is available only where no VAT is charged. The invoice states both amounts and the rate applied. Renewals are charged in the same currency as the first payment, converted from the EUR renewal fee at the most recent ECB reference rate published before each renewal; refunds are made in the currency of the original payment. Any conversion charges applied by the Manufacturer's bank or card issuer are borne by the Manufacturer.
9.1 This Agreement starts when the Manufacturer signs the Designation and continues for the term of the Plan. It renews automatically for successive periods of twelve months unless the Manufacturer cancels the renewal before the renewal date from the Client Area or by writing to rp@gdprrepresentative.com.
9.2 If the Responsible Person declines the Designation before accepting it, the Provider refunds the amount paid for it.
9.3 Fees paid for a current term are not refunded on cancellation, except where the law requires otherwise.
10.1 The Responsible Person or the Provider may suspend the Designation, or terminate this Agreement with immediate effect by written notice, if:
10.2 On suspension or termination, the public verification page shows the status of the Designation, and the Responsible Person may inform the Enforcement Authorities and marketplaces where it considers this necessary or the law requires it.
10.3 Termination does not affect rights and obligations accrued before it, the Manufacturer’s obligations under clauses 5.4, 5.6, 6.3, 11 and 13, or the Responsible Person’s duty to keep the Technical Documentation for the period in clause 3.1(b).
11.1 To the fullest extent permitted by law, the Manufacturer shall indemnify the Responsible Person and the Provider, and their directors and staff, against all losses, damages, costs (including reasonable legal fees), claims, recall costs and expenses they incur arising out of or in connection with: (a) the Products; (b) any breach of this Agreement by the Manufacturer; (c) any information given by the Manufacturer being inaccurate or incomplete; and (d) any action of an Enforcement Authority, marketplace or third party concerning the Products.
11.2 The indemnity does not extend to any fine or penalty that the law prohibits from being indemnified, nor to losses caused by the wilful misconduct of the party claiming under the indemnity.
11.3 The party claiming under the indemnity shall notify the Manufacturer of the claim promptly and, where the law allows, give the Manufacturer the opportunity to take part in its defence at the Manufacturer’s cost.
12.1 Nothing in this Agreement limits or excludes liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or for any other liability that cannot be limited or excluded by law.
12.2 Subject to clause 12.1, the total liability of the Responsible Person and the Provider together, in contract, tort (including negligence) or otherwise, arising under or in connection with this Agreement in any period of twelve months, is limited to the fees paid by the Manufacturer under this Agreement in the twelve months before the event giving rise to the claim.
12.3 Subject to clause 12.1, neither the Responsible Person nor the Provider is liable for loss of profit, revenue, sales, business, goodwill or data, for delisting or suspension by a marketplace, or for any indirect or consequential loss.
13.1 Each party shall keep confidential the other parties’ non-public information, except as required to perform this Agreement, to comply with the law, or to answer an Enforcement Authority.
13.2 The Provider and the Responsible Person process the personal data of the Manufacturer’s contacts as described in the privacy notice at gdprrepresentative.com/privacy/ and, where applicable, in the data processing agreement.
13.3 The Responsible Person keeps the Technical Documentation and the Designation for ten years after the last Product was placed on the market in Great Britain, including after this Agreement ends, at no additional charge.
14.1 The Manufacturer acknowledges that the product safety regime in Great Britain is being reformed under the Product Regulation and Metrology Act 2025, and that new regulations may impose new or different obligations on manufacturers, representatives and online marketplaces.
14.2 If a change in the law affects the services, the Responsible Person and the Provider may amend this Agreement, the services or the fees by giving at least 30 days’ notice in the Client Area or by email. If the Manufacturer does not accept the amendment, it may terminate this Agreement before the amendment takes effect; where the change is required by law, it may take effect immediately.
15.1 The Provider screens the Manufacturer and its signatory against sanctions lists before issuing and periodically during the Designation. The Responsible Person and the Provider may refuse, suspend or terminate the services where required by sanctions or anti-money-laundering law.
16.1 Notices under this Agreement are given by email: to the Responsible Person and the Provider at rp@gdprrepresentative.com, and to the Manufacturer at the contact email given in the Designation. A notice is received when sent, unless the sender receives a delivery failure message.
17.1 The Manufacturer may not assign or transfer this Agreement. The Provider and the Responsible Person may assign it to an affiliated company that continues the services, on notice to the Manufacturer.
17.2 A person who is not a party has no right under the Contracts (Rights of Third Parties) Act 1999 to enforce any term of this Agreement, except the directors and staff indemnified under clause 11.
18.1 If there is any conflict, the following order applies: (1) the Designation; (2) this Agreement; (3) the terms published at gdprrepresentative.com/terms/.
18.2 This Agreement, together with the Designation, is the entire agreement between the parties about its subject matter.
19.1 The parties agree that the Designation and this Agreement may be concluded by electronic signature, including a simple electronic signature recorded with the signatory’s name, date, time and IP address, and that such signature is valid and binding.
20.1 This Agreement and any dispute arising out of or in connection with it are governed by the law of England and Wales, and the courts of England and Wales have exclusive jurisdiction.
| Request or notice from an Enforcement Authority | Forwarded to the Manufacturer within 2 Working Days of receipt |
| Report of a Serious Risk | Forwarded to the Manufacturer within 1 Working Day; Enforcement Authority notified where regulation 9 requires |
| Question from the Manufacturer | Answer within 2 Working Days |
| Technical Documentation | Kept for 10 years after the last Product was placed on the market |
| Public verification page | Available at all times, showing active, suspended, expired or revoked |
The Manufacturer places the following text on the Product, its packaging or an accompanying document, and in the compliance field of each online listing, replacing the code with the verification code of its Designation:
REP27 LTD Unit 82a James Carter Road, Mildenhall, Suffolk IP28 7DE, United Kingdom rp@gdprrepresentative.com UK Responsible Person (Great Britain) - GPSR 2005 RP16 - UK16-XXXX-XXXX
Questions on this agreement: info@gdprrepresentative.com