Your written mandate
A designation letter naming your business, Cloudkasten GmbH and the term of your appointment. Available in your customer portal.
For Canadian businesses serving the EU
EU representative for Canadian companies.
All 27 states.
Selling into the EU from Canada? Give EU customers and authorities a named GDPR contact, with a written Article 27 designation.
Essential €348/year$480/year£360/yearCHF 396/yearAED 1,752/yearAUD 684/yearSGD 612/yearR$2,472/year₹45,612/yearCAD 684/year
Start with Essential One annual payment. Excludes applicable taxes.
Equivalent to €29/month; billed annually.Equivalent to $40/month; billed annually.Equivalent to £30/month; billed annually.Equivalent to CHF 33/month; billed annually.Equivalent to AED 146/month; billed annually.Equivalent to AUD 57/month; billed annually.Equivalent to SGD 51/month; billed annually.Equivalent to R$206/month; billed annually.Equivalent to ₹3,801/month; billed annually.Equivalent to CAD 57/month; billed annually.
Enter company details, then pay securely with Stripe.
Not sure you need one? Take the free check12-month term, automatically renewed. Cancel with at least one month’s notice before renewal. View terms.
IS THIS FOR YOUR BUSINESS?
Canadian company. EU customers. GDPR still applies.
EU GDPR can apply to a Canadian business without an EU establishment when it offers goods or services to people in the EU, or monitors their behaviour there. Complying with PIPEDA or Quebec’s Law 25 does not take the place of those rules.
A Canadian SaaS product targeting EU users or a Shopify store shipping to EU shoppers should check its scope. Simply being accessible from the EU is not enough.
Businesses that typically check their scope
- A Toronto fintech onboarding EU customers
- A Montreal media platform with paid subscribers in the EU
- A Vancouver AI startup selling to EU companies
Exceptions apply. Our representative is established in Germany, so your processing must meet the location requirement in Article 27(3). Read the eligibility FAQs.
INCLUDED WITH ESSENTIAL
The documents and contact
your business needs.
Ready-to-use wording
English and German wording with our German postal address and your dedicated forwarding email address.
Requests reach your team
Authority and data-subject messages are forwarded and logged in your portal. Your business handles the substantive response.
Your record, kept on file
On request, we hold the processing record you supply and make it available to requesting authorities. Drafting and review are not included.
Essential includes email support with a 72-hour response target measured in business days. Compare plans or read the full service scope. How verification, the designation letter and request handling work is set out on our GDPR Article 27 EU representative service page.
HOW IT WORKS
From signup to designation.
Start your subscription
Enter your company details and pay for Essential through Stripe.
Complete verification
Finish onboarding with your GDPR contact and processing details. We verify your company.
Publish your EU contact
Once your designation letter is issued, add the supplied details to your privacy notice.
BEFORE YOU START
A few useful answers.
Canada has an EU adequacy decision. Do we still need a representative?
Adequacy concerns data transfers: it lets personal data flow from the EU to Canadian organisations subject to PIPEDA without additional transfer safeguards. It does not decide whether EU GDPR applies to your business, and it does not remove the Article 27 requirement for a business without an EU establishment that falls under Article 3(2).
Does this cover PIPEDA or Quebec’s Law 25?
No. This subscription appoints Cloudkasten GmbH in Germany as your EU GDPR Article 27 representative. It does not make us your privacy officer under PIPEDA or your person in charge of the protection of personal information under Quebec law, and it does not cover your other Canadian privacy obligations.
Do all Canadian businesses need an EU representative?
No. Article 27 generally requires a representative where Article 3(2) applies to a business without an EU establishment. There is an exception for occasional processing that is unlikely to pose a risk to people and does not involve large-scale sensitive or criminal-offence data. Public authorities and bodies are also exempt. Assess your actual activities; business size alone is not an exemption.
Can one representative cover all 27 EU countries?
Yes, you do not appoint one in every country. Article 27(3) requires the representative to be in a member state where the people whose data you process in connection with offering goods or services, or monitoring behaviour, are located. Cloudkasten GmbH is in Germany: confirm that your activities include people in Germany or otherwise satisfy that requirement before ordering.
When can we name rep4eu in our privacy notice?
After successful company verification and issue of your designation letter. Pay, complete onboarding, and receive your letter before publishing the representative details. Verification may require supporting documents; payment alone does not complete the appointment.
Does the appointment make us fully GDPR compliant?
The appointment addresses the representative role. You remain responsible for your processing, records and responses to requests. The subscription does not include a GDPR audit, DPO services or drafting your full privacy policy or Article 30 record.
How does billing and cancellation work?
Essential is paid once a year in advance for a twelve-month term, with automatic annual renewal. Give at least one month’s notice before the end of the term to cancel. Representation continues to the end of the paid term. Fees are generally non-refundable, subject to the exceptions in the Terms of Service. Applicable taxes are shown at checkout.
Read GDPR Articles 3, 27 and 30 and our Terms of Service. General information; the requirement depends on your circumstances.
YOUR NEXT STEP
Put your EU contact in place.
Essential · €348/year$480/year£360/yearCHF 396/yearAED 1,752/yearAUD 684/yearSGD 612/yearR$2,472/year₹45,612/yearCAD 684/year · EURUSDGBPCHFAEDAUDSGDBRLINRCAD
Billed annually. Excludes applicable taxes. Auto-renews every 12 months; at least one month’s notice to cancel.