条例 (EU) 2016/679
五个段落决定了您是否需要一个代表,此人做什么,如果您跳过会发生什么。这里逐一列出,并附有实际意义。
A controller or processor caught by Article 3(2) must designate, in writing, a representative in the Union.
实际上:口头安排、藏在合同中的条款或从未签署任何东西的经销商不算指定。
You have no establishment in the Union and you either offer goods or services to people in it — paid or free — or monitor their behaviour inside it.
以欧元为单位的价格、欧盟的运输选项、语言选择器或针对欧洲访问者的分析像素通常足够。
Processing that is occasional, excludes special categories of data on a large scale and criminal-conviction data, and is unlikely to result in a risk.
连续的商业处理不是偶然的。普通企业不符合资格;根据27(2)(b)公共当局豁免。
The representative is mandated to be addressed, in addition to or instead of the company, by supervisory authorities and data subjects on all issues related to processing.
我们在两个工作日内接收、记录并转发。我们从不回答实质内容,我们不是您的数据保护官员。
The designation is without prejudice to legal actions which could be initiated against the controller or processor itself.
代表不是盾牌。任何告诉您它可以阻止针对贵公司的程序的人都是在出售法规未包含的内容。
Failure to designate is a standalone infringement: up to €10 million or 2% of total worldwide annual turnover, whichever is higher.
荷兰当局仅因这一理由对 Locatefamily.com 罚款 €525,000,并规定了定期罚款,直到其遵守为止。