Actually, given the legal frameworks in place, you are. You just need to know what your rights are and how to exercise them. Data protection law is pretty robust, and it's due to get even stronger (in favour of the average Jo(e)) soon. GDPR law comes into force May next year.