If the digital services provider doesn't have an office or a representative in Poland, the competent authority based in other EU member state is in charge, (Directive (EU) 2016/1148, art 18 (2)).Under Article 27 of the GDPR, representatives of controllers or processors not established in the EU must be established in one of the Member States.