Premessa 80
Recital 80
(80) Fejn kontrollur jew proċessur li ma jkunx stabbilit fl-Unjoni jkun qed jipproċessa data personali ta’ suġġetti tad-data li jinsabu fl-Unjoni li l-attivitajiet ta’ pproċessar tagħhom huma relatati mal-offerta ta’ prodotti jew servizzi, irrispettivament minn jekk hux meħtieġ ħlas mis-suġġett tad-data, lil dawn is-suġġetti tad-data fl-Unjoni, jew il-monitoraġġ tal-imġiba tagħhom sakemm l-imġiba tagħhom isseħħ fl-Unjoni, il-kontrollur jew il-proċessur għandu jaħtar rappreżentant, ħlief jekk l-ipproċessar ikun okkażjonali, ma jinkludix l-ipproċessar, fuq skala kbira, ta’ kategoriji speċjali ta’ data personali jew l-ipproċessar ta’ data personali relatata ma’ kundanni kriminali u reati, u mhux probabbli li jirriżulta f’riskju għad-drittijiet u l-libertajiet tal-persuni fiżiċi, b’kont meħud tan-natura, il-kuntest, l-ambitu u l-għanijiet tal-ipproċessar jew jekk il-kontrollur hux awtorità jew korp pubbliku.
Ir-rappreżentant għandu jaġixxi f’isem il-kontrollur jew il-proċessur u jista’ jiġi indirizzat minn kwalunkwe awtorità superviżorja.
Ir-rappreżentant għandu jinħatar espliċitament b’mandat bil-miktub tal-kontrollur jew tal-proċessur biex jaġixxi f’ismu fir-rigward tal-obbligi tiegħu taħt dan ir-Regolament.
Il-ħatra ta’ tali rappreżentant ma taffettwax ir-responsabbiltà tal-kontrollur jew tal-proċessur skont dan ir-Regolament.
Tali rappreżentant għandu jwettaq il-kompiti tiegħu skont il-mandat li rċieva mill-kontrollur jew mill-proċessur, inkluż li jikkoopera mal-awtoritajiet superviżorji kompetenti fir-rigward ta’ kwalunkwe azzjoni meħuda biex tiġi żgurata l-konformità ma’ dan ir-Regolament.
Ir-rappreżentant maħtur għandu jkun soġġett għal proċedimenti ta’ infurzar fil-każ ta’ nuqqas ta’ konformità mill-kontrollur jew mill-proċessur.
(80) Where a controller or a processor not established in the Union is processing personal data of data subjects who are in the Union whose processing activities are related to the offering of goods or services, irrespective of whether a payment of the data subject is required, to such data subjects in the Union, or to the monitoring of their behaviour as far as their behaviour takes place within the Union, the controller or the processor should designate a representative, unless the processing is occasional, does not include processing, on a large scale, of special categories of personal data or the processing of personal data relating to criminal convictions and offences, and is unlikely to result in a risk to the rights and freedoms of natural persons, taking into account the nature, context, scope and purposes of the processing or if the controller is a public authority or body.
The representative should act on behalf of the controller or the processor and may be addressed by any supervisory authority.
The representative should be explicitly designated by a written mandate of the controller or of the processor to act on its behalf with regard to its obligations under this Regulation.
The designation of such a representative does not affect the responsibility or liability of the controller or of the processor under this Regulation.
Such a representative should perform its tasks according to the mandate received from the controller or processor, including cooperating with the competent supervisory authorities with regard to any action taken to ensure compliance with this Regulation.
The designated representative should be subject to enforcement proceedings in the event of non-compliance by the controller or processor.
The latest consolidated version of the Regulation with corrections by Corrigendum, OJ L 127, 23.5.2018, p. 2 ((EU) 2016/679). Source: EUR-lex.