Right to erasure request denied

I hired a car with Green Motion last week, and I was concerned with the level of personal sensitive information that they requested through their Online Check-In form. I take full responsibility for handing this over. I also will say that the car service I received was all very good.

However, just to be safe, I sent a "right to erasure" request after the hire period. I understand that they can refuse these, so I'm not surprised about that.

I'm just curious if there is any further steps I can take to push them on this? I don't mind them having these details per se - I am, however, not particularly confident in their ability to protect themselves from hacks and the like, based on their brand and the state of the branch I visited on my holiday.