I asked for info under GDPR and sent them a heavily redacted copy of my ID (redacted: surname, half my ID, address) and actually got an answer 3 weeks later that they have nothing on me. Citing their email:

"Hello, You are receiving this email as a response to your request for data access. After running the photo provided through our algorithm, no matches were found."

Next step: Opt-out. Step after that: Rinse, repeat.