You can send GDPR request anywhere they communicate with customers. Even via Facebook. They have to respond in 30 days. It's their business to route the messag

You can send GDPR request anywhere they communicate with customers. Even via Facebook. They have to respond in 30 days. It's their business to route the message where it belongs/can be processed. You don't have to hunt for their DPO. Keep the screenshots/records of your attempts at communication.