GDPR Representation: When Article 27 Applies