I write further to the public statement by Mr. Daniel van Stein, acting as your servant or agent, that he had collected and made available for the training of AI/ML models 1 million BlueSky users' content and metadata with neither prior consent nor notice and without completing either a prior legitimate interest assessment or DPIA.

I am a BlueSky user, posing under my own name and using the account name [YOUR ACCOUNT LINK HERE]
I am a resident in [COUNTRY].

I note that, after you had made this data public for a period of hours, during which it was downloaded multiple times by parties unknown, your organisation through its servant or agent said it was taking it down “for now.” This indicates you have not deleted this data and continue to process it, at least by storage.

Per Article 15, GDPR, please provide to me:

    A confirmation that you are processing my personal data, in this or any other dataset.
    A copy of all the personal data, including metadata, you hold relating to me.
    The purposes for which this data is being processed.
    The categories of personal data processed — including any personal data included in the content of my posts. This includes in particular any sensitive personal data under Article 9 GDPR.
    The identity of all the organisations and individuals this data has been shared with through download or other means.
    How long your retention period will be for this data. Please provide a copy of the relevant entry on your Register of Processing Activities.
    A copy of any prior assessment of risk or DPIA or legitimate interest assessment relating to this processing.