[petre]

It's easier to report them to your state's data protection authority. If more people do so and the authority does its job, they will sue on your behalf, like the Norwegian Data Protection Authority did.