You need to report this to your local data protection authority (or similar). They didn’t carry out your deletion request, so they would most likely be fined (at least that happens often in my country).