A legal entity that offers digital services in Sweden but that does not have its main place of establishment within the European Union and has not appointed a representative that is established in a member state where the services are offered, shall appoint such a representative (see Directive (EU) 2016/1148, Article 18(2)).Under Article 27 of the GDPR, representatives of controllers or processors not established in the EU must be established in one of the Member States.