A few days ago I sent a GDPR request to some company to delete my personal data. They said to install their app and send a ticket from the app. The email was sent from the email address to which the account is registered. Is this even legal?

  • _TheNardDog_@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    ·
    edit-2
    1 year ago

    No, it’s not at all legal for the company to do this. Reply and remind them they have one calendar month to comply from the date of your original request, otherwise you will make a complaint to which ever information regulator is correct for the juridiction they’re operating in.

    I’m a lawyer specialising in Data Privacy, reply here if you need more help on this one.

    Also feel free to name the company.

  • cosmicrookie@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    1 year ago

    Simply ask for the official company name, registration number and country as well as the prereree means of communication that they would like your local data authorities to contact them on.

    Also make a 1 star review, stating that you are in talks with your local gdpr authorities about their way of handling privacy.

    This worked for me last time a company asked me to download an app to delete my account

    • Gladaed@feddit.de
      link
      fedilink
      arrow-up
      0
      ·
      1 year ago

      Just because you content to a data stark foes not mean you consent to all data sharks.