Who and why?
Identify the organisation and the stated purpose of collection.
For how long and with whom?
Look for retention periods and recipients, including service providers.
What can I do?
Locate a contact route and the described options for access, correction or deletion. Missing details are a reason to ask questions.