Actions against the controller or the processor

(1) For actions of the person concerned against a controller or a processor for a breach of data-protection provisions within the scope of application of Regulation (EU) 2016/679, or of the rights of the person concerned contained in it, in the processing of social data in connection with a matter under section 51(1) and (2) of the Social Courts Act, the legal route to the courts of social jurisdiction is open.
(2) In addition to section 57(3) of the Social Courts Act, the social court in whose district an establishment of the controller or processor is located has local jurisdiction for actions under subsection (1).
(3) Where the controller or processor has named a representative under Article 27(1) of Regulation (EU) 2016/679, that representative is also deemed authorised to accept service in social-court proceedings under subsection (1). Section 63(3) of the Social Courts Act remains unaffected.