Lodging a complaint
You have an unconditional right under GDPR Art. 77 to lodge a complaint with the data-protection authority of the EU member state where you live, work, or where the alleged infringement took place. This applies even if you have not contacted us first — but in practice, the DPO is faster, and we'd rather fix the issue directly.
Effective 2026-04-30.
First step: contact our DPO
Email dpo@buronia.com. We acknowledge within 72 hours, respond substantively within 30 days. Most concerns we resolve without escalation.
Supervisory authorities
| Country | Authority | Direct complaint |
|---|---|---|
| 🇩🇪 Germany | Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI) | bfdi.bund.de |
| 🇪🇸 Spain | Agencia Española de Protección de Datos (AEPD) | aepd.es |
| 🇫🇮 Finland | Tietosuojavaltuutetun toimisto | tietosuoja.fi |
| 🇱🇹 Lithuania | Valstybinė duomenų apsaugos inspekcija (VDAI) | vdai.lrv.lt |
One-stop shop
Because Buronia operates cross-border in the EU, the lead supervisory authority can in some cases be one specific DPA coordinating with others (the "one-stop shop" mechanism in GDPR Art. 56). You can still file with your national authority — they will route appropriately.
EU-level complaints
If you are dissatisfied with the national DPA's handling, you can escalate to the European Data Protection Board: edpb.europa.eu. The European Ombudsman handles complaints about EU institutions and is not the right forum for complaints about Buronia.
What we do when a complaint is filed
The supervisory authority opens an investigation and may ask Buronia for information. We cooperate fully, supply the records they request within their deadlines, and inform you of the outcome. Filing a complaint does not affect any other service you receive from Buronia.