Where is your organisation’s main establishment in the EU or EEA? Usually your EU head office, or wherever decisions about the processing are really made. Choose a countryWe have no establishment in the EU or EEA

What kind of organisation are you?

A company or other private body A public authority, or acting by law or in the public interest

How far does the processing reach?

Mainly one country Establishments in several EU countries, or people in several countries substantially affected

This finds the authority under the GDPR’s own rules. Cookie and marketing rules (ePrivacy) are enforced nationally and do not use the one-stop shop, so a cookie case can be handled by the authority of any country whose users are affected. Not legal advice.