I handle the protection of every Sankra Casino user seriously. As a data controller established in Norway, I manage personal information in full compliance with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request enables you ask me precisely what personal data I hold about your account, how it is employed, and who it is shared with. This guide outlines how to submit a DSAR, what to look forward to, and how I safeguard your rights throughout the process.
Response Timelines and Applicable Constraints
Under GDPR, I need to reply to your DSAR without undue delay, and at the latest within one month of getting the verified request. If your request is intricate or you file multiple requests, I may lengthen this period by up to two further months. I will notify you of any delay within the first month, together with the reasons for the delay, so you are never left wondering.
Specific circumstances may hinder full disclosure, for example if sharing the data would violate others’ rights or reveal confidential business information. In such cases I edit or refuse the relevant portion. I provide the first response at no cost, but if you make clearly baseless or unreasonable requests, I may charge a fee or choose not to act, always stating the reason and your right to file a complaint to the Datatilsynet.
Your personal Legal Rights Pursuant to GDPR and Norwegian Law
The Access Right Pursuant to Article 15
Article 15 of the GDPR, applied in Norway through the Personal Data Act, provides every data subject the authority to demand access to their personal data. I must confirm whether processing is happening, furnish a copy of the data, and advise you of the aims, categories, retention periods, and your connected rights. This legal foundation ensures you stay in control of your information while I maintain complete transparency.
Extra Rights Which Back Your Access
In addition to access, you possess the entitlement to rectification, erasure, restriction of processing, and data portability. If you think your data is wrong or not full, you can tell me to rectify it. Under certain circumstances you can also request deletion. I reference these because a DSAR is frequently the first step before exercising other rights. Being aware of the full scope assists you submit precise requests.
How to Submit a DSAR to Sankra Casino
Necessary Information for a Valid Request
To handle your request quickly, I need precise identification details. Supply your full name, the email address registered to your Sankra Casino account, and your username or account number. Outline the specific data you want to access. A general request is valid, but focusing it speeds up the process. State if you need the reply in a particular language or format.
Contact Channels and Address
Forward your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. Alternatively, you can mail a signed written request to Sankra Casino’s registered address in Norway. I suggest using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.
Common Questions
Is it possible to ask for data about someone else, like a family member?
Data is only shared with the individual it pertains to. To safeguard privacy, I cannot provide details about another person, including a relative. If you hold legal standing like a power of attorney, furnish that documentation. Otherwise, the third party needs to file their own DSAR.
What should I do if I lost my registered email address?
If you misplaced your email, reach out to support providing your full name, date of birth, and registered mailing address or phone number. I can verify your identity and recover account details, then process the DSAR. This might cause a short delay, but I will notify you throughout.
What is the data retention period after I close my account?
I hold personal data for the period stipulated by Norwegian anti-money laundering laws, generally five years after account closure https://sankra.no/legal-and-affiliates/. Following the retention period, data is safely erased unless a longer duration is required by law or necessary for legal proceedings. Detailed retention periods appear in my privacy notice.
May I receive a copy of information from my terminated account?
Yes. Your right to access persists even after your Sankra Casino account is closed. A DSAR can be submitted for the data I continue to keep. The procedure is identical: supply identification and indicate the details you require. I will locate the archived records and supply them within the same legal timeframe.
What happens if I am unhappy with the reply?
If you believe I have not complied, contact me for clarification. I will review the matter and provide a supplementary reply. Additionally, you are entitled to lodge a complaint with the Data Protection Authority. They will conduct an independent investigation into whether I fulfilled my duties.
Does submitting a DSAR affect my account status?
No, it does not. Using your data protection rights will not adversely affect your account. I treat access requests neutrally and will not restrict your account, terminate services, or alter loyalty benefits because you asked for data. Transparency is fundamental here, and I encourage you to use your rights.
Comprehending Your Data Subject Access Request
A Data Subject Access Request is a formal mechanism created by Article 15 of the GDPR. It grants you the right to obtain confirmation that I manage personal data about you and to obtain a copy of that data. You can also learn why I manage it, which categories of data are included, and the recipients or categories of recipients I transmit it with, such as payment providers and regulatory compliance bodies. The DSAR is a strong transparency tool.
The scope of a DSAR is deliberately broad. It includes all personal information directly or indirectly associated to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I provide the data in a structured, commonly used machine-readable format such as JSON or CSV, unless you ask for a simple document.
Identity Authentication and Security
Why I Need to Confirm Your Identity
Prior to disclosing any personal data, I must be confident I am communicating with the actual data subject. This precaution prevents unauthorized entry and identity fraud. GDPR obliges me to take appropriate steps to verify your identity, particularly when sensitive information is involved. I thus ask for supporting documents, but I manage them securely and erase the verification data as soon as the process completes.
Approved Documents for Verification
You can confirm your identity by sending a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also require a recent utility bill showing your registered address. Please obscure unnecessary sensitive information such as passport numbers. I only need the photograph and full name for verification. Digital copies sent through encrypted email are recommended.
What Information You Can Expect
Types of Personal Data I Hold
My reply to your DSAR contains a thorough outline of the personal data I keep. This usually includes identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also disclose if automated decision-making is used, such as risk profiling.
Layout and Delivery of Your Data
I supply the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you choose a printed copy sent by secure post, I can set up that upon request. The response also features an explanatory cover letter that links each piece of data to the processing purpose and the legal basis, making the information easy to understand.