You can send GDPR request anywhere they communicate with customers. Even via Facebook. They have to respond in 30 days. It's their business to route the message where it belongs/can be processed. You don't have to hunt for their DPO. Keep the screenshots/records of your attempts at communication.