I take the privacy of every Sankra Casino user seriously. As a data controller based in Norway, I manage personal information in full alignment with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request lets you request me specifically what personal data I store about your account, how it is used, and who it is shared with. This guide explains how to make a DSAR, what to anticipate, and how I safeguard your rights over the course of the process.
Comprehending Your Data Subject Access Request
A Data Subject Access Request constitutes a formal mechanism established by Article 15 of the GDPR. It grants you the right to secure confirmation that I manage personal data about you and to receive a copy of that data. You can also discover why I process it, which categories of data are involved, and the recipients or categories of recipients I share it with, such as payment providers and regulatory compliance bodies. The DSAR is a powerful transparency tool.
The scope of a DSAR is intentionally broad. It encompasses all personal information directly or indirectly connected to your les alle detaljer account, including registration details, transaction logs, responsible gaming records, and correspondence. I supply the data in a systematic, commonly used machine-readable format such as JSON or CSV, unless you request for a simple document.
Steps to Submit a DSAR to Sankra Casino
Essential Information for a Valid Request
To handle your request quickly, I need clear identification details. Give your full name, the email address registered to your Sankra Casino account, and your username or account number. Describe the specific data you want to access. A general request is valid, but specifying it speeds up the process. State if you need the reply in a particular language or format.
Submission Channels and Address
Submit your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. As an option, you can mail a signed written request to Sankra Casino’s registered address in Norway. I advise using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.
Your Legal Rights Pursuant to GDPR and Norwegian Law
The Entitlement to Access Per Article 15
Article 15 of the GDPR, implemented in Norway by means of the Personal Data Act, provides every data subject the authority to ask for access to their personal data. I am required to confirm whether processing is happening, provide a copy of the data, and advise you of the aims, categories, retention periods, and your connected rights. This legal foundation guarantees you remain in control of your information while I maintain complete transparency.
Further Rights Which Back Your Access
In addition to access, you have the authority to rectification, erasure, restriction of processing, and data portability. If you think your data is wrong or partial, you can tell me to correct it. Under certain circumstances you can also ask for deletion. I mention these because a DSAR is commonly the first step before exercising other rights. Being aware of the full scope aids you submit precise requests.
What Data You Shall Get
Types of Personal Data I Maintain
My response to your DSAR contains a comprehensive summary of the personal data I keep. This typically includes identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also indicate if automated decision-making is used, such as risk profiling.
Format and Delivery of Your Data
I furnish the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you choose a printed copy sent by secure post, I can organize that upon request. The response also features an explanatory cover letter that connects each piece of data to the processing purpose and the legal basis, making the information easy to understand.
Identity Authentication and Protection
Why I Have to Authenticate Your Identity
Prior to disclosing any personal data, I must be sure I am communicating with the actual data subject. This safeguard prevents unauthorized entry and identity fraud. GDPR requires me to take suitable steps to verify your identity, especially when sensitive information is involved. I therefore ask for supporting documents, but I process them securely and delete the verification data as soon as the process finishes.
Valid Documents for Verification
You can authenticate your identity by providing a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also require a recent utility bill showing your registered address. Please remove unnecessary sensitive information such as passport numbers. I only request the photograph and full name for verification. Digital copies sent through encrypted email are preferred.
Answer Timeframes and Potential Restrictions
Under GDPR, I am required to answer your DSAR without undue delay, and at the latest within one month of receiving the authenticated request. If your request is intricate or you file multiple requests, I may extend this period by up to two further months. I will advise you of any extension within the first month, together with the reasons for the delay, so you are never in doubt.
Specific circumstances may hinder full divulgence, for example if disclosing the data would harm others’ rights or expose confidential business details. In such cases I redact or deny the impacted portion. I provide the first response without charge, but if you make clearly baseless or unreasonable requests, I may charge a fee or decline to act, always clarifying the reason and your right to file a complaint to the Datatilsynet.
FAQ
May I request information about another individual, for example a relative?
Information is released solely to the person it relates to. To safeguard privacy, I cannot provide details about another person, including a relative. If you hold legal standing like a power of attorney, furnish that documentation. Otherwise the third party must submit their own DSAR.
What if I have forgotten my registered email address?
If you misplaced your email, reach out to support providing your full name, date of birth, and registered mailing address or phone number. Your identity can be confirmed and account information retrieved, after which the DSAR will be processed. This could take a few extra days, but I will update you on progress.
How long do you keep my data after I close my account?
I retain personal data as long as required by Norwegian anti-money laundering rules, typically five years after closure. Following the retention period, data is safely erased unless a longer duration is required by law or necessary for legal proceedings. Specific retention timelines are outlined in my privacy policy.
Is it possible to obtain a copy of data from my closed account?
Certainly. Your right to access persists even after your Sankra Casino account is closed. You can submit a DSAR for the data I still hold. The steps are unchanged: present identification and state the information you seek. I will find the stored records and deliver them within the same statutory period.
What if I am not satisfied with the response?
Should you think I have not adhered to requirements, get in touch for clarification. The issue will be reviewed and an additional response will be given. Additionally, you are entitled to lodge a complaint with the Data Protection Authority. An independent inquiry will be made to determine if I satisfied my responsibilities.
Does submitting a DSAR affect my account status?
No, it does not. Using your data protection rights will not adversely affect your account. Access requests are handled impartially, and your account will not be limited, services terminated, or loyalty rewards changed because you requested information. Transparency is fundamental here, and I encourage you to use your rights.