[kevsim]

The typical way would be to report it to the data protection authority in the European country in which you reside. Then they'll decide whether to take any action.