The BBC Bitesize site gives you your
rights in law. Also, if you want to find out how an
organisation is processing personal data, you can look at
the public register of data controllers and see their reasons
for processing personal data.
Organisations are obliged to notify the commissioner
of the processing that they are doing on personal data. It costs
£35.00 in administration fees to notify the commissioner.