§ 44 BDSG
Actions against the controller or processor
(1)Actions by the data subject against a controller or a processor for a violation of data protection provisions within the scope of application of Regulation (EU) 2016/679 or of the rights of the data subject contained therein may be brought before the court of the place where the controller or processor has an establishment. Actions under the first sentence may also be brought before the court of the place where the data subject has his or her habitual residence.
(2)Subsection (1) shall not apply to actions against authorities which have acted in the exercise of their sovereign powers.
(3)Where the controller or processor has designated a representative pursuant to Article 27 Subsection (1) of Regulation (EU) 2016/679, that representative shall also be deemed authorised to accept service of documents in civil court proceedings under Subsection (1). Section 184 of the Code of Civil Procedure shall remain unaffected.