ATLAS finance is not complying with POPI act

I app**** for a Loan at Atlas in November and they asked me for my employer's number because we do not have a landline for my employer I gave them HR's personal number and the next this all my Creditors are now sending messages of my personal information to my HR's number and not mine and this is against GDPR compliance.