Complaints may be sent to the European Data Protection Supervisor. Give a GDPR consultant some billable hours, will you?