I’m in process of fighting Hellofresh for still sending my family personalised "reactivation" spam even though we requested full private data removal per GDPR. I’d be glad to report it to the respective institution in Germany.