Article 27. Representatives of controllers or processors not established in the Republic of Moldova
(1) Where art. 3(2) applies, the controller or the processor shall designate in writing a representative established in the Republic of Moldova.
(2) The obligation laid down in paragraph (1) shall not apply to:
- a) processing which is occasional, does not include, on a large scale, processing of special categories of data as referred to in art. 9(1) or processing of personal data relating to criminal convictions and offences referred to in art. 10, and is unlikely to result in a risk to the rights and freedoms of persons, taking into account the nature, context, scope and purposes of the processing;
- b) a public authority or institution;
- c) controllers and processors established in a member state of the European Economic Area; or
- d) controllers and processors that have designated a representative established in a member state of the European Economic Area.
(3) The representative shall receive from the controller or the processor a mandate under which, in particular, the Centre and data subjects may address the representative, in addition to or instead of the controller or the processor, on all issues related to processing, for the purposes of ensuring compliance with this Law.
(4) The designation of a representative by the controller or the processor shall be without prejudice to the right to lodge a complaint with the Centre or to bring an action before a court against the controller or the processor.