When your personal information has not been acquired directly from you but from Yet another supply, you will need to get the same info as previously mentioned (in addition to the right to withdraw your consent). You may have the best to mandate an NGO to lodge a grievance with https://nathanlabsadvisory.com/infrastructure-security-testing/