Skip to content
Emergency

Complaint to the data protection supervisory authority

If a company or authority processes your data unlawfully, ignores your requests or refuses information, you can complain to the competent data protection supervisory authority. It monitors compliance with data protection law.

Reach your next steps and the matching ready-made texts in just a few minutes, free of charge:

Create a letter →

Your chances of getting your money back

Every affected person has the right to complain to a data protection supervisory authority if they suspect a violation of the DSGVO (Art. 77 DSGVO). The complaint is free of charge.
The authority follows up on the complaint, can demand information, issue orders and impose fines. Independently of this, you can also assert your rights directly toward the controller and before a court.

What you should do now

  1. 1

    1. Document the incident

    Record which data was processed how and which requests went unanswered.

  2. 2

    2. Find the competent authority

    Determine the supervisory authority competent for you or the company.

  3. 3

    3. File the complaint

    Describe the facts and enclose evidence.

  4. 4

    4. Use your own rights

    In parallel, assert information, correction or deletion with the controller.

How to spot the scam

  • Information or deletion is refused despite a request.
  • Data is processed without a recognizable basis.
  • No timely reaction follows on data protection requests.

Frequently asked questions

When can I complain to the supervisory authority?

When you suspect that the processing of your personal data violates the DSGVO, for example with unlawful processing, refused information or ignored deletion requests (Art. 77 DSGVO). The complaint is free of charge and possible informally.

What can the authority do?

It examines the facts, can demand information and measures from the controller, issue orders and impose fines for violations. It informs you about the progress. But it does not fully replace an individual enforcement of your claims.

Which rights do I have in addition?

You can assert information, correction, deletion and objection directly toward the controller and, in case of damage, demand damages (Art. 82 DSGVO). The complaint to the authority and the direct legal enforcement stand alongside each other.

Take action now

We put together the ready-made texts and the right places to contact for you.

Create a letterCheck a suspicious message
More help: Emergency by phone · Act together · Right to a lawyer · All guides

General information for self-help, not legal advice (RDG). In case of a high loss or uncertainty: contact a consumer advice center or a lawyer.