I have been closing accounts down for the past couple of months. So I feel somewhat practiced. This is what I usually do.
Step 1.) Create a “Request for Data Erasure” letter. I used Chat GPT to assist my writing a formal request. It highlighted my residence country, what section of the GDPR regulations I wanted to exercise and my right to do so (17 - Right of Erasure), my objection to processing my data, my objection to selling my data to third parties, my disagreement that they have legitimate interest in holding on to my data for further processing, my contact details, a placeholder (adjusted for whatever account I am submitting to) for identifying account information that will allow easier locating/processing (other emails, DOB, username, etc.).
Step 2.) Login into your account you want to delete and make note of:
email address they have on file
Name (especially if Alias is used)
Username
Other identifying information ( DOB, Address, Phone Numbers)
Step 3.) Don’t delete any information in account so they can identify you with the information you will provide them. But update address to your EU residence Country as broadly as you can.
Step 4.) Plug in details from “Step 2.)” in your “Step 1.)” letter to make it more personally identifiable for them.
Step 5.) Find a company email to send that letter to for creating a paper trail. Send it from the email account that you created your account with. Usually it is a “Data Protections Officer” at some email address located in the “Privacy Policy” section. I have noticed that some are privacy@companyx.com. Some are more difficult to find, but 95% of the time the information is towards the bottom of the privacy policy near “Contact Us” or “How to Exercise your Rights.”
Step 6.) Make a note of date and time when you submitted the request, especially if you had to make the request through their own web portal.
Step 7.) Reply asking for update on request if no reply in two weeks.
Step 8.) if no reply from your initial contact, forward both replies (initial and follow-up request) to a customer service contact representative. If they are no help, use these documents to contact your countries data protections enforcement officer.
Side Note: if they still refuse, and your protections agency hasn’t assisted quickly, I found this organization that seems willing to assist. I have never contacted them myself. The link is as follows:
https://noyb.eu/en/exercise-your-rights-article-17-gdpr-have-your-data-deleted#my_anchor4
As for Facebook, I tried looking it up for you (on my phone) and seeing what I would do. Here’s my findings. I hope the links work. Please tell me if they don’t.
Facebook:
Contact Facebook to exercise your rights to deletion at this website:
I recommend filing it out for each account (if more than one) and platform (Facebook, Instagram, WhatsApp, Messenger, etc.).
Select:
“How do I contact Meta…”
“How can I exercise my privacy rights”
(Scroll further to bottom of page)
“I still have questions regarding my privacy rights”
Select:
Country of Residence:
Put in your email address tied to the account. This creates a paper trail to present to your EU data regulation authority if they don’t comply.
I will say there is a link that puts you through the steps on how to delete you account, which I’ll post underneath. But I am wary when I can’t receive a paper trail and email confirmation so that I can further escalate if needed (like to government authority).
Select “How can I get support for a privacy issue from the Data Protection Officer?”
Select “No” for “Have you previously contacted the Data Protection Officer…”
Fill in information and include your letter in the request box.
Remember to make note when you did this for future escalation.
I hope this helps you and others. It has been a grueling and challenging task to get companies to follow my request. But it energizes me to see my password manager shrink as I delete accounts. Make sure you don’t delete your password until you receive a confirmation email that it was complete. Save this in a folder so that you can reference back in case it wasn’t fully executed to GDPR standards and you can escalate with that email you received from them. ----
Maybe this post isn’t relevant since you’re talking about your posts on Facebook. I don’t know if they’ll just leave the texts up and remove your account and say they “anonymized” it.
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !privacyguides@lemmy.one
In the digital age, protecting your personal information might seem like an impossible task. We’re here to help.
This is a community for sharing news about privacy, posting information about cool privacy tools and services, and getting advice about your privacy journey.
You can subscribe to this community from any Kbin or Lemmy instance:
Check out our website at privacyguides.org before asking your questions here. We’ve tried answering the common questions and recommendations there!
Want to get involved? The website is open-source on GitHub, and your help would be appreciated!
This community is the “official” Privacy Guides community on Lemmy, which can be verified here. Other “Privacy Guides” communities on other Lemmy servers are not moderated by this team or associated with the website.
Moderation Rules:
We prefer posting about open-source software whenever possible.
No soliciting engagement: Don’t ask for upvotes, follows, etc.
Surveys, Fundraising, and Petitions must be pre-approved by the mod team.
Be civil, no violence, hate speech. Assume people here are posting in good faith.
Don’t repost topics which have already been covered here.
News posts must be related to privacy and security, and your post title must match the article headline exactly. Do not editorialize titles, you can post your opinions in the post body or a comment.
Memes/images/video posts that could be summarized as text explanations should not be posted. Infographics and conference talks from reputable sources are acceptable.
No help vampires: This is not a tech support subreddit, don’t abuse our community’s willingness to help. Questions related to privacy, security or privacy/security related software and their configurations are acceptable.
No misinformation: Extraordinary claims must be matched with evidence.
Do not post about VPNs or cryptocurrencies which are not listed on privacyguides.org. See Rule 2 for info on adding new recommendations to the website.
General guides or software lists are not permitted. Original sources and research about specific topics are allowed as long as they are high quality and factual. We are not providing a platform for poorly-vetted, out-of-date or conflicting recommendations.
I have been closing accounts down for the past couple of months. So I feel somewhat practiced. This is what I usually do.
Step 1.) Create a “Request for Data Erasure” letter. I used Chat GPT to assist my writing a formal request. It highlighted my residence country, what section of the GDPR regulations I wanted to exercise and my right to do so (17 - Right of Erasure), my objection to processing my data, my objection to selling my data to third parties, my disagreement that they have legitimate interest in holding on to my data for further processing, my contact details, a placeholder (adjusted for whatever account I am submitting to) for identifying account information that will allow easier locating/processing (other emails, DOB, username, etc.).
Step 2.) Login into your account you want to delete and make note of:
Step 3.) Don’t delete any information in account so they can identify you with the information you will provide them. But update address to your EU residence Country as broadly as you can.
Step 4.) Plug in details from “Step 2.)” in your “Step 1.)” letter to make it more personally identifiable for them.
Step 5.) Find a company email to send that letter to for creating a paper trail. Send it from the email account that you created your account with. Usually it is a “Data Protections Officer” at some email address located in the “Privacy Policy” section. I have noticed that some are privacy@companyx.com. Some are more difficult to find, but 95% of the time the information is towards the bottom of the privacy policy near “Contact Us” or “How to Exercise your Rights.”
Step 6.) Make a note of date and time when you submitted the request, especially if you had to make the request through their own web portal.
Step 7.) Reply asking for update on request if no reply in two weeks.
Step 8.) if no reply from your initial contact, forward both replies (initial and follow-up request) to a customer service contact representative. If they are no help, use these documents to contact your countries data protections enforcement officer. Side Note: if they still refuse, and your protections agency hasn’t assisted quickly, I found this organization that seems willing to assist. I have never contacted them myself. The link is as follows: https://noyb.eu/en/exercise-your-rights-article-17-gdpr-have-your-data-deleted#my_anchor4
As for Facebook, I tried looking it up for you (on my phone) and seeing what I would do. Here’s my findings. I hope the links work. Please tell me if they don’t.
Facebook: Contact Facebook to exercise your rights to deletion at this website:
https://m.facebook.com/help/contact/1650115808681298?wtsid=rdr_0iyOToqLPguKAyfvl
I recommend filing it out for each account (if more than one) and platform (Facebook, Instagram, WhatsApp, Messenger, etc.).
Select:
Select:
I will say there is a link that puts you through the steps on how to delete you account, which I’ll post underneath. But I am wary when I can’t receive a paper trail and email confirmation so that I can further escalate if needed (like to government authority).
Link: https://m.facebook.com/help/224562897555674?wtsid=rdr_0GIjHy84vqm2d7ZoH
When contacted, my first email to them would be from “Step 4.)”
If you haven’t received any reply, contact their Data Protections Officer, at this link:
https://m.facebook.com/help/contact/540977946302970?wtsid=rdr_13CryJyFpljJ1J4Kk
Remember to make note when you did this for future escalation.
I hope this helps you and others. It has been a grueling and challenging task to get companies to follow my request. But it energizes me to see my password manager shrink as I delete accounts. Make sure you don’t delete your password until you receive a confirmation email that it was complete. Save this in a folder so that you can reference back in case it wasn’t fully executed to GDPR standards and you can escalate with that email you received from them. ----
This is what Facebook answered after sending a “Request for Data Erasure” letter:
I’ve followed the link, but there’s nothing about deleting info I can’t manually access. I’ll try contacting the DPO right away, and see how it goes.
Maybe this post isn’t relevant since you’re talking about your posts on Facebook. I don’t know if they’ll just leave the texts up and remove your account and say they “anonymized” it.