[miga]

If you are EU citizen or resident that is clearly a serious violation of GDPR. They should have deleted your data on request.

That said, I am not litigation specialist, so not sure how to proceed from here.