cross-posted from: https://lemmy.world/post/7204240

A few days ago I sent a GDPR request to some company to delete my personal data. They said to install their app and send a ticket from the app. The email was sent from the email address to which the account is registered. Is this even legal?

"Good day,

Thank you for contacting us regarding the deletion of your account.

Please contact us in the application to delete your account and verify your information.

If you have any further questions, we are at your disposal."

  • Karyoplasma@discuss.tchncs.de
    link
    fedilink
    arrow-up
    86
    ·
    edit-2
    2 days ago

    They’ve requested you messaging them in-app to verify the account identity (they are allowed to do that). Tell them that you sent your GDPR request from the same email you registered the account with and that should be enough, since an in-app message is basically just an email verification. If they don’t comply, file a complaint.

  • jonathan@lemmy.zip
    link
    fedilink
    arrow-up
    48
    ·
    edit-2
    2 days ago

    Ask them who their nominated data controller is, then email that person. It’s worked very well for me in the past, like they automatically flagged them for the words “data controller”.

    • hikaru755@lemmy.world
      link
      fedilink
      arrow-up
      9
      ·
      2 days ago

      I think you’re talking about the “data protection officer”, not “data controller”. The first one is a designated person within the company, the second one the company itself (at least for B2C software companies, usually)

      But also, be aware they might not have a BPO, depending on company size they might not need one

  • Taser@lemmy.dbzer0.com
    link
    fedilink
    arrow-up
    35
    ·
    edit-2
    2 days ago

    Pretty crap crappy, if true.

    You’re allowed to out the company, ya know, “name and shame?”

    As of right now this is fanfic.

    • Railcar8095@lemm.ee
      link
      fedilink
      arrow-up
      44
      ·
      2 days ago

      They will just kick you out, not remove your data.

      Source: I tried that with homeland security

    • henfredemars@infosec.pub
      link
      fedilink
      arrow-up
      1
      arrow-down
      9
      ·
      2 days ago

      Send them porn in their ticket system. Even if it has to be text-only, I’m sure you can find some suitably disturbing and graphic fanfiction.

      • gaael@lemm.ee
        link
        fedilink
        arrow-up
        7
        ·
        2 days ago

        The people answering your requests are usually not the ones making the anti-consumer policies and they don’t deserve abuse. Sending unsolicited porn material is abuse.
        Please remember that customer service is often a shit job with a shit pay that people do because they need a job to afford rent and food and don’t vent your frustration on them.

      • Midnight Wolf@lemmy.world
        link
        fedilink
        arrow-up
        11
        arrow-down
        3
        ·
        edit-2
        2 days ago

        RAWR! x3 nuzzles! pounces on you uwu you so warm (Ooo) Couldn’t help but notice your bulge from across the floor Nuzzles yo’ necky wecky-tilde murr-tilde hehe Unzips yo baggy ass pants, oof baby you so musky Take me home, pet me, ’n’ make me yours and don’t forget to stuff me! See me wag my widdle baby tail all for your buldgy-wuldgy! Kissies ‘n’ lickies yo neck I hope daddy likies Nuzzles ‘n’ wuzzles yo chest (yuh) I be (yeah) gettin’ thirsty; Hey, I got a little itch, you think you can help me? Only seven inches long uwu, PLEASE ADOPT ME Paws on your buldge as I lick my lips (UwU punish me please) ’Boutta hit ’em with this furry shit (He don’t see it comin’)