I have been closing accounts down for the past couple of months. So I feel somewhat practiced. This is what I usually do.
Step 1.) Create a “Request for Data Erasure” letter. I used Chat GPT to assist my writing a formal request. It highlighted my residence country, what section of the GDPR regulations I wanted to exercise and my right to do so (17 - Right of Erasure), my objection to processing my data, my objection to selling my data to third parties, my disagreement that they have legitimate interest in holding on to my data for further processing, my contact details, a placeholder (adjusted for whatever account I am submitting to) for identifying account information that will allow easier locating/processing (other emails, DOB, username, etc.).
Step 2.) Login into your account you want to delete and make note of:
- email address they have on file
- Name (especially if Alias is used)
- Username
- Other identifying information ( DOB, Address, Phone Numbers)
Step 3.) Don’t delete any information in account so they can identify you with the information you will provide them. But update address to your EU residence Country as broadly as you can.
Step 4.) Plug in details from “Step 2.)” in your “Step 1.)” letter to make it more personally identifiable for them.
Step 5.) Find a company email to send that letter to for creating a paper trail. Send it from the email account that you created your account with. Usually it is a “Data Protections Officer” at some email address located in the “Privacy Policy” section. I have noticed that some are privacy@companyx.com. Some are more difficult to find, but 95% of the time the information is towards the bottom of the privacy policy near “Contact Us” or “How to Exercise your Rights.”
Step 6.) Make a note of date and time when you submitted the request, especially if you had to make the request through their own web portal.
Step 7.) Reply asking for update on request if no reply in two weeks.
Step 8.) if no reply from your initial contact, forward both replies (initial and follow-up request) to a customer service contact representative. If they are no help, use these documents to contact your countries data protections enforcement officer. Side Note: if they still refuse, and your protections agency hasn’t assisted quickly, I found this organization that seems willing to assist. I have never contacted them myself. The link is as follows: https://noyb.eu/en/exercise-your-rights-article-17-gdpr-have-your-data-deleted#my_anchor4
As for Facebook, I tried looking it up for you (on my phone) and seeing what I would do. Here’s my findings. I hope the links work. Please tell me if they don’t.
Facebook: Contact Facebook to exercise your rights to deletion at this website:
https://m.facebook.com/help/contact/1650115808681298?wtsid=rdr_0iyOToqLPguKAyfvl
I recommend filing it out for each account (if more than one) and platform (Facebook, Instagram, WhatsApp, Messenger, etc.).
Select:
- “How do I contact Meta…”
- “How can I exercise my privacy rights” (Scroll further to bottom of page)
- “I still have questions regarding my privacy rights”
Select:
- Country of Residence:
- Put in your email address tied to the account. This creates a paper trail to present to your EU data regulation authority if they don’t comply.
I will say there is a link that puts you through the steps on how to delete you account, which I’ll post underneath. But I am wary when I can’t receive a paper trail and email confirmation so that I can further escalate if needed (like to government authority).
Link: https://m.facebook.com/help/224562897555674?wtsid=rdr_0GIjHy84vqm2d7ZoH
When contacted, my first email to them would be from “Step 4.)”
If you haven’t received any reply, contact their Data Protections Officer, at this link:
https://m.facebook.com/help/contact/540977946302970?wtsid=rdr_13CryJyFpljJ1J4Kk
- Select platform (Facebook, Instagram, WhatsApp, Messenger, etc.).
- Select “How can I get support for a privacy issue from the Data Protection Officer?”
- Select “No” for “Have you previously contacted the Data Protection Officer…”
- Fill in information and include your letter in the request box.
Remember to make note when you did this for future escalation.
I hope this helps you and others. It has been a grueling and challenging task to get companies to follow my request. But it energizes me to see my password manager shrink as I delete accounts. Make sure you don’t delete your password until you receive a confirmation email that it was complete. Save this in a folder so that you can reference back in case it wasn’t fully executed to GDPR standards and you can escalate with that email you received from them. ----
Maybe this post isn’t relevant since you’re talking about your posts on Facebook. I don’t know if they’ll just leave the texts up and remove your account and say they “anonymized” it.