@overheadhunter @johndisandonato Yes, this is definitely grounds for a complaint to the competent data protection authority. Which authority this is depends on the country of establishment of the company in question and the user who is making the complaint. Which website is this?