- request a full copy of any information held about you (article 15)
- withdraw consent and request deletion of any information about you (article 17)
- object any further processing of your data, including making it public (article 21)
Playing with people's data like this is not okay and personally I plan to take them to court if they don't comply.