Then report it to your government authority in charge of GDPR Enforcement. They suddenly will care very much about it