My point is not a legal one, it's moral point. If they're complied with the GDPR it means they even have processes and systems to give users their data; but didn't had the decency to respect their customer and atleast close their account in a much better way. The export law says you are banned to serve Iranian companies (!), Fine, but it definitely doesn't force you to f* your users in Iran!