Their reply to my request to delete my data:
Thank you for your email requesting your right to be forgotten.
In order for us to carry out this request, we require proof of ID to ensure we only action requests made by the genuine owner of this email account. Acceptable forms of identification are,
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
[Matrix/Element]Dead
much thanks to @gary_host_laptop for the logo design :)
That’s just not true, I’ve put through a ton of requests in the past, for companies that had much more sensitive data (like payment details) and have never been asked for ID.
they need to identify you, not necessarily using your id card.
https://eur-lex.europa.eu/eli/reg/2016/679/oj#d1e2161-1-1
chapter 3, section 1, artcle 12, paragraphs 1 & 2.
Which they can by asking me to confirm who I am from the information they already have, the whole point is that they’re demanding I provide additional documentation to prove my identity, which is complete overkill* and something that I have never come across, and shouldn’t have to comply with.
But either way, if they need my ID before they’ll provide my info, asking for it to try and catch them on a mistake only to be met by the same barrier (them demanding ID), it isn’t going to work…
*(My brain can’t deal with that document you linked right now, but the relevant governing body here (ICO) say “The organisation might need you to prove your identity. However, they should only ask you for just enough information to be sure you are the right person.”