The next move would be to run a complaint at the local Data Protection Authority - eg. for Austrians https://www.data-protection-authority.gv.at/.