Talk about data protection, I am fucking furious!! A hotel i stayed in recently has sent an email with a scan of my passport and credit card. Do I have any legal rights to fuck them up the arse? The hotel is in france.

Not a lawyer, but I'm pretty sure the CNIL would be glad to fuck them in the arse for you. It's their job to ensure user data is handled properly in information systems.

Funny thing, the CNIL's definition of an InfoSys is so wide, they have already messed some organisation up for misusing user data which was cross referenced by hand on paper.

But I'm pretty sure you won't gain anything but the satisfaction of fucking them over, France is not big on damages like the USA are.