I handle the confidentiality of every brukeravtale Sankra Casino user with high priority. As a data controller based in Norway, I handle personal information in full alignment with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request lets you request me specifically what personal data I store about your account, how it is used, and who it is transmitted with. This guide describes how to submit a DSAR, what to expect, and how I uphold your rights throughout the process.
Method for Submit a DSAR to Sankra Casino
Necessary Information for a Valid Request
To complete your request efficiently, I need specific identification details. Give your full name, the email address registered to your Sankra Casino account, and your username or account number. Describe the specific data you want to access. A general request is valid, but focusing it speeds up the process. Indicate if you need the reply in a particular language or format.
Communication Channels and Address
Submit your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. As an option, you can mail a signed written request to Sankra Casino’s registered address in Norway. I suggest using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.
Grasping Your Data Subject Access Request
A Data Subject Access Request is a structured mechanism created by Article 15 of the GDPR. It provides you the right to secure confirmation that I handle personal data about you and to receive a copy of that data. You can also find out why I handle it, which categories of data are involved, and the recipients or categories of recipients I disclose it with, such as payment providers and regulatory compliance bodies. The DSAR is a effective transparency tool.
The scope of a DSAR is purposefully broad. It includes all personal information directly or indirectly linked to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I supply the data in a organized, commonly used machine-readable format such as JSON or CSV, unless you ask for a simple document.
Reply Deadlines and Possible Limitations
Under GDPR, I must respond to your DSAR promptly, and at the latest within a month of obtaining the authenticated request. If your request is complex or you file multiple requests, I may extend this period by up to two further months. I will notify you of any prolongation within the first month, together with the justifications for the delay, so you are never left wondering.
Limited circumstances may hinder full release, for example if releasing the data would harm others’ rights or reveal confidential business details. In such cases I edit or refuse the impacted portion. I provide the first response at no cost, but if you make manifestly unfounded or unreasonable requests, I may impose a cost or refuse to respond, always clarifying the reason and your right to lodge a complaint to the Datatilsynet.
Your personal Legal Rights Under GDPR and Norwegian Law
The Access Right Under Article 15
Article 15 of the GDPR, implemented in Norway via the Personal Data Act, gives every data subject the right to request access to their personal data. I must confirm whether processing takes place, supply a copy of the data, and inform you of the aims, categories, retention periods, and your connected rights. This legal foundation ensures you keep in control of your information while I uphold complete transparency.
Extra Rights That Support Your Access
In addition to access, you have the entitlement to rectification, erasure, restriction of processing, and data portability. If you think your data is incorrect or partial, you can ask me to correct it. Under certain circumstances you can also demand deletion. I mention these because a DSAR is frequently the first step before applying other rights. Being aware of the full scope helps you make precise requests.
What Information You Shall Get
Groups of Personal Data I Maintain
My answer to your DSAR includes a comprehensive overview of the personal data I hold. This typically encompasses identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. editor’s pick I also disclose if automated decision-making is used, such as risk profiling.
Format and Delivery of Your Data
I furnish the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you prefer a printed copy sent by secure post, I can arrange that upon request. The response also includes an explanatory cover letter that connects each piece of data to the processing purpose and the legal basis, making the information easy to understand.
Identity Verification and Safety
Why I Must Verify Your Identity
Prior to disclosing any personal data, I must be confident I am communicating with the genuine data subject. This precaution prevents illegal access and identity fraud. GDPR mandates me to take appropriate steps to verify your identity, notably when sensitive information is involved. I consequently ask for supporting documents, but I manage them securely and erase the verification data as soon as the process finishes.
Approved Documents for Verification
You can authenticate your identity by sending a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also require a recent utility bill showing your registered address. Please redact unnecessary sensitive information such as passport numbers. I only need the photograph and full name for verification. Digital copies sent through encrypted email are preferred.
Frequently Asked Questions
May I request information about another individual, for example a relative?
Information is released solely to the person it relates to. For privacy protection, I will not release information about someone else, even a relative. Should you possess legal authority such as a power of attorney, please submit that paperwork. Otherwise, the third party needs to file their own DSAR.
What should I do if I lost my registered email address?
In case you forgot your email, contact support with your complete name, date of birth, and registered home address or telephone. Your identity can be confirmed and account information retrieved, after which the DSAR will be processed. This could take a few extra days, but I will update you on progress.
For how long is my data retained after account closure?
I retain personal data as long as required by Norwegian anti-money laundering rules, typically five years after closure. After retention, data is securely deleted unless a longer period is legally mandated or needed for legal claims. Full retention schedules are available in my privacy notice.
May I receive a copy of information from my terminated account?
Yes. Even after you close your Sankra Casino account, your right of access remains. You can submit a DSAR for the data I still hold. The procedure is identical: supply identification and indicate the details you require. The archived data will be retrieved and provided within the same legal deadline.
What should I do if the response does not meet my expectations?
If you feel I have not fulfilled my obligations, reach out for an explanation. The issue will be reviewed and an additional response will be given. Additionally, you are entitled to lodge a complaint with the Data Protection Authority. They will independently investigate whether I met apnews.com my obligations.
Does submitting a DSAR affect my account status?
Not at all. Using your data protection rights will not adversely affect your account. Access requests are handled impartially, and your account will not be limited, services terminated, or loyalty rewards changed because you requested information. Clarity is key, and I encourage you to make use of your entitlements.
