I treat the privacy of every Sankra Casino user with utmost care https://sankra.no/legal-and-affiliates/. As a data controller registered in Norway, I process personal information in full accordance with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request allows you ask me specifically what personal data I hold about your account, how it is employed, and who it is shared with. This guide explains how to file a DSAR, what to anticipate, and how I safeguard your rights over the course of the process.
Comprehending Your Data Subject Access Request
A Data Subject Access Request represents a structured mechanism created by Article 15 of the GDPR. It provides you the right to obtain confirmation that I handle personal data about you and to receive a copy of that data. You can also find out why I manage it, which categories of data are involved, and the recipients or categories of recipients I transmit it with, such as payment providers and regulatory compliance bodies. The DSAR is a effective transparency tool.
The scope of a DSAR is intentionally broad. It encompasses all personal information directly or indirectly associated to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I deliver the data in a organized, commonly used machine-readable format such as JSON or CSV, unless you specify for a simple document.
Answer Timeframes and Applicable Constraints
Under GDPR, I must respond to your DSAR without undue delay, and at the latest within one month of receiving the authenticated request. If your request is intricate or you make multiple requests, I may lengthen this period by up to two extra months. I will advise you of any prolongation within the first month, together with the grounds for the delay, so you are always kept informed.
Specific circumstances may block full divulgence, for example if disclosing the data would harm others’ rights or disclose confidential business data. In such cases I redact or deny the relevant portion. I offer the first response without charge, but if you make manifestly unfounded or unreasonable requests, I may impose a cost or choose not to act, always explaining the reason and your right to complain to the Datatilsynet.
Identity Verification and Security
Why I Have to Authenticate Your Identity
Prior to disclosing any personal data, I must be confident I am communicating with the actual data subject. This measure prevents unauthorized entry and identity fraud. GDPR obliges me to take appropriate steps to verify your identity, particularly when sensitive information is involved. I therefore ask for supporting documents, but I manage them securely and erase the verification data as soon as the process completes.
Accepted Documents for Verification
You can authenticate your identity by providing a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also ask for a recent utility bill showing your registered address. Please remove unnecessary sensitive information such as passport numbers. I only request the photograph and full name for verification. Digital copies sent through encrypted email are preferred.
Steps to Submit a DSAR to Sankra Casino
Essential Information for a Valid Request
To handle your request quickly, I need specific identification details. Provide your full name, the email address registered to your Sankra Casino account, and your username or account number. Specify the specific data you want to access. A general request is valid, but focusing it speeds up the process. Indicate if you need the reply in a particular language or format.
Submission Channels and Address
Forward your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. Otherwise, you can mail a signed written request to Sankra Casino’s registered address in Norway. I advise using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.
Which Details You Can Expect
Categories of Personal Data I Maintain
My answer to your DSAR contains a thorough summary of the personal data I keep. This normally includes identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also reveal if automated decision-making is used, such as risk profiling.
Structure and Transmission of Your Data
I provide the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you choose a printed copy sent by secure post, I can set up that upon request. The response also includes an explanatory cover letter that connects each piece of data to the processing purpose and the legal basis, making the information easy to understand.
Your individual Legal Rights Pursuant to GDPR and Norwegian Law
The Access Right Under Article 15
Article 15 of the GDPR, implemented in Norway through the Personal Data Act, grants every data subject the authority to ask for access to their personal data. I have to confirm whether processing occurs, provide a copy of the data, and notify you of the purposes, categories, retention periods, and your associated rights. This legal foundation secures you keep in control of your information while I maintain complete transparency.
Extra Rights That Support Your Access
Aside from access, you have the right to rectification, erasure, restriction of processing, and data portability. If you believe your data is wrong or partial, you can request me to fix it. Under certain situations you can also demand deletion. I mention these because a DSAR is frequently the first step before exercising other rights. Being aware of the full scope aids you make precise requests.
Frequently Asked Questions
Is it possible to ask for data about someone else, like a family member?
Information is released solely to the person it relates to. For privacy protection, I will not release information about someone else, even a relative. If you have legal authority like a power of attorney, provide that documentation. If not, the other person must submit their own DSAR.
What should I do if I lost my registered email address?
If you lost your email, contact support with full name, date of birth, and registered postal address or phone. Your identity can be confirmed and account information retrieved, after which the DSAR will be processed. This could take a few extra days, but I will update you on progress.
For how long is my data retained after account closure?
I retain personal data as long as required by Norwegian anti-money laundering rules, typically five years after closure. Once retention ends, data is securely destroyed unless a longer timeframe is legally required or needed for legal disputes. Specific retention timelines are outlined in my privacy policy.
May I receive a copy of information from my terminated account?
Absolutely. Your right to access persists even after your Sankra Casino account is closed. You can submit a DSAR for the data I still hold. The procedure is identical: supply identification and indicate the details you require. I will find the stored records and deliver them within the same statutory period.
What should I do if the response does not meet my expectations?
If you feel I have not fulfilled my obligations, reach out for an explanation. I will examine the situation and issue a further reply. You may also file a grievance with the Data Protection Authority. They will independently investigate whether I met my obligations.
Does making a DSAR influence my account status?
No, it does not. Using your data protection rights will not adversely affect your account. Access requests are handled impartially, and your account will not be limited, services terminated, or loyalty rewards changed because you requested information. Clarity is key, and I encourage you to make use of your entitlements.