{"id":19979,"date":"2026-09-15T23:53:00","date_gmt":"2026-09-15T22:53:00","guid":{"rendered":"https:\/\/www.rosello-mallol.com\/?p=19979"},"modified":"2026-09-15T06:26:37","modified_gmt":"2026-09-15T05:26:37","slug":"gdpr-andorra","status":"publish","type":"post","link":"https:\/\/www.rosello-mallol.com\/en\/gdpr-andorra\/","title":{"rendered":"When Does the GDPR Apply to an Andorran Company?"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>GDPR and Andorra<\/strong> may seem like two concepts that are not necessarily connected. Andorra is not a member of the European Union and has its own data protection legislation.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">So, does an Andorran company have to comply with the General Data Protection Regulation (GDPR)?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The short answer is: <strong>it depends<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The fact that a company is established in Andorra does not automatically mean that the GDPR does not apply to it. Under certain circumstances, a company established outside the European Union may fall within the territorial scope of the Regulation.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">And this can have important consequences, including the obligation to <strong>appoint a representative in the European Union<\/strong>.<\/p>\n\n\n\n<h2 id=\"h-can-the-gdpr-apply-to-an-andorran-company\" class=\"wp-block-heading\">Can the GDPR apply to an Andorran company?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Yes.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Article 3 of the GDPR establishes when the Regulation applies from a territorial perspective.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For a company established in Andorra \u2014 that is, outside the European Union \u2014 particular attention should be paid to Article 3(2).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Broadly speaking, the GDPR may apply when a company established outside the EU processes personal data relating to individuals who are in the European Union, where the processing activities are related to:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>the <strong>offering of goods or services<\/strong> to those individuals; or<\/li>\n\n\n\n<li>the <strong>monitoring of their behaviour<\/strong>, where their behaviour takes place within the European Union.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Therefore, the first question should not simply be where the company is established.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It is necessary to analyse <strong>what the company does, who it targets with its products or services and what personal data it processes<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The European Data Protection Board (EDPB) has developed these criteria in its Guidelines 3\/2018 on the territorial scope of the GDPR.<\/p>\n\n\n\n<h2 id=\"h-does-an-andorran-company-selling-to-customers-in-spain-have-to-comply-with-the-gdpr\" class=\"wp-block-heading\">Does an Andorran company selling to customers in Spain have to comply with the GDPR?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">It may.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For example, imagine a company established in Andorra that sells products online.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If the company specifically targets consumers located in Spain, France or other EU Member States, it will be necessary to assess whether this activity constitutes an <strong>offering of goods or services to individuals in the EU<\/strong> for the purposes of Article 3(2) of the GDPR.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Simply having a website that can technically be accessed from Spain is not enough.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This is an important distinction.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The fact that someone located in Spain can access an Andorran company&#8217;s website does not automatically mean that the company is offering its services in Spain.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The relevant question is whether there are indications that the company&#8217;s activities are <strong>directed towards individuals in the European Union<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Factors such as the market targeted by the company, its advertising activities, the languages and currencies used, its contractual terms, whether it offers deliveries to particular countries and other elements of its commercial activity may therefore need to be considered.<\/p>\n\n\n\n<h2 id=\"h-what-if-the-company-monitors-users-in-the-eu\" class=\"wp-block-heading\">What if the company monitors users in the EU?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The GDPR may also apply in this situation.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Article 3(2) covers processing activities related to the <strong>monitoring of the behaviour of individuals within the European Union<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This may be particularly relevant to certain digital business models.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For example, an Andorran company may need to assess the application of Article 3(2) if it systematically tracks users through certain technologies, identifiers, profiling tools or analytics systems.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Again, the relevant issue is not simply where the company is incorporated.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It is necessary to examine <strong>what processing takes place and where the individuals whose data are being processed are located<\/strong>.<\/p>\n\n\n\n<h2 id=\"h-what-happens-if-the-gdpr-applies\" class=\"wp-block-heading\">What happens if the GDPR applies?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">If an Andorran company falls within the territorial scope of the GDPR, it must comply with the obligations applicable to the processing activities it carries out.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Depending on the circumstances, these may include:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>identifying the appropriate legal basis for processing;<\/li>\n\n\n\n<li>providing the required privacy information;<\/li>\n\n\n\n<li>facilitating the exercise of data subject rights;<\/li>\n\n\n\n<li>entering into appropriate agreements with data processors;<\/li>\n\n\n\n<li>implementing appropriate security measures;<\/li>\n\n\n\n<li>maintaining records of processing activities;<\/li>\n\n\n\n<li>complying with international data transfer requirements;<\/li>\n\n\n\n<li>managing personal data breaches;<\/li>\n\n\n\n<li>carrying out data protection impact assessments where required; and<\/li>\n\n\n\n<li>appointing a Data Protection Officer (DPO), where applicable.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">There is, however, another obligation that can easily be overlooked by companies established outside the European Union.<\/p>\n\n\n\n<h2 id=\"h-the-obligation-to-appoint-a-representative-in-the-european-union\" class=\"wp-block-heading\">The obligation to appoint a representative in the European Union<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Article 27 of the GDPR provides that, in certain circumstances, companies established outside the EU that are subject to the GDPR must <strong>appoint a representative in the European Union<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Therefore, an Andorran company that falls within Article 3(2) must assess whether it is required to appoint such a representative.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The representative must be established in one of the EU Member States where the individuals whose personal data are processed are located, in connection with the offering of goods or services or the monitoring of their behaviour.<\/p>\n\n\n\n<h3 id=\"h-what-does-the-eu-representative-do\" class=\"wp-block-heading\">What does the EU representative do?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The representative acts as a <strong>point of contact<\/strong> between the non-EU company, data protection authorities and individuals whose personal data are being processed.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Among other things, the representative may receive communications from supervisory authorities and data subjects and provide the information necessary to demonstrate compliance with the GDPR.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It is important, however, not to confuse the representative&#8217;s role with the company&#8217;s responsibility.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Appointing an EU representative does not transfer responsibility for GDPR compliance.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The controller or processor established outside the EU remains responsible for complying with the obligations applicable to it.<\/p>\n\n\n\n<h2 id=\"h-does-every-andorran-company-need-an-eu-representative\" class=\"wp-block-heading\">Does every Andorran company need an EU representative?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">No.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Article 27 provides for certain exceptions.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For example, the obligation does not apply where the processing is occasional, does not involve certain categories of data on a large scale, and is unlikely to result in a risk to the rights and freedoms of individuals.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For this reason, <strong>the obligation to appoint a representative cannot be determined solely by the fact that an Andorran company has European customers<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The company&#8217;s specific activities and processing operations must be assessed.<\/p>\n\n\n\n<h2 id=\"h-an-eu-representative-is-not-the-same-as-a-data-protection-officer\" class=\"wp-block-heading\">An EU representative is not the same as a Data Protection Officer<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">These two roles are often confused, but they serve different purposes.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The <strong>EU representative<\/strong> is a specific requirement that may apply to certain controllers and processors established outside the EU that fall within the GDPR.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The <strong>Data Protection Officer (DPO)<\/strong> is a different role that certain organisations must appoint when the circumstances set out in Article 37 of the GDPR apply.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Therefore:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>EU representative \u2260 Data Protection Officer.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">An Andorran company may need to assess whether it must appoint one, the other or, in certain circumstances, both.<\/p>\n\n\n\n<h2 id=\"h-what-about-andorra-s-own-data-protection-legislation\" class=\"wp-block-heading\">What about Andorra&#8217;s own data protection legislation?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The fact that an Andorran company may be subject to the GDPR does not mean that Andorran data protection legislation ceases to apply.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Andorra has its own data protection framework, principally based on <strong>Qualified Law 29\/2021 on the Protection of Personal Data<\/strong>, and it has its own supervisory authority, the <strong>Andorran Data Protection Agency (APDA)<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">An Andorran company operating internationally should therefore carefully assess <strong>which legal requirements apply to each processing activity<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In some cases, the company may need to comply with both Andorran data protection requirements and GDPR requirements.<\/p>\n\n\n\n<h2 id=\"h-what-about-transfers-of-personal-data-between-the-eu-and-andorra\" class=\"wp-block-heading\">What about transfers of personal data between the EU and Andorra?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This issue should be distinguished from the territorial scope of the GDPR.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Andorra benefits from a <strong><a href=\"https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/?uri=CELEX%3A32010D0625\" data-type=\"link\" data-id=\"https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/?uri=CELEX%3A32010D0625\" target=\"_blank\" rel=\"noreferrer noopener\">European Commission adequacy decision<\/a><\/strong>, meaning that transfers of personal data from the European Union to Andorra can generally rely on this adequacy mechanism.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The fact that an Andorran company receives personal data from the EU therefore does not, by itself, mean that additional safeguards for international transfers are required.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">However, two separate questions should be distinguished:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>First, whether a transfer of personal data to Andorra is lawful.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Second, whether the Andorran company itself falls within the territorial scope of the GDPR.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">These are related but legally distinct questions.<\/p>\n\n\n\n<h2 id=\"h-so-when-does-the-gdpr-apply-to-an-andorran-company\" class=\"wp-block-heading\">So, when does the GDPR apply to an Andorran company?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The key points can be summarised as follows:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Company established in Andorra + activity exclusively targeting the Andorran market \u2192<\/strong> generally, Andorran data protection law will apply.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Company established in Andorra + goods or services specifically offered to individuals in the EU \u2192<\/strong> the GDPR may apply.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Company established in Andorra + monitoring the behaviour of individuals in the EU \u2192<\/strong> the GDPR may apply.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Andorran company subject to the GDPR under Article 3(2) \u2192<\/strong> it should assess, among other obligations, whether it must appoint an <strong>EU representative<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Establishing a company in Andorra therefore <strong>does not automatically exclude the application of the GDPR<\/strong> when the company&#8217;s activities target the European market or involve certain processing activities relating to individuals in the EU.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The right question is not simply:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">\u201cWhere is my company established?\u201d<\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">It is:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\"><strong>\u201cWho do I target, what personal data do I process, and where are the individuals whose data I process located?\u201d<\/strong><\/p>\n<\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">That is the starting point for determining whether an Andorran company must also comply with the GDPR.<\/p>\n\n\n\n<h2 id=\"h-further-information\" class=\"wp-block-heading\">Further information<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">For more information on this topic, see our article <a href=\"https:\/\/www.rosello-mallol.com\/en\/andorra-and-the-gdpr\/\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>GDPR and Andorra<\/strong><\/a>, where we examine the relationship between Andorran data protection legislation and the European GDPR.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Author: <strong>Victor Rosell\u00f3<\/strong>, Lawyer and Data Protection Consultant.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you need help writing Data Protection regulations, contact us!<\/p>\n\n\n\n<div class=\"wp-block-leadin-hubspot-form-block\">\n\t\t\t<div\n\t\t\tclass=\"hs-form-frame\"\n\t\t\tdata-region=\"eu1\"\n\t\t\tdata-form-id=\"28b73cc7-0207-4adf-9447-8c2a66c1d63a\"\n\t\t\tdata-portal-id=\"146198203\"\n\t\t\t >\n\t\t\t<\/div>\n\t\t\t<\/div>\n\n\n\n<h6 id=\"h-information-on-data-protection\" class=\"wp-block-heading has-medium-font-size\">Information on data protection<\/h6>\n\n\n\n<p class=\"wp-block-paragraph\"><small><strong>Company name<\/strong><br><strong>LEGAL IT GLOBAL 2017, SLP<\/strong><br><strong>Purpose<br><\/strong>Providing the service.<br>Sending the newsletter.<br><strong>Legal basis<br><\/strong>Compliance with the service provision.<\/small> <small>Consent.<br><strong>Recipients<\/strong><br>Your data will not be shared with any third party, except service providers with which we have signed a valid service agreement.<\/small><br><small><strong>Rights<\/strong><br>You may access, rectify or delete your data and exercise the rights indicated in our Privacy Policy.<\/small><br><small><strong>Further information<\/strong><br>See the&nbsp;<a href=\"https:\/\/www.rosello-mallol.com\/en\/policy-privacy\/\" target=\"_blank\" rel=\"noreferrer noopener\">Privacy Policy<\/a>.<\/small><\/p>\n","protected":false},"excerpt":{"rendered":"<p>GDPR and Andorra may seem like two concepts that are not necessarily connected. Andorra is not a member of the European Union and has its own data protection legislation. So, does an Andorran company have to comply with the General Data Protection Regulation (GDPR)? The short answer is: it depends. The fact that a company [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":19969,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"content-type":"","_joinchat":[],"footnotes":""},"categories":[246],"tags":[509,1064,1372,395,1124,394],"class_list":["post-19979","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-andorra-2","tag-andorran-data-protection-agency","tag-data-protection-andorra","tag-gdpr-2","tag-gdpr-compliance","tag-rgpd-es-en"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.4 (Yoast SEO v28.5) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>When Does the GDPR Apply to an Andorran Company? | Rosell\u00f3 Mallol<\/title>\n<meta name=\"description\" content=\"GDPR Andorra: when does it apply to Andorran companies and when is an EU representative required?\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.rosello-mallol.com\/en\/gdpr-andorra\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"When Does the GDPR Apply to an Andorran Company?\" \/>\n<meta property=\"og:description\" content=\"GDPR and Andorra may seem like two concepts that are not necessarily connected. Andorra is not a member of the European Union and has its own data\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.rosello-mallol.com\/en\/gdpr-andorra\/\" \/>\n<meta property=\"og:site_name\" content=\"Rosell\u00f3 Mallol\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-15T22:53:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.rosello-mallol.com\/wp-content\/uploads\/ChatGPT-Image-15-de-set.-del-2026-07_01_05-1024x683.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"683\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"V\u00edctor Rosello Mallol\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@vic_rosello\" \/>\n<meta name=\"twitter:site\" content=\"@vic_rosello\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"V\u00edctor Rosello Mallol\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minutes\" \/>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"When Does the GDPR Apply to an Andorran Company? | Rosell\u00f3 Mallol","description":"GDPR Andorra: when does it apply to Andorran companies and when is an EU representative required?","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.rosello-mallol.com\/en\/gdpr-andorra\/","og_locale":"en_US","og_type":"article","og_title":"When Does the GDPR Apply to an Andorran Company?","og_description":"GDPR and Andorra may seem like two concepts that are not necessarily connected. Andorra is not a member of the European Union and has its own data","og_url":"https:\/\/www.rosello-mallol.com\/en\/gdpr-andorra\/","og_site_name":"Rosell\u00f3 Mallol","article_published_time":"2026-09-15T22:53:00+00:00","og_image":[{"width":1024,"height":683,"url":"https:\/\/www.rosello-mallol.com\/wp-content\/uploads\/ChatGPT-Image-15-de-set.-del-2026-07_01_05-1024x683.png","type":"image\/png"}],"author":"V\u00edctor Rosello Mallol","twitter_card":"summary_large_image","twitter_creator":"@vic_rosello","twitter_site":"@vic_rosello","twitter_misc":{"Written by":"V\u00edctor Rosello Mallol","Est. reading time":"9 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.rosello-mallol.com\/en\/gdpr-andorra\/#article","isPartOf":{"@id":"https:\/\/www.rosello-mallol.com\/en\/gdpr-andorra\/"},"author":{"name":"V\u00edctor Rosello Mallol","@id":"https:\/\/www.rosello-mallol.com\/en\/#\/schema\/person\/7fa3cf4f56820cf83675a0e692ca85d6"},"headline":"When Does the GDPR Apply to an Andorran Company?","datePublished":"2026-09-15T22:53:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.rosello-mallol.com\/en\/gdpr-andorra\/"},"wordCount":1570,"publisher":{"@id":"https:\/\/www.rosello-mallol.com\/en\/#organization"},"image":{"@id":"https:\/\/www.rosello-mallol.com\/en\/gdpr-andorra\/#primaryimage"},"thumbnailUrl":"https:\/\/www.rosello-mallol.com\/wp-content\/uploads\/ChatGPT-Image-15-de-set.-del-2026-07_01_05.png","keywords":["Andorra","Andorran Data Protection Agency","Data protection Andorra","gdpr","GDPR compliance","RGPD"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.rosello-mallol.com\/en\/gdpr-andorra\/","url":"https:\/\/www.rosello-mallol.com\/en\/gdpr-andorra\/","name":"When Does the GDPR Apply to an Andorran Company? | Rosell\u00f3 Mallol","isPartOf":{"@id":"https:\/\/www.rosello-mallol.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.rosello-mallol.com\/en\/gdpr-andorra\/#primaryimage"},"image":{"@id":"https:\/\/www.rosello-mallol.com\/en\/gdpr-andorra\/#primaryimage"},"thumbnailUrl":"https:\/\/www.rosello-mallol.com\/wp-content\/uploads\/ChatGPT-Image-15-de-set.-del-2026-07_01_05.png","datePublished":"2026-09-15T22:53:00+00:00","description":"GDPR Andorra: when does it apply to Andorran companies and when is an EU representative required?","breadcrumb":{"@id":"https:\/\/www.rosello-mallol.com\/en\/gdpr-andorra\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.rosello-mallol.com\/en\/gdpr-andorra\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.rosello-mallol.com\/en\/gdpr-andorra\/#primaryimage","url":"https:\/\/www.rosello-mallol.com\/wp-content\/uploads\/ChatGPT-Image-15-de-set.-del-2026-07_01_05.png","contentUrl":"https:\/\/www.rosello-mallol.com\/wp-content\/uploads\/ChatGPT-Image-15-de-set.-del-2026-07_01_05.png","width":1536,"height":1024,"caption":"Andorra RGPD"},{"@type":"BreadcrumbList","@id":"https:\/\/www.rosello-mallol.com\/en\/gdpr-andorra\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Inici","item":"https:\/\/www.rosello-mallol.com\/en\/"},{"@type":"ListItem","position":2,"name":"When Does the GDPR Apply to an Andorran Company?"}]},{"@type":"WebSite","@id":"https:\/\/www.rosello-mallol.com\/en\/#website","url":"https:\/\/www.rosello-mallol.com\/en\/","name":"Rosell\u00f3 Mallol","description":"Despatx advocats experts en TIC i Protecci\u00f3 de dades","publisher":{"@id":"https:\/\/www.rosello-mallol.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.rosello-mallol.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.rosello-mallol.com\/en\/#organization","name":"Rosell\u00f3 Mallol - Advocats especialistes en dret digital","url":"https:\/\/www.rosello-mallol.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.rosello-mallol.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/www.rosello-mallol.com\/wp-content\/uploads\/logo-definitiu-web.png","contentUrl":"https:\/\/www.rosello-mallol.com\/wp-content\/uploads\/logo-definitiu-web.png","width":4000,"height":736,"caption":"Rosell\u00f3 Mallol - Advocats especialistes en dret digital"},"image":{"@id":"https:\/\/www.rosello-mallol.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/vic_rosello","https:\/\/www.instagram.com\/rosellomallol\/","https:\/\/www.linkedin.com\/in\/victorrosello\/","https:\/\/www.youtube.com\/channel\/UCxcqAdksWzsEaZ5UYoFJd0Q\/featured"]},{"@type":"Person","@id":"https:\/\/www.rosello-mallol.com\/en\/#\/schema\/person\/7fa3cf4f56820cf83675a0e692ca85d6","name":"V\u00edctor Rosello Mallol","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/f6654958ef1f1268656bc9e22a33eb75f1d1b2f74baf6b4715e291bdad9c5a5e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f6654958ef1f1268656bc9e22a33eb75f1d1b2f74baf6b4715e291bdad9c5a5e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f6654958ef1f1268656bc9e22a33eb75f1d1b2f74baf6b4715e291bdad9c5a5e?s=96&d=mm&r=g","caption":"V\u00edctor Rosello Mallol"},"url":"https:\/\/www.rosello-mallol.com\/en\/author\/victor-rosello\/"}]}},"jetpack_featured_media_url":"https:\/\/www.rosello-mallol.com\/wp-content\/uploads\/ChatGPT-Image-15-de-set.-del-2026-07_01_05.png","_links":{"self":[{"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/posts\/19979","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/comments?post=19979"}],"version-history":[{"count":1,"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/posts\/19979\/revisions"}],"predecessor-version":[{"id":19980,"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/posts\/19979\/revisions\/19980"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/media\/19969"}],"wp:attachment":[{"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/media?parent=19979"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/categories?post=19979"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/tags?post=19979"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}