Recital 127

(127) Any supervisory authority that does not act as a lead supervisory authority should have jurisdiction over local cases where the controller or processor has organizational units in more than one Member State, but the subject matter of the processing in question relates only to processing carried out in a single Member State and only to data subjects in that single Member State, for example, where the processing of personal data of employees in a specific employment context in a Member State is involved. In such a case, the supervisory authority should immediately inform the lead supervisory authority of the matter. Upon receipt of the information, the lead supervisory authority should decide whether it will handle the case in accordance with the provisions of this Regulation on cooperation between the lead supervisory authority and other supervisory authorities concerned (the "comprehensive cooperation mechanism"), or whether it should be handled locally by the supervisory authority that informed it. In deciding whether to handle the case, the lead supervisory authority should take into account whether there is an organizational unit of the controller or processor in the Member State whose supervisory authority has provided it with information - to ensure effective enforcement of the decision against the controller or processor. If the lead supervisory authority decides to deal with a case, the supervisory authority that provided it with the information should be able to submit a draft decision, which the lead supervisory authority should take into account as much as possible when preparing its draft decision under the comprehensive cooperation mechanism.

Receive a free package of 4 tutorials and 4 e-learning trainings
The controller of your data is ODO 24 sp. z o. o.
Recital 127 of the preamble to the GDPR | ODO 24