Article 27 Representative Mandate Template

MANDATE OF EU REPRESENTATIVE
(General Data Protection Regulation, Article 27)

This Mandate of EU Representative ("Mandate") is entered into and made
effective as of {{EFFECTIVE_DATE}} by and between:

THE CONTROLLER:
  Name:    {{CONTROLLER_NAME}}
  Address: {{CONTROLLER_ADDRESS}}
  Email:   {{CONTROLLER_EMAIL}}
  (the "Controller")

and

THE REPRESENTATIVE:
  Name:    {{REPRESENTATIVE_NAME}}
  Address: {{REPRESENTATIVE_ADDRESS}}
  Email:   {{REPRESENTATIVE_EMAIL}}
  (the "Representative")

(each a "Party" and together the "Parties").

1. APPOINTMENT
   The Controller hereby appoints the Representative, and the
   Representative hereby accepts the appointment, to act as the
   Controller's representative within the European Union pursuant to
   Article 27 of Regulation (EU) 2016/679 ("GDPR").

2. SCOPE OF MANDATE
   The Representative is mandated solely to act on behalf of the
   Controller for the purposes of Article 27 GDPR. In particular, the
   Representative shall:
   (a) be the point of contact for supervisory authorities and data
       subjects on all issues related to the processing of personal data
       by the Controller for the purposes of ensuring compliance with
       the GDPR; and
   (b) receive correspondence addressed to the Controller under the GDPR
       and forward it to the Controller without undue delay.

   The mandate does not extend to representing the Controller in legal
   proceedings, entering into contracts on behalf of the Controller, or
   any matter beyond the limited Article 27 scope set out above.

3. DURATION
   This Mandate takes effect on {{EFFECTIVE_DATE}} and remains in force
   until terminated by either Party. Either Party may terminate this
   Mandate by giving the other Party written notice; termination shall
   take effect thirty (30) days after the date of notice, or
   immediately if required by applicable law.

4. NO COMPENSATION
   The Parties expressly agree that the Representative serves on an
   unpaid, voluntary basis. The Representative shall not be entitled to
   any compensation, fees, or reimbursement of expenses for the
   services rendered under this Mandate, except to the extent agreed in
   writing in advance by the Controller.

5. CONFIDENTIALITY
   The Representative shall keep confidential any personal data,
   correspondence, or other information received in the course of
   acting under this Mandate, and shall use such information solely for
   the purposes of performing the Representative's duties under this
   Mandate.

6. GOVERNING LAW
   This Mandate is governed by Polish law, with reference to the
   directly applicable provisions of European Union law, including the
   GDPR. Any dispute arising out of or in connection with this Mandate
   shall be submitted to the competent courts of the Republic of
   Poland.

7. ENTIRE AGREEMENT
   This Mandate constitutes the entire agreement between the Parties
   with respect to its subject matter and supersedes all prior
   discussions, communications, and agreements, whether oral or
   written, on the same subject matter.

SIGNED on behalf of the Controller:

  __________________________________
  Name:
  Title:
  Date:

SIGNED by the Representative:

  __________________________________
  Name:    {{REPRESENTATIVE_NAME}}
  Date: