I asked them to delete my data, they said "Install our app"
A few days ago I sent a GDPR request to some company to delete my personal data. They said to install their app and send a ticket from the app.
The email was sent from the email address to which the account is registered.
Is this even legal?
Can you write an official letter for removal of my private data for (company name) and (my name). Use a strong tone and legalese langage. Make sure you verify the timeframe they must respond (act with 30 days of this letter) and any other specific to make sure they know what my rights are and that I am serious. List the typical types of data they might have on me. And write in a 1800L lexile scale.
You can ask the text without name and write it after... I mean really? Search on hugging face for free LLM (that's the kind of ai of chat gpt) and try it for free without registration there is that's suuuch a thing
It doesn't matter since none is needed for this. I understand that the goal is to add filler with intimidating legalese, but I doubt that customer "support" is going to react as they expect.
It would be complete bullshit, but clearly the people on the other end would be too stupid to recognize it as such. So there's really no reason not to do it as long as you're aware that it's an empty threat.
I think you could achieve the same without bullshitting by simply saying "Please delete my data within 30 days or I will report you to the relevant authorities", but each to their own.
Subject: Formal Request for Immediate Erasure of Personal Data
Dear [Recipient Name],
I am writing to formally request the immediate erasure of all personal data pertaining to myself, [Your Name], from your systems in accordance with Article 17 of the General Data Protection Regulation (GDPR). This entails the deletion of my data from your databases and any other processing systems within your organization.
The categories of data I am referring to include, but are not limited to:
Personal identification information (name, address, email, phone number)
Professional data (job title, employer, professional contacts)
Financial data (bank account details, transaction history)
Technical data (IP addresses, cookie data, browsing history)
Any other category of data related to me.
You are hereby instructed to ensure this erasure without undue delay and, in any event, within thirty (30) days of receipt of this letter. Failure to comply within this timeframe will compel me to take further legal action to enforce my rights under the GDPR.
I further request that you provide written confirmation upon successful deletion of my data, indicating that no personal data pertaining to me remains in your possession, custody or control.
In the event that you require any additional information to comply with this request, you may contact me via email or phone, as provided above.
Thank you for your prompt attention to this serious matter.
Sincerely,
[Your Signature (if sending a hard copy)]
[Your Name (printed)]