Since this is a private company, you can always report that to your local authority.

Here's a list of emails/sites for contacting your local authority and take action.

https://edpb.europa.eu/about-edpb/about-edpb/members_en