Does an EU visitor or travelling customer trigger GDPR representation?
An EU visit alone does not settle Article 3(2). The EDPB contrasts a domestic-only app used by a traveller with an app deliberately offered in EU cities. Record the intended market and the processing purpose; assess behavioural monitoring separately before deciding whether representative appointment applies.
Evidence retrieved 2026-10-07. Source versions and topic-specific limits are listed below.
Sourced criteria · EU · GDPR
What changes the service scope?
Decision or task
What the source describes
What to prepare
Domestic-only app used while travelling
The guidance examples use domestic market restrictions and other offering facts to distinguish incidental travel from an offer directed at people in the Union. [1][2]
Compare the stated example/criterion with the evidence tasks below; retain any factual differences.
Intentionally offered EU-city service
The contrasting example makes a tourist service available in EU cities and uses location data for targeted advertising. Offering and monitoring are separate Article 3(2) questions. [1]
Compare the stated example/criterion with the evidence tasks below; retain any factual differences.
Evidence of intention
Mere website accessibility is insufficient by itself. Review actual ordering, marketing and other targeting facts together rather than treating one visitor or language as decisive. [3]
Compare the stated example/criterion with the evidence tasks below; retain any factual differences.
The EDPB document is Guidelines 3/2018, version 2.1, adopted 12 November 2019. Its worked examples are guidance and dated assumptions, not a new law or a conclusion about your organisation. EU scope is assessed here; UK and Swiss rules require separate evidence. Novel or disputed scope/role interpretations need specialist legal review.
Prepare the evidence and engagement scope
Use this checklist to gather your business or product details before speaking with a specialist. The items below explain what to record and suggest useful supporting documents. You can add your own answers in the editable project brief.
Document the intended offer
Record supported countries, ordering restrictions, app terms, currencies and actual advertising audiences for this service.
Useful evidence: A dated offer/market matrix with screenshots or archived terms.
Separate travel from targeting
Identify whether an existing domestic customer travelled or whether the service was deliberately offered to people in the EU.
Useful evidence: Customer-location and service-offer facts without publishing personal records.
Check monitoring independently
Map tracking and subsequent profiling or targeting uses; give the specialist both questions before accepting an appointment conclusion.
Useful evidence: A purpose-level tracking/data-flow map and separate offering/monitoring conclusions.
Work packages and dependencies
Conditional: EU representative scope and engagement — Review the specific evidence task and unresolved territorial/role facts. Where appointment applies, agree the mandate, communication and handoff; justify additional privacy services separately.
Questions for providers
Which differences between our actual facts and the cited example change your scope conclusion?
Which processing activity and legal entity does your conclusion cover, and which facts remain unresolved?
Which appointment and evidence-handoff deliverables are included, and which additional services are separately justified?
Sources and data dates
Read the official document in context. The audit details identify the precise locators and preserved versions used for this page.
