OP is a business customer, not an individual. GDPR rights apply to individuals, not companies.