Your EU representative, bought directly in Shopify
Selling to customers in Europe from outside the EU? Appoint rep4eu as your GDPR Article 27 representative
without leaving your Shopify admin. The annual plan goes on your Shopify bill, and your designation is ready
to download the moment you submit the mandate.
Plans from USD 480 a year, billed through Shopify. Check whether you need one before you choose a plan.
Operated by Cloudkasten GmbH, a registered company in Germany, with
German-admitted lawyers involved in running the service.
Why merchants buy in Shopify
One billCharged with your other apps
No waitingDesignation issued in the app
Minimal accessNo customer or order data
Cloudkasten GmbHRegistered in Germany · HRB 92697
Scope
Does your Shopify store need an EU representative?
Shopify makes selling to Europe a few clicks away: add a market, switch on euro pricing, set up shipping
zones. Those same settings are what bring a store outside the EU under the GDPR, and with it the duty to
name a representative in the EU.
Article 3(2) of the GDPR reaches businesses with no establishment in the EU when they offer goods or services
to people in the EU, or when they monitor how those people behave online. Article 27 then requires such a
business to designate a representative in the EU, in writing. The duty does not depend on your size or on how
much you sell in Europe. It depends on what your store does.
Art. 3(2)(a)
You offer goods to shoppers in the EU
What counts is whether you evidently intend to sell to people in one or more EU countries. In a Shopify store, that usually shows up as:
An active market for EU or EEA countries
Prices in euros, kronor, złoty or another EU currency
Shipping rates or delivery promises for EU destinations
A storefront translated into EU languages
Ads or influencer campaigns aimed at European audiences
A store that people in the EU can merely reach is not enough on its own (Recital 23). Completed EU orders are not required either.
Art. 3(2)(b)
You track how EU visitors behave
Recital 24 covers tracking people online, including profiling to analyse or predict their preferences. Typical store setups that can amount to monitoring:
Meta, TikTok or Google pixels used for retargeting
Behavioural email flows such as browse and cart abandonment
Customer segmentation built on browsing and purchase history
Personalised product recommendations
Monitoring can bring a store into scope even where it does not ship to the EU, as long as the tracked behaviour takes place there.
When Article 27 does not apply
Your company is established in the EU and the store is run in the context of that establishment. Article 3(1) applies instead, and you need no representative.
Occasional, low-risk processing (Art. 27(2)(a)): occasional, no large-scale processing of special-category or criminal-offence data, and unlikely to result in a risk to people, all at once. A store that sells to the EU as part of its normal business is rarely occasional.
Where the duty applies and no representative is named, supervisory authorities can fine up to €10 million or
2% of worldwide annual turnover, whichever is higher, under Article 83(4)(a). The more common consequence is
quieter: a privacy policy without an EU representative section, which marketplaces, payment partners,
wholesale buyers and attentive customers notice.
You do not have to work this out alone. The app runs the check for you first, from your own store settings,
before it asks you to pay anything.
The check runs before you choose a plan. It gives an indication, not legal advice.
Why the app
Why buy your EU representative through Shopify
It is the same Article 27 appointment we sell on our website, with the same company behind it. The
difference is where you buy it, pay for it and manage it: in the admin you already use every day.
Billed on your Shopify invoice
You approve the annual charge in Shopify, and it is paid with your other app charges using the payment method already on your Shopify account. No new vendor to set up, no extra card on file, one line for your bookkeeper to reconcile.
Active the moment you submit
Once your mandate is complete and your subscription is verified, the appointment activates automatically. Your designation is ready to download straight away, so you can update your privacy policy in the same sitting.
Eligibility from your own settings
The app looks at your active Shopify markets and tells you which EU and EEA countries your store is open to. It pre-fills the answer, you confirm it, and you only pay once the appointment fits your situation.
Wording ready to paste
Privacy-policy text for the EU representative section, in English and German, as HTML that keeps the link clickable and as plain text. Paste it into your store’s policy page and the job is done.
A link anyone can verify
Every appointment has a public verification page on rep4.eu. Customers, payment partners and supervisory authorities can confirm in one click that your representative is real and current.
No access to your customers
The app sees your store details and Markets settings, nothing more. It does not touch your customers, orders or products. Signing up for a privacy service should not mean handing over more data than it needs.
Article 27(1) requires the designation to be in writing. In the app, that is the mandate you accept in step
four. Most merchants finish all five steps in one session.
§ 01
Add the app to your store
Open the rep4eu EU Representative listing on the Shopify App Store and add it. Shopify shows exactly which store data the app can see before you approve: your store details and Markets settings, never your customers or orders.
The app reads your active Shopify markets and pre-selects whether you offer goods to customers in the EU and EEA. You confirm or correct that, and confirm that your company is established outside the EU. If either answer means Article 27 does not fit, the app tells you and you stop there.
§ 03
Choose an annual plan in Shopify
Pick Essential or Business. Shopify shows the annual charge and what is included, and you approve it like any other app charge. It appears on your regular Shopify bill; there is no separate checkout and no card to enter with us.
§ 04
Enter your company details and accept the mandate
Give your registered legal name, address and country, the person authorising the appointment and the email address that should receive GDPR correspondence. Read the written mandate in the app, confirm you are authorised to appoint a representative for the company, and submit.
§ 05
Download your designation and publish the wording
Your appointment activates as soon as the mandate is complete and your Shopify subscription is verified. Download the designation document, then copy the ready-made privacy-policy wording in English or German, with its verification link, into your store’s privacy policy.
Before you submit
The mandate is a legal document in your company’s name, so the person who accepts it must be authorised to
appoint a representative for that company. Use your registered legal name and address exactly as they appear
in your incorporation records, because the designation document repeats them. The GDPR contact email should be
a mailbox someone reads; that is where we forward what regulators and individuals send.
What you receive
What is included in the Shopify appointment
Both plans include the full Article 27 appointment for one legal entity and the store the app is installed on.
Written designation naming your company and Cloudkasten GmbH as its EU representative, with the dates of your coverage period. Download it from the app whenever you need it.
EU contact details: our postal address in Erftstadt, Germany, and a correspondence email address dedicated to your store.
Privacy-policy wording in English and German, with your public verification link.
Receipt and forwarding of correspondence from supervisory authorities and individuals in the EU, sent on to your GDPR contact and listed in the app.
Automatic renewal documents: when Shopify bills your next year, a new designation is issued without you lifting a finger.
Support by ticket from inside the app, with your myshopify.com address attached so we know which store you mean.
Not part of the appointment
Legal advice. Assessing your processing, drafting your privacy policy or replies to authorities. The attorneys’ law firm can take this on separately, with scope and fees agreed first.
Answering requests. You respond to customers and authorities yourself, within the statutory deadlines.
Other representatives. UK GDPR representation, a Data Protection Officer, and the responsible person for product safety under the EU General Product Safety Regulation are separate roles.
Your compliance as a whole. Under Article 27(5) you remain the controller. A representative is one requirement, not all of them.
After you appoint us
What happens when a regulator or a customer writes
Article 27(4) lets supervisory authorities and individuals in the EU address your representative instead of
you, or as well as you. This is what happens when they do.
01
Received and recorded
Messages arrive at your store’s dedicated address or by post at our office in Germany. Each one is recorded against your appointment.
02
Forwarded to your GDPR contact
We send the message on in full to the email address you named in the mandate. The app’s Recent correspondence list shows what arrived and when it was handled.
03
You respond
Only you hold your store’s data and decide what to do with it. For a customer asking to see or delete their data, Article 12(3) gives you one month from receipt, extendable by two more where necessary if you tell them within the first month.
04
Legal help only if you ask
If a matter needs legal judgement, the attorneys’ law firm can take it on as a separate engagement. We tell you when something goes beyond the appointment.
A representative is not an EU office
Appointing a representative does not give your store an establishment in the EU, so the one-stop-shop
mechanism does not apply and any supervisory authority in the EU can contact us about you
(Recital 80). That is exactly why the address in your privacy policy has to work.
Pricing in Shopify
One annual charge, on your Shopify bill
Both plans are billed once a year through Shopify, in US dollars. There is no setup fee and no charge per message forwarded.
Essential
USD 480
Per year, billed through Shopify
The full Article 27 appointment for one company and its store.
For stores that answer supplier, marketplace or wholesale due-diligence questionnaires and want a recently dated designation and faster answers from us.
Shopify shows the current price and what each plan includes before you approve the charge, and that screen is
what applies. Plans renew annually until you cancel renewal from the app. The eligibility check runs
before you choose a plan. Already a rep4eu customer through our website? Contact support before you buy, so
we can move you over without charging you twice.
Shopify app or website
Which way to buy suits you?
The appointment is the same either way. If you run a single company with a Shopify store, the app is
usually the shortest path. The website suits everyone else.
Aspect
Shopify app
rep4.eu website
Best for
One company running a Shopify store
Any business, on any platform
Payment
Annual charge on your Shopify bill, in US dollars
Annual payment by card or SEPA Direct Debit, in your local currency
Starts
As soon as you submit the mandate
After we verify your company, typically within one to two business days
Yes. The rep4eu EU Representative app sells the Article 27 appointment through Shopify’s own app billing. You install the app, choose an annual plan, approve the charge in Shopify and complete the written mandate in your admin. The charge appears on your Shopify bill, and every part of the package is billed there; there is no separate payment with rep4eu.
It does if your business is established outside the EU, offers goods or services to people in the EU, or monitors their behaviour there, and no exemption applies. Active EU markets, EU currencies, delivery to EU countries and marketing aimed at EU shoppers are typical signs of offering goods there. A store that is merely reachable from the EU is not enough on its own. The app’s check gives an indication, not legal advice.
Immediately after you submit a complete mandate and the app has verified your Shopify subscription. There is no wait for a manual review: the designation document is available to download in the app straight away, together with the privacy-policy wording and a public verification link.
Essential is USD 480 a year and Business is USD 960 a year, charged annually through Shopify. Shopify displays the current price and what the plan includes before you approve, and that screen is what counts. The app runs its eligibility check before it asks you to choose a plan.
Your store details and your Markets settings, which it uses to see whether your store is active in EU and EEA countries. It does not request access to your customers, orders or products. The company details you enter for the mandate are stored so that the designation and correspondence handling work.
Cloudkasten GmbH, the company behind rep4eu, registered in Germany. Your designation and privacy wording give our postal address in Germany and a correspondence email address dedicated to your store. We receive and log what arrives and forward it to the GDPR contact you named. You answer on the merits and stay responsible for your compliance.
Yes. One written designation covers every EU member state and the EEA countries where the GDPR applies. Article 27(3) asks that the representative be established in a member state where people whose data you process are located. rep4eu is established in Germany, so it fits stores whose EU customers include people in Germany.
None of those. The appointment covers Article 27 of the EU GDPR only. It does not include legal advice, drafting replies, Data Protection Officer services, UK GDPR representation or product-safety representation for the goods you sell. If you want legal help, the attorneys’ law firm can take it on as a separate engagement, agreed in writing first.
Plans renew annually through Shopify. When the new billing period is verified, the app issues your renewal designation automatically. You can cancel renewal from the app’s Manage Shopify subscription button; your issued designation keeps showing the coverage period you already paid for. If you are moving to another representative, appoint the new one first, then update your privacy policy.
Not before talking to us. If you buy in Shopify while a website subscription is running, you would pay twice. Contact support from the app or the website with your myshopify.com address, and we will arrange the move.
One app appointment covers one legal entity and the store it is installed on. If several stores belong to the same company, or you need designations for several entities under one contract, ask for an Enterprise quote on the website instead.
Last updated 18 October 2026. The written mandate you accept in the app sets out the terms of your
appointment. This page is general information about the Article 27 designation duty, not legal advice.
Statements about the law follow the GDPR text
and EDPB Guidelines 3/2018.
Shopify is a trademark of Shopify Inc.; rep4eu is an independent app developer.
Appoint your EU representative from your Shopify admin
Run the check, approve one annual charge in Shopify and download your designation the same day. Plans from USD 480 a year.
