The protection of personal data in public administration is subject to regulation according to the GDPR. For individual data subjects, however, it is absolutely crucial in what position the competent public authority is in the position of the controller of personal data, ie whether in a private law relationship or in the exercise of public power.
Accordingly, it is necessary to distinguish which procedural remedies, especially in damages, the data subject should choose to successfully defend his rights.