Some companies would direct the data subject to Their in-app function to delete the user account, will this be suffice to satisfy the right to deletion under GDPR? Or the deletion has to be done by the company without further act of the data subject?