I treat the confidentiality of every Sankra Casino user seriously https://sankra.no/legal-and-affiliates/. As a data controller registered in Norway, I manage personal information in full accordance with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request lets you inquire me precisely what personal data I maintain about your account, how it is employed, and who it is transmitted with. This guide describes how to file a DSAR, what to expect, and how I uphold your rights over the course of the process.
How to Submit a DSAR to Sankra Casino
Required Information for a Valid Request
To handle your request quickly, I need precise identification details. Supply your full name, the email address registered to your Sankra Casino account, and your username or account number. Outline the specific data you want to access. A general request is valid, but specifying it speeds up the process. State if you need the reply in a particular language or format.
Contact Channels and Address
Submit your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. As an option, you can mail a signed written request to Sankra Casino’s registered address in Norway. the complete picture I recommend using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.
Identity Confirmation and Protection
Why I Have to Authenticate Your Identity
Before releasing any personal data, I must be confident I am communicating with the actual data subject. This measure prevents unauthorized entry and identity fraud. GDPR obliges me to take reasonable steps to verify your identity, especially when sensitive information is involved. I consequently ask for supporting documents, but I manage them securely and delete the verification data as soon as the process ends.
Approved Documents for Verification
You can confirm your identity by providing a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also request a recent utility bill showing your registered address. Please obscure unnecessary sensitive information such as passport numbers. I only need the photograph and full name for verification. Digital copies sent through encrypted email are preferred.
Which Details You Shall Get
Groups of Personal Data I Store
My reply to your DSAR provides a thorough summary of the personal data I store. This usually covers identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also reveal if automated decision-making is used, such as risk profiling.
Format and Delivery of Your Data
I provide the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you choose a printed copy sent by secure post, I can arrange that upon request. The response also features an explanatory cover letter that links each piece of data to the processing purpose and the legal basis, making the information easy to understand.
Reply Deadlines and Possible Limitations
Under GDPR, I need to reply to your DSAR promptly, and at the latest within one month of getting the confirmed request. If your request is intricate or you file multiple requests, I may prolong this period by up to two additional months. I will advise you of any prolongation within the first month, together with the grounds for the delay, so you are always kept informed.
Restricted circumstances may prevent full disclosure, for example if sharing the data would violate others’ rights or disclose confidential business information. In such cases I censor or refuse the affected portion. I give the first response free of charge, but if you make clearly baseless or excessive requests, I may levy a charge or refuse to respond, always stating the reason and your right to complain to the Datatilsynet.
Comprehending Your Data Subject Access Request
A Data Subject Access Request represents a official mechanism created by Article 15 of the GDPR. It grants you the right to secure confirmation that I handle personal data about you and to receive a copy of that data. You can also find out why I handle it, which categories of data are involved, and the recipients or categories of recipients I transmit it with, such as payment providers and regulatory compliance bodies. The DSAR is a effective transparency tool.
The scope of a DSAR is purposefully broad. It covers all personal information directly or indirectly linked to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I provide the data in a structured, commonly used machine-readable format such as JSON or CSV, unless you ask for a simple document.
Your individual Legal Rights Pursuant to GDPR and Norwegian Law
The Access Right Pursuant to Article 15
Article 15 of the GDPR, implemented in Norway via the Personal Data Act, provides every data subject the right to request access to their personal data. I have to confirm whether processing occurs, provide a copy of the data, and notify you of the purposes, categories, retention periods, and your associated rights. This legal foundation ensures you stay in control of your information while I preserve complete transparency.
Extra Rights That Underpin Your Access
Beyond access, you possess the entitlement to rectification, erasure, restriction of processing, and data portability. If you think your data is incorrect or partial, you can request me to rectify it. Under certain situations you can also ask for deletion. I mention these because a DSAR is frequently the first step before using other rights. Being aware of the full scope assists you formulate precise requests.
FAQ
May I request information about another individual, for example a relative?
Information is released solely to the person it relates to. To safeguard privacy, I cannot provide details about another person, including a relative. Should you possess legal authority such as a power of attorney, please submit that paperwork. Otherwise, the third party needs to file their own DSAR.
What if I have forgotten my registered email address?
If you lost your email, contact support with full name, date of birth, and registered postal address or phone. Your identity can be confirmed and account information retrieved, after which the DSAR will be processed. This might cause a short delay, but I will notify you throughout.
How long do you keep my data after I close my account?
Personal data is kept for the duration mandated by Norwegian anti-money laundering regulations, usually five years following closure. Once retention ends, data is securely destroyed unless a longer timeframe is legally required or needed for legal disputes. Full retention schedules are available in my privacy notice.
Can I get a copy of my closed account data?
Absolutely. https://www.canada.ca/en/competition-bureau/news/2018/01/up_to_290_5_millionincompensationforcanadiansinvolkswagenaudiand.html Your right to access persists even after your Sankra Casino account is closed. A DSAR can be submitted for the data I continue to keep. The steps are unchanged: present identification and state the information you seek. I will locate the archived records and supply them within the same legal timeframe.
What happens if I am unhappy with the reply?
Should you think I have not adhered to requirements, get in touch for clarification. The issue will be reviewed and an additional response will be given. Additionally, you are entitled to lodge a complaint with the Data Protection Authority. An independent inquiry will be made to determine if I satisfied my responsibilities.
Will filing a DSAR impact my account standing?
No. Using your data protection rights will not adversely affect your account. I treat access requests neutrally and will not restrict your account, terminate services, or alter loyalty benefits because you asked for data. Clarity is key, and I encourage you to make use of your entitlements.