I asked them to delete my data, they said "Install our app"
A few days ago I sent a GDPR request to some company to delete my personal data. They said to install their app and send a ticket from the app.
The email was sent from the email address to which the account is registered.
Is this even legal?