Find their GDPR DPO's email address, or failing that, the email of some high-up people in the company and set up an email forwarding rule to send all their spam back to them.