I take the confidentiality of every Sankra Casino user with utmost care sankra.no. As a data controller based in Norway, I process personal information in full alignment with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request allows you request me specifically what personal data I hold about your account, how it is used, and who it is disclosed with. This guide explains how to make a DSAR, what to anticipate, and how I uphold your rights during the process.
Steps to Submit a DSAR to Sankra Casino
Essential Information for a Valid Request
To process your request promptly, I need precise identification details. Give your full name, the email address registered to your Sankra Casino account, and your username or account number. Specify the specific data you want to access. A general request is valid, but narrowing it down speeds up the process. Mention if you need the reply in a particular language or format.
Communication Channels and Address
Send your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. Alternatively, you can mail a signed written request to Sankra Casino’s registered address in Norway. I advise using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.
Identity Confirmation and Safety
Why I Have to Authenticate Your Identity
Before releasing any personal data, I must be sure I am communicating with the actual data subject. This precaution prevents unauthorized entry and identity fraud. GDPR obliges me to take suitable steps to verify your identity, especially when sensitive information is involved. I thus ask for supporting documents, but I handle them securely and erase the verification data as soon as the process ends.
Valid Documents for Verification
You can confirm your identity by sending a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also ask for a recent utility bill showing your registered address. Please redact unnecessary sensitive information such as passport numbers. I only need the photograph and full name for verification. Digital copies sent through encrypted email are preferred.
Reply Deadlines and Applicable Constraints
Under GDPR, I am required to answer your DSAR without unnecessary delay, and at the latest within 30 days of receiving the verified request. If your request is intricate or you make multiple requests, I may lengthen this period by up to two further months. I will advise you of any delay within the first month, together with the reasons for the delay, so you are never in doubt.
Limited circumstances may hinder full release, for example if releasing the data would violate others’ rights or expose confidential business details. In such cases I edit or deny the relevant portion. I provide the first response without charge, but if you make manifestly unfounded or unreasonable requests, I may impose a cost or decline to act, always clarifying the reason and your right to file a complaint to the Datatilsynet.
FAQ
Is it possible to ask for data about someone else, like a family member?
I can only disclose data to the person it concerns. To safeguard privacy, I cannot provide details about another person, including a relative. If you have legal authority like a power of attorney, provide that documentation. Otherwise, the third party needs to file their own DSAR.
What happens if I cannot recall my registered email?
In case you forgot your email, contact support with your complete name, date of birth, and registered home address or telephone. Your identity can be confirmed and account information retrieved, after which the DSAR will be processed. This might cause a short delay, but I will notify you throughout.
What is the data retention period after I close my account?
I retain personal data as long as required by Norwegian anti-money laundering rules, typically five years after closure. Once retention ends, data is securely destroyed unless a longer timeframe is legally required or needed for legal disputes. Specific retention timelines are outlined in my privacy policy.
Is it possible to obtain a copy of data from my closed account?
Absolutely. Even following the closure of your Sankra Casino account, your access rights continue. A DSAR can be submitted for the data I continue to keep. The steps are unchanged: present identification and state the information you seek. The archived data will be retrieved and provided within the same legal deadline.
What should I do if the response does not meet my expectations?
If you feel I have not fulfilled my obligations, reach out for an explanation. I will review the matter and provide a supplementary reply. Additionally, you are entitled to lodge a complaint with the Data Protection Authority. They will conduct an independent investigation into whether I fulfilled my duties.
Does making a DSAR influence my account status?
Not at all. Using your data protection rights will not adversely affect your account. Access requests are handled impartially, and your account will not be limited, services terminated, or loyalty rewards changed because you requested information. Transparency is fundamental here, and I encourage you to use your rights.
Comprehending Your Data Subject Access Request
A Data Subject Access Request is a formal mechanism established by Article 15 of the GDPR. It grants you the right to secure confirmation that I manage personal data about you and to receive a copy of that data. You can also find out why I process it, which categories of data are relevant, and the recipients or categories of recipients I disclose it with, such as payment providers and regulatory compliance bodies. The DSAR is a effective transparency tool.
The scope of a DSAR is purposefully broad. It includes all personal information directly or indirectly connected to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I deliver the data in a organized, commonly used machine-readable format such as JSON or CSV, unless you request for a simple document.
Which Details You Will Receive
Categories of Personal Data I Store
My reply to your DSAR contains a detailed outline of the personal data I store. This typically encompasses identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also disclose if automated decision-making is used, such as risk profiling.
Structure and Provision of Your Data
I supply the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you would rather a printed copy sent by secure post, I can set up that upon request. The response also contains an explanatory cover letter that connects each piece of data to the processing purpose and the legal basis, making the information easy to understand.
Your Legal Rights Pursuant to GDPR and Norwegian Law
The Entitlement to Access Under Article 15
Article 15 of the GDPR, implemented in Norway through the Personal Data Act, grants every data subject the authority to request access to their personal data. I am required to confirm whether processing takes place, provide a copy of the data, and notify you of the objectives, categories, retention periods, and your associated rights. This legal foundation secures you stay in control of your information while I uphold complete transparency.
Further Rights That Underpin Your Access
Beyond access, you possess the authority to rectification, erasure, restriction of processing, and data portability. If you suspect your data is inaccurate or incomplete, you can ask me to correct it. Under certain situations you can also demand deletion. I reference these because a DSAR is frequently the first step before exercising other rights. Knowing the full scope assists you make precise requests.