I handle the confidentiality of every Sankra Casino user with utmost care https://sankra.no/legal-and-affiliates/. As a data controller established in Norway, I handle personal information in full alignment with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request allows you request me precisely what personal data I store about your account, how it is employed, and who it is transmitted with. This guide describes how to submit a DSAR, what to anticipate, and how I uphold your rights during the process.
Comprehending Your Data Subject Access Request
A Data Subject Access Request represents a formal mechanism created by Article 15 of the GDPR. It grants you the right to receive confirmation that I manage personal data about you and to obtain a copy of that data. You can also discover why I manage it, which categories of data are involved, and the recipients or categories of recipients I disclose it with, such as payment providers and regulatory compliance bodies. The DSAR is a powerful transparency tool.
The scope of a DSAR is intentionally broad. It includes all personal information directly or indirectly linked to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I deliver the data in a structured, commonly used machine-readable format such as JSON or CSV, unless you request for a simple document.
Identity Verification and Security
Why I Have to Authenticate Your Identity
Prior to disclosing any personal data, I must be certain I am communicating with the real data subject. This precaution prevents illegal access and identity fraud. GDPR requires me to take reasonable steps to verify your identity, especially when sensitive information is involved. I consequently ask for supporting documents, but I process them securely and erase the verification data as soon as the process completes.
Accepted Documents for Verification
You can authenticate your identity by sending a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also request a recent utility bill showing your registered address. Please obscure unnecessary sensitive information such as passport numbers. I only require the photograph and full name for verification. Digital copies sent through encrypted email are ideal.
Response Timelines and Applicable Constraints
Under GDPR, I must respond to your DSAR without undue delay, and at the latest within one month of receiving the confirmed request. If your request is complex or you file multiple requests, I may prolong this period by up to two further months. I will inform you of any prolongation within the first month, together with the grounds for the delay, so you are never left wondering.
Limited circumstances may hinder full release, for example if sharing the data would harm others’ rights or expose confidential business details. In such cases I censor or refuse the impacted portion. I give the first response without charge, but if you make manifestly unfounded or disproportionate requests, I may impose a cost or refuse to respond, always stating the reason and your right to file a complaint to the Datatilsynet.
Your Legal Rights Under GDPR and Norwegian Law
The Right of Access Under Article 15
Article 15 of the GDPR, enforced in Norway through the Personal Data Act, grants every data subject the right to ask for access to their personal data. I am required to confirm whether processing takes place, supply a copy of the data, and notify you of the purposes, categories, retention periods, and your related rights. This legal foundation ensures you stay in control of your information while I uphold complete transparency.
Extra Rights Which Back Your Access
Beyond access, you have the entitlement to rectification, erasure, restriction of processing, and data portability. If you suspect your data is inaccurate or not full, you can request me to rectify it. Under certain circumstances you can also demand deletion. I reference these because a DSAR is often the first step before exercising other rights. Knowing the full scope aids you formulate precise requests.
What Information You Shall Get
Types of Personal Data I Hold
My answer to your DSAR includes a detailed outline of the personal data I keep. This usually encompasses identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also indicate if automated decision-making is used, such as risk profiling.
Structure and Transmission of Your Data
I furnish the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you choose a printed copy sent by secure post, I can set up that upon request. The response also features an explanatory cover letter that links each piece of data to the processing purpose and the legal basis, making the information easy to understand.
Method for Submit a DSAR to Sankra Casino
Required Information for a Valid Request
To complete your request quickly, I need precise identification details. Give your full name, the email address registered to your Sankra Casino account, and your username or account number. Describe the specific data you want to access. A general request is valid, but narrowing it down speeds up the process. Mention if you need the reply in a particular language or format.
Submission Channels and Address
Submit your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. Otherwise, you can mail a signed written request to Sankra Casino’s registered address in Norway. I advise using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.
Frequently Asked Questions
Can I request data about another person, such as a relative?
Information is released solely to the person it relates to. Due to privacy safeguards, I cannot disclose information about a third party, even a family member. If you hold legal standing like a power of attorney, furnish that documentation. Otherwise the third party must submit their own DSAR.
What should I do if I lost my registered email address?
If you misplaced your email, reach out to support providing your full name, date of birth, and registered mailing address or phone number. I am able to authenticate your identity and restore account information, then handle the DSAR. This may add a few days, but I will keep you informed.
How long do you keep my data after I close my account?
Personal data is kept for the duration mandated by Norwegian anti-money laundering regulations, usually five years following closure. After retention, data is securely deleted unless a longer period is legally mandated or needed for legal claims. Specific retention timelines are outlined in my privacy policy.
Is it possible to obtain a copy of data from my closed account?
Yes. Even following the closure of your Sankra Casino account, your access rights continue. You may file a DSAR for the information I still retain. The process is the same: provide identification and specify the information you need. I will locate the archived records and supply them within the same legal timeframe.
What if I am not satisfied with the response?
Should you think I have not adhered to requirements, get in touch for clarification. The issue will be reviewed and an additional response will be given. You also have the right to complain to the Data Protection Authority. They will independently investigate whether I met my obligations.
Does submitting a DSAR affect my account status?
Not at all. Exercising your data protection rights has no negative impact on your account. I process access requests without bias and will not limit your account, end services, or modify loyalty perks due to your data request. Openness is essential here, and I urge you to exercise your rights.