If I understand GDPR and “the Right to be forgotten” properly, then yes - they would have to actually delete the information.

Edit: at least when it comes to PII, which I presume should include photos of you, or any personal detail of you. The content you may have posted there up until then - that might be a different story