Yes. According to article 17 of the GDPR, customers have the right to demand the erasure of their personal data from controllers, known as “the right to be forgotten.” The right to be forgotten applies if the customer’s data was processed unlawfully, if it’s no longer necessary for the purpose of the processing, or if the customer withdraws their consent.