¹Proceedings against a controller or a processor shall be brought before the courts of the Member State where the controller or processor has an establishment. ²Alternatively, such proceedings may be brought before the courts of the Member State where the data subject has his or her habitual residence, unless the controller or processor is a public authority of a Member State acting in the exercise of its public powers.