I asked them to delete my data, they said "Install our app"
A few days ago I sent a GDPR request to some company to delete my personal data. They said to install their app and send a ticket from the app.
The email was sent from the email address to which the account is registered.
Is this even legal?
I had a simmilar situation with Nicehash (crypto shit company), but I had 2fa enabled and just wanted to unsubscribe from useless newsletters. They asked for a photo of me holding a paper with my personal information. Still didnt solve that, but some comments here might help, following