The serious answer is to whatever your country's internet regulation agency is (assuming your in the EU, else you're out of luck). So for example, in France that would be the CNIL, in Germany it's the BfDI, etc.

[–] Nyfure@kbin.social 9 points 11 months ago

Just FYI Germany likes to make things more difficult, so with federation every sub-area is separated in many aspects and has own agencies for different things..

BfDI is only responsible for health and internet-provider institutions (and a few more).
Otherwise you can send it to the one where the company is located at, or always where you are located at. (they will forward it, but that can take a few months, so better to submit where it has to go).