Sankra Casino’s Data Subject Access Request
I take the confidentiality of every Sankra Casino user with high priority. As a data controller registered in Norway, I manage personal information in full alignment with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request lets you request me exactly what personal data I maintain about your account, how it is used, and who it is shared with. This guide explains how to submit a DSAR, what to anticipate, and how I protect your rights during the process.
Your personal Legal Rights Pursuant to GDPR and Norwegian Law
The Access Right Pursuant to Article 15
Article 15 of the GDPR, implemented in Norway by means of the Personal Data Act, provides every data subject the right to request access to their personal data. I have to confirm whether processing occurs, provide a copy of the data, and notify you of the aims, categories, retention periods, and your connected rights. This legal foundation ensures you remain in control of your information while I uphold complete transparency.
Extra Rights That Support Your Access
Aside from access, you have the authority to rectification, erasure, restriction of processing, and data portability. If you believe your data is incorrect or not full, you can tell me to rectify it. Under certain circumstances you can also request deletion. I note these because a DSAR is often the first step before applying other rights. Knowing the full scope helps you formulate precise requests.
Common Questions
May I request information about another individual, for example a relative?
Data is only shared with the individual it pertains to. To safeguard privacy, I cannot provide details about another person, including a relative. If you have legal authority like a power of attorney, provide that documentation. Otherwise, the third party needs to file their own DSAR.
What if I have forgotten my registered email address?
If you lost your email, contact support with full name, date of birth, and registered postal address or phone. I can verify your identity and recover account details, then process the DSAR. This might cause a short delay, but I will notify you throughout.
How long do you keep my data after I close my account?
I hold personal data for the period stipulated by Norwegian anti-money laundering laws, generally five years after account closure. Once retention ends, data is securely destroyed unless a longer timeframe is legally required or needed for legal disputes. Detailed retention periods appear in my privacy notice.
May I receive a copy of information from my terminated account?
Absolutely. Even following the closure of your Sankra Casino account, your access rights continue. A DSAR can be submitted for the data I continue to keep. The steps are unchanged: present identification and state the information canada.ca you seek. I will locate the archived records and supply them within the same legal timeframe.
What if I am not satisfied with the response?
If you feel I have not fulfilled my obligations, reach out for an explanation. I will review the matter and provide a supplementary reply. You also have the right to complain to the Data Protection Authority. An independent inquiry will be made to determine if I satisfied my responsibilities.
Does making a DSAR influence my account status?
No, Sankra Casino personvernpolicy, it does not. Asserting your data protection rights carries no negative consequences for your account. Access requests are handled impartially, and your account will not be limited, services terminated, or loyalty rewards changed because you requested information. Clarity is key, and I encourage you to make use of your entitlements.
How to Submit a DSAR to Sankra Casino
Essential Information for a Valid Request
To handle your request efficiently, I need clear identification details. Provide your full name, the email address registered to your Sankra Casino account, and your username or account number. Specify the specific data you want to access. A general request is valid, but specifying it speeds up the process. Indicate if you need the reply in a particular language or format.
Communication Channels and Address
Submit your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. Alternatively, you can mail a signed written request to Sankra Casino’s registered address in Norway. I recommend using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.
What Data You Will Receive
Categories of Personal Data I Store
My response to your DSAR includes a detailed summary of the personal data I store. This normally includes identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also disclose if automated decision-making is used, such as risk profiling.
Format and Delivery of Your Data
I supply the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you would rather a printed copy sent by secure post, I can set up that upon request. The response also includes an explanatory cover letter that connects each piece of data to the processing purpose and the legal basis, making the information easy to understand.
Identity Confirmation and Safety
Why I Must Verify Your Identity
Before sharing any personal data, I must be confident I am communicating with the real data subject. This precaution prevents illegal access and identity fraud. GDPR obliges me to take reasonable steps to verify your identity, particularly when sensitive information is involved. I therefore ask for supporting documents, but I handle them securely and delete the verification data as soon as the process completes.
Accepted Documents for Verification
You can authenticate your identity by sending a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also request a recent utility bill showing your registered address. Please remove unnecessary sensitive information such as passport numbers. I only request the photograph and full name for verification. Digital copies sent through encrypted email are recommended.
Reply Deadlines and Applicable Constraints
Under GDPR, I need to reply to your DSAR promptly, and at the latest within 30 days of receiving the confirmed request. If your request is intricate or you make multiple requests, I may extend this period by up to two additional months. I will advise you of any extension within the first month, together with the grounds for the delay, so you are never left wondering.
Limited circumstances may block full release, for example if disclosing the data would infringe others’ rights or reveal confidential business information. In such cases I redact or refuse the affected portion. extra details I provide the first response at no cost, but if you make manifestly unfounded or disproportionate requests, I may levy a charge or refuse to respond, always clarifying the reason and your right to lodge a complaint to the Datatilsynet.
Understanding Your Data Subject Access Request
A Data Subject Access Request represents a structured mechanism introduced by Article 15 of the GDPR. It grants you the right to receive confirmation that I manage personal data about you and to receive a copy of that data. You can also discover why I handle it, which categories of data are involved, and the recipients or categories of recipients I share it with, such as payment providers and regulatory compliance bodies. The DSAR is a strong transparency tool.
The scope of a DSAR is deliberately broad. It encompasses all personal information directly or indirectly connected to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I supply the data in a organized, commonly used machine-readable format such as JSON or CSV, unless you request for a simple document.