What is the risk of "getting hit"?

Question

Law in IT

Hello.
There is a local (within the same city, regional center) pizzeria with the desire to host their site not on servers in the Russian Federation (in the mind of digital ocean). Since orders and their processing are carried out on the site, the customer data is also stored there. Consequently, what is the probability of getting a fine for storing PD not in the territory of the Russian Federation?
I apologize if a similar question has been raised.

Answer 1

Excuse my French, but why the hell do pizzerias collect personal data? Tell your marketers "no, we won't deal with this bullshit". Well, or look for hosting in Russia.

Answer 2

Yes, no one will touch you if this is actually an ordinary pizzeria ... There are a lot of sites that grossly violate Federal Law-152 and Federal Law-149.
At least, if you do not transfer PD to third parties, there will be no questions ...
ps And what is the principled position to use foreign hosting? In Russia, there are much cheaper VPS's than on DO