Article 58 GDPR. Powers
1. Each supervisory authority shall have all of the following investigative powers:
(e) to obtain, from the controller and the processor, access to all personal data and to all information necessary for the performance of its tasks;
(f) to obtain access to any premises of the controller and the processor, including to any data processing equipment and means, in accordance with Union or Member State procedural law.
[…]