{"id":16377,"date":"2021-02-10T12:56:00","date_gmt":"2021-02-10T11:56:00","guid":{"rendered":"https:\/\/www.rosello-mallol.com\/?p=16377"},"modified":"2022-03-02T12:55:02","modified_gmt":"2022-03-02T11:55:02","slug":"andorra-and-the-gdpr","status":"publish","type":"post","link":"https:\/\/www.rosello-mallol.com\/en\/andorra-and-the-gdpr\/","title":{"rendered":"Andorra and the GDPR"},"content":{"rendered":"\n
Andorra has been on trend in recent weeks in the busy digital world. Famous youtubers <\/a>have decided to relocate their activity there due to the obvious tax benefits offered by this small country in the Pyrenees. Beyond these media cases and given the boom that all online businesses are experiencing due to the restrictions of the pandemic, it seems logical that many companies whose exclusive medium is the Internet, can make the same approaches and if, at the end, you are selling online, \u00bfwhat prevents you from having your company\u2019s registered office somewhere with a more favourable tax system? This is not, however, the subject of this post, but instead what happens with GDPR compliance in this type of cases, bearing in mind that Andorra is not a Community country and that the GDPR is an EU regulation. If I do something like this, do I have to comply with the GDPR?<\/p>\n\n\n\n As indicated, Andorra does not belong to the EU but this does not mean that its legal activity is highly influenced by Community laws:<\/p>\n\n\n\n So let’s get to it; We will try to answer this question with practical cases, some more theoretical than others, but in an attempt to be as comprehensible as possible:<\/p>\n\n\n\n The GDPR applies if …<\/span><\/p>\n\n\n\n \u2026 I have a business in Andorra and I only collect Andorran data<\/span>?<\/p>\n\n\n\n No. The GDPR does not apply to non-EU businesses that do not market their products or services in the EU.<\/p>\n\n\n\n \u2026 I have an online business domiciled in the EU and I only sell to Andorrans<\/span>?<\/p>\n\n\n\n Yes. EU-based companies are obliged to comply with the GDPR; the fact that in this hypothetical case that only Andorran data will be processed from this business, does not exempt it from applying the GDPR. This rule makes it clear that it will apply regardless of the “nationality or residence” of the data subject.<\/p>\n\n\n\n \u2026 I have an online business domiciled in Andorra and I sell to EU citizens<\/span>?<\/p>\n\n\n\n Yes. The GDPR expressly includes within its territorial scope of application, Art. 3.2.b), non-EU companies that offer goods or products to EU consumers and – get this – even if they are not products or payment services. <\/p>\n\n\n\n Therefore, if you sell products or market services to EU citizens, you must comply with the GDPR, which is also the case if you have an online business through which their data is collected (without selling them anything).<\/p>\n\n\n\n In conclusion, the eventual installation of online businesses in Andorra, if the customer or user is still a Community citizen, does not prevent compliance with the GDPR, so be careful with this before jumping to the other side of the wall…<\/p>\n\n\n\n If you have any doubts about this or any other issue, please contact<\/a> us!<\/p>\n\n\n\n <\/p> The legal situation in Andorra<\/strong><\/h2>\n\n\n\n
If I start a business in Andorra, must I comply with the GDPR?<\/strong><\/h2>\n\n\n\n
<\/ul><\/div>\n