cross-posted from: https://lemmy.world/post/7204240
A few days ago I sent a GDPR request to some company to delete my personal data. They said to install their app and send a ticket from the app. The email was sent from the email address to which the account is registered. Is this even legal?
"Good day,
Thank you for contacting us regarding the deletion of your account.
Please contact us in the application to delete your account and verify your information.
If you have any further questions, we are at your disposal."
They’ve requested you messaging them in-app to verify the account identity (they are allowed to do that). Tell them that you sent your GDPR request from the same email you registered the account with and that should be enough, since an in-app message is basically just an email verification. If they don’t comply, file a complaint.