If you have exercised any of the rights to which you are entitled and which allow you to control your personal data (access, rectification, erasure, objection, restriction of processing and data portability) against the file controller and have received no reply, or the reply has been partially or entirely negative, you can present a claim to the Catalan Data Protection Authority.
If any of your other rights have been infringed or events have taken place that are contrary to data protection law, you may also make a complaint to the Authority.
Any person who has suffered material or non-material damage as a result of an infringement of data protection law has the right to receive compensation from the controller or processor for the damage suffered.
Where the organisation responsible for the loss or harm is a public administration, the claim must be brought in accordance with the government liability regime, provided in Law 40/2015, of 1 October, on the Legal Framework of the Public Sector.
In the case of files held by a private organisation, this right must be exercised under the ordinary jurisdiction, in other words, in the civil courts, before the competent judge.