[PeterisP]

There's no need to perish on that hill or confront anyone, a report to the local data protection agency should suffice to get it investigated and corrected, although it may take quite some time.