[pintxo]

In case you are in the EU, this is a pretty clear case of a GDPR violation [1], you might want to raise this with you data protection agency. (They might have no resources to assists you though)

[1] https://gdpr.eu/gdpr-consent-requirements/, https://gdpr.eu/Recital-42-Burden-of-proof-and-requirements-...