In which case Canadian company needs EU representative? 

Article 27 – Representatives of controllers or processors not established in the Union states that if a data controller or data processor is not established in the European Union, and GDPR applies to it, then it must designate in writing a representative in the Union, established in one of the Member States where the data subjects, whose personal data are processed in relation to the offering of goods or services to them, or whose behavior is monitored, are. Basically, if the Canadian company offers goods or services to people in the EU or if it monitors behavior of people in the EU, GDPR applies to it and must designate a representative in the Union.

Part of our EU GDPR Documentation Toolkit, we have a template for an Agreement for the appointment of an EU representative under article 27 GDPR, which can also be purchased separately.

Please also consult these links:

• Article 3 GDPR - Territorial scope: https://advisera.com/eugdpracademy/gdpr/territorial-scope/
• Article 27 GDPR - Representatives of controllers or processors not established in the Union: https://advisera.com/eugdpracademy/gdpr/representatives-of-controllers-or-processors-not-established-in-the-union/
• EU GDPR Documentation Toolkit: https://advisera.com/eugdpracademy/eu-gdpr-documentation-toolkit/
• Agreement for the Appointment of an EU Representative: https://advisera.com/eugdpracademy/documentation/agreement-for-the-appointment-of-an-eu-representative/