I handle the confidentiality of every Sankra Casino user with utmost care. As a data controller registered in Norway, I manage personal information in full accordance with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request lets you ask me specifically what personal data I store about your account, how it is used, and who it is disclosed with. This guide describes how to submit a DSAR, what to look forward to, and how I uphold your rights throughout the process.
Grasping Your Data Subject Access Request
A Data Subject Access Request constitutes a official mechanism introduced by Article 15 of the GDPR. It grants you the right to receive confirmation that I handle personal data about you and to get a copy of that data. You can also learn why I handle it, which categories of data are relevant, and the recipients or categories of recipients I disclose it with, such as payment providers and regulatory compliance bodies. The DSAR is a strong transparency tool.
The scope of a DSAR is intentionally broad. It encompasses all personal information directly or indirectly linked to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I supply the data in a structured, commonly used machine-readable format such as JSON or CSV, unless you request for a simple document.
Identity Confirmation and Security
Why I Need to Confirm Your Identity
Before sharing any personal data, I must be sure I am communicating with the real data subject. This safeguard prevents unauthorised access and identity fraud. GDPR mandates me to take suitable steps to verify your identity, particularly when sensitive information is involved. I consequently ask for supporting documents, but I process them securely and delete the verification data as soon as the process ends.
Approved Documents for Verification
You can verify your identity by submitting a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also request a recent utility bill showing your registered address. Please obscure unnecessary sensitive information such as passport numbers. I only request the photograph and full name for verification. Digital copies sent through encrypted email are ideal.
Which Details You Shall Get
Categories of Personal Data I Store
My reply to your DSAR provides a thorough outline of the personal data I keep. This normally covers identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also indicate if automated decision-making is used, such as risk profiling.
Structure and Delivery of Your Data
I provide the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you would rather a printed copy sent by secure post, I can arrange that upon request. The response also features an explanatory cover letter that connects each piece of data to the processing purpose and the legal basis, making the information easy to understand.
How to Submit a DSAR to Sankra Casino
Necessary Information for a Valid Request
To handle your request quickly, I need clear identification details. Provide your full name, the email address registered to your Sankra Casino account, and your username or account number. Outline the specific data you want to access. A general request is valid, but narrowing it down speeds up the process. Mention if you need the reply in a particular language or format.
Contact Channels and Address
Forward your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. Otherwise, you can mail a signed written request to Sankra Casino’s registered address in Norway. I suggest using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.
Your Legal Rights Under GDPR and Norwegian Law
The Right of Access Pursuant to Article 15
Article 15 of the GDPR, enforced in Norway through the Personal Data Act, gives every data subject the authority to ask for access to their personal data. I am required to confirm whether processing occurs, provide a copy of the data, and inform you of the aims, categories, retention periods, and your related rights. This legal foundation guarantees you keep in control of your information while I uphold complete transparency.
Further Rights That Underpin Your Access
Beyond access, you possess the entitlement to rectification, erasure, restriction of processing, and data portability. If you believe your data is wrong or incomplete, you can ask me to fix it. Under certain circumstances you can also ask for deletion. I note these because a DSAR is often the first step before exercising other rights. Being aware of the full scope aids you formulate precise requests.
Reply Deadlines and Potential Restrictions
Under GDPR, I am required to answer your DSAR without undue delay, and at the latest within a month of receiving the verified request. If your request is complex or you file multiple requests, I may prolong this period by up to two extra months. I will notify you of any prolongation within the first month, together with the justifications for the delay, so you are always kept informed.
Limited circumstances may hinder full release, for example if disclosing the data would infringe others’ rights or expose confidential business details. In such cases I censor or refuse the affected portion. I give the first response free of charge, but if you make clearly baseless or excessive requests, I may impose a cost or choose not to act, always clarifying the reason and your right to file a complaint to the Datatilsynet.
Common Questions
Is it possible to ask for data about someone else, like a family member?
Information is released solely to the person it relates to. Due to privacy safeguards, I cannot disclose information about a third party, even a family member. If you hold legal standing like a power of attorney, furnish that documentation. Otherwise the third party must submit their own DSAR.
What should I do if I lost my registered email address?
In case you forgot your email, contact support with your complete name, date of birth, and registered home address or telephone. I can verify your identity and recover account details, then process the DSAR. This might cause a short delay, but I will notify you throughout.
What is the data retention period after I close my account?
I hold personal data for the period stipulated by Norwegian anti-money laundering laws, generally five years after account closure https://sankra.no/legal-and-affiliates/. Following the retention period, data is safely erased unless a longer duration is required by law or necessary for legal proceedings. Full retention schedules are available in my privacy notice.
Is it possible to obtain a copy of data from my closed account?
Absolutely. Your right to access persists even after your Sankra Casino account is closed. A DSAR can be submitted for the data I continue to keep. The steps are unchanged: present identification and state the information you seek. I will find the stored records and deliver them within the same statutory period.
What if I am not satisfied with the response?
Should you think I have not adhered to requirements, get in touch for clarification. I will review the matter and provide a supplementary reply. You also have the right to complain to the Data Protection Authority. An independent inquiry will be made to determine if I satisfied my responsibilities.
Does submitting a DSAR affect my account status?
No. Exercising your data protection rights has no negative impact on your account. I process access requests without bias and will not limit your account, end services, or modify loyalty perks due to your data request. Clarity is key, and I encourage you to make use of your entitlements.
Leave a Reply