yes, agree to the last lines about requesting data under GDPR. I would go further and sue the company collecting data against my knowledge