This is just for demonstration purposes:
each supervisory authority is required on its territory to handle complaints
CJEU - C-311/18 - Schrems II, margin number 31.
"administrative fines up to 20 000 000 EUR, or in the case of an undertaking, up to 4 % of the total worldwide annual turnover of the preceding financial year, whichever is higher.
Common mistake: Because of the territorial scope of the GDPR, the citizenship of a data subject does not matter.
For example: A business might store data for longer for tax reasons. In such a case, data has to be deleted once those legal limits expire.
Everyone has the right to the protection of personal data concerning him or her.
Article 8, Charter of Fundamental Rights of the European Union
