A few days ago I sent a GDPR request to some company to delete my personal data. They said to install their app and send a ticket from the app. The email was sent from the email address to which the account is registered. Is this even legal?

  • _TheNardDog_@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    ·
    edit-2
    10 months ago

    No, it’s not at all legal for the company to do this. Reply and remind them they have one calendar month to comply from the date of your original request, otherwise you will make a complaint to which ever information regulator is correct for the juridiction they’re operating in.

    I’m a lawyer specialising in Data Privacy, reply here if you need more help on this one.

    Also feel free to name the company.

    • My Password Is 1234@lemmy.worldOP
      link
      fedilink
      arrow-up
      1
      ·
      edit-2
      10 months ago

      For now, I do not want to announce the name of this company publicly.

      If they don’t want to solve it amicably, then I will do so.

      • sanpo@sopuli.xyz
        link
        fedilink
        arrow-up
        2
        ·
        10 months ago

        They already said they don’t want to.

        They asked you to install the app on purpose, in hopes that you’ll decide it’s too much hassle and decide not to delete the account.

        • Scubus@sh.itjust.works
          link
          fedilink
          arrow-up
          1
          ·
          10 months ago

          Think of the poor corporation! If they get punished for their illegal buisness practices, it’ll hurt the economy and people will be less inclined to start a small buisness. Didn’t you study piss down economics?