A few days ago I sent a GDPR request to some company to delete my personal data. They said to install their app and send a ticket from the app. The email was sent from the email address to which the account is registered. Is this even legal?

  • 7heo@lemmy.ml
    link
    fedilink
    arrow-up
    103
    arrow-down
    1
    ·
    edit-2
    10 months ago

    It is not legal. Please report it to your local Data Protection Authority (DPA).

    Something along the lines of “I contacted X for a GDPR request via email, using the address associated with my user account. Their answer is requiring me to install their app, and agree to several new legally binding ToSes in the process.”

    Edit: due to the recent renaming of a certain (less and less) popular app, I need to add a disclaimer: I meant “X” as a variable to substitute, not as a verbatim name… Although I would not be surprised if it were the “X social platform, formerly known as twitter” (AKA “XSPFKT”) we are talking about.