[chopin]

GDPR doesn't give you any legal option aside from asking your data protection authority.

[danieka]

Check out Art. 82, right to compensation. I would also be disappointed if this did not turn into a class action.