I recently registered an account on an employment agency website. Had to provide my email address, a password and of course all of my personal data, including my complete professional background.
During their "pre-qualification process", I had to register a separate account with one of their partners to take a test. During that phase, I decided this wasn't for me.
This is when I realized that I couldn't access the account I created with them (sign in didn't work), nor could I access my account on their partner's website (same issue).
So I wrote them an email, politely asking them to delete my account and all my personal data from their website and partner's website and to confirm to me when this would be done.
They answered that:
The reason why you were not able to log into your profile is that you haven't completed the pre-qualification process yet
In regards to our partner, they are a separate company from us, so I am afraid that you will have to discuss this issue directly with them
We will, as per your request, delete all the data related to you that has been stored on our platform.
Is it GDPR compliant that I can't access the account that I created and the personal data that I shared because "I haven't completed their internal pre-qualification process"?
Is it GDPR compliant that their answer to my deletion request is "We will delete the data..."
Do you see any other issue with how this went?
And how should I handle the situation now?
Thanks in advance for any help on that!
The company seems to be legally based in Norway and I am in Switzerland.