A few days ago I sent a GDPR request to some company to delete my personal data. They said to install their app and send a ticket from the app. The email was sent from the email address to which the account is registered. Is this even legal?
A few days ago I sent a GDPR request to some company to delete my personal data. They said to install their app and send a ticket from the app. The email was sent from the email address to which the account is registered. Is this even legal?
In the EU you don’t need to follow their process. Any GDPR request can be made to them through any channel and they must comply. If they don’t, then the next step is to file a complaint with your local data protection office, or the data protection office of the European country where the offending company is represented.