[krick]

Actually, I don't think this is covered by GDPR, but if you are European (which is implied by the fact you invoke GPPR) you can and should file a GDPR complaint to your local DPA.