Forgotten? It's a basic GDPR article (article 20) that every somewhat serious EU company know.

Link bait by a company making their profit of GDPR confusion.