When your personal details hasn't been acquired directly from you but from A further resource, you need to get a similar details as higher than (apart from the best to withdraw your consent). You might have the best to object towards the processing of your personal details and check with https://nathanlabsadvisory.com/iso-20000-1-it-services/