I sent two IT webshop companies an erasure request. I also informed them of a security vulnerability in the way they processed my invoices and I objected to them processing my invoice data in this way. The companies repeatedly refused to act on my GDPR requests and they failed to acknowledge the vulnerability. So I took them both to court.
