where could this heavy privacy infringement be reported in EU?

should we all report this illegal behaviour and contract terms?