Well I would advise everybody to file a complaint to their local DPA. Even if you can oppose the processing, they rely on legitimate interest (doubtful their ba

Well I would advise everybody to file a complaint to their local DPA. Even if you can oppose the processing, they rely on legitimate interest (doubtful their balancing act is acceptable) and they acquired the data in a legal way, they failed to inform the user of a second-hand data collection[1]. So If they have data on you, that is older than a month, and did not contacted you to inform you of it, you can file a complaint! [1]https://github.com/LINCnil/Guide-RGPD-du-developpeur/blob/master/12-Informer%20les%20utilisateurs.md https://github.com/LINCnil/Guide-RGPD-du-developpeur/blob/ma... (In French sorry)