For proceedings against a controller or processor, the plaintiff should have the choice to bring the action before the courts of the Member States where the controller or processor has an establishment or where the data subject resides, unless the controller is a public authority of a Member State acting in the exercise of its public powers.
This recital of the General Data Protection Regulation clarifies article 79 GDPR (Right to an effective judicial remedy against a controller or processor).*