Long story short, a few months ago I enrolled in some sort of EU funded programme that helps people get into work. They really don't do mucho apart from helping with CVs. In the end I got a job but completely unrelated to them (they never really helped). I know they get their funding by confirming they get people into work. Anyhow, today they contacted my workplace without me giving them the number or even full details of where I work. Would this be even remotely legal? I just feel they should have never by passes me. Tia!