I recommend you contact your local data privacy office, as they usually take this quite seriously.

Fill in a formal complaint and watch the slow but inevitable unfold.