cross-posted from: https://lemmy.world/post/7204240

A few days ago I sent a GDPR request to some company to delete my personal data. They said to install their app and send a ticket from the app. The email was sent from the email address to which the account is registered. Is this even legal?

"Good day,

Thank you for contacting us regarding the deletion of your account.

Please contact us in the application to delete your account and verify your information.

If you have any further questions, we are at your disposal."