According to art 3a, if a digital service provider is not based in the EU and has not appointed a representative in another EU member state, it is obliged to appoint a representative in the Czech Republic, Directive (EU) 2016/1148, Art 18(2).Under Article 27 of the GDPR, representatives of controllers or processors not established in the EU must be established in one of the Member States.