Since he spent Euros, he must be somewhere on the EU. This is a GDPR violation and I bet he can reach actual people that are able to help by mailing their GDPR

Since he spent Euros, he must be somewhere on the EU. This is a GDPR violation and I bet he can reach actual people that are able to help by mailing their GDPR legal contact.