This. Each country have an administrative entity (in France, that’s CNIL, Commission National sur l’Informatique et les Libertés - National Commission on computer and liberties, roughly) in charge of this kind oh things. You can lodge a complaint to them and they will investigate and eventually, if needed (don’t think it was ever needed, they can bring the problem to a judge.