I handle the privacy of every Sankra Casino user seriously https://sankra.no/legal-and-affiliates/. As a data controller based in Norway, I handle personal information in full compliance with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request allows you request me precisely what personal data I store about your account, how it is utilized, and who it is transmitted with. This guide describes how to file a DSAR, what to look forward to, and how I safeguard your rights during the process.
Common Questions
Is it possible to ask for data about someone else, like a family member?
Information is released solely to the person it relates to. Due to privacy safeguards, I cannot disclose information about a third party, even a family member. Should you possess legal authority such as a power of attorney, please submit that paperwork. Otherwise, the third party needs to file their own DSAR.
What should I do if I lost my registered email address?
In case you forgot your email, contact support with your complete name, date of birth, and registered home address or telephone. Your identity can be confirmed and account information retrieved, after which the DSAR will be processed. This might cause a short delay, but I will notify you throughout.
What is the data retention period after I close my account?
I retain personal data as long as required by Norwegian anti-money laundering rules, typically five years after closure. Once retention ends, data is securely destroyed unless a longer timeframe is legally required or needed for legal disputes. Detailed retention periods appear in my privacy notice.
Is it possible to obtain a copy of data from my closed account?
Certainly. Even following the closure of your Sankra Casino account, your access rights continue. You may file a DSAR for the information I still retain. The procedure is identical: supply identification and indicate the details you require. I will locate the archived records and supply them within the same legal timeframe.
What should I do if the response does not meet my expectations?
If you believe I have not complied, contact me for clarification. The issue will be https://en.wikipedia.org/wiki/Realtime_Gaming reviewed and an additional response will be given. Additionally, you are entitled to lodge a complaint with the Data Protection Authority. They will independently investigate whether I met my obligations.
Does making a DSAR influence my account status?
No, it does not. Asserting your data protection rights carries no negative consequences for your account. I process access requests without bias and will not limit your account, end services, or modify loyalty perks due to your data request. Openness is essential here, and I urge you to exercise your rights.
Method for Submit a DSAR to Sankra Casino
Required Information for a Valid Request
To complete your request quickly, I need clear identification details. Give your full name, the email address registered to your Sankra Casino account, and your username or account number. Specify the specific data you want to access. A general request is valid, but specifying it speeds up the process. State if you need the reply in a particular language or format.
Submission Channels and Address
Send your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. Otherwise, you can mail a signed written request to Sankra Casino’s registered address in Norway. I suggest using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.
Comprehending Your Data Subject Access Request
A Data Subject Access Request constitutes a structured mechanism created by Article 15 of the GDPR. It provides you the right to obtain confirmation that I manage personal data about you and to receive a copy of that data. You can also discover why I handle it, which categories of data are relevant, and the recipients or categories of recipients I share it with, such as payment providers and regulatory compliance bodies. The DSAR is a effective transparency tool.
The scope of a DSAR is deliberately broad. It encompasses all personal information directly or indirectly linked to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I supply the data in a organized, commonly used machine-readable format such as JSON or CSV, unless you request for a simple document.
Reply Deadlines and Possible Limitations
Under GDPR, I am required to answer your DSAR promptly, and at the latest within 30 days of obtaining the verified request. If your request is complicated or you file multiple requests, I may prolong this period by up to two additional months. I will notify you of any delay within the first month, together with the justifications for the delay, so you are never left wondering.
Restricted circumstances may prevent full disclosure, for example if sharing the data would harm others’ rights or reveal confidential business information. In such cases I redact or reject the impacted portion. I provide the first response without charge, but if you make manifestly unfounded or disproportionate requests, I may levy a charge or choose not to act, always explaining the reason and your right to complain to the Datatilsynet.
Identity Verification and Security
Why I Must Verify Your Identity
Before releasing any personal data, I must be certain I am communicating with the real data subject. This safeguard prevents unauthorized entry and identity fraud. GDPR requires me to take reasonable steps to verify your identity, notably when sensitive information is involved. I therefore ask for supporting documents, but I handle them securely and remove the verification data as soon as the process completes.
Valid Documents for Verification
You can verify your identity by sending a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also require a recent utility bill showing your registered address. Please obscure unnecessary sensitive information such as passport numbers. I only need the photograph and full name for verification. Digital copies sent through encrypted email are recommended.
Your personal Legal Rights Pursuant to GDPR and Norwegian Law
The Right of Access Under Article 15
Article 15 of the GDPR, applied in Norway through the Personal Data Act, provides every data subject the authority to demand access to their personal data. I am required to confirm whether processing is happening, supply a copy of the data, and advise you of the aims, categories, retention periods, and your connected rights. This legal foundation ensures you stay in control of your information while I uphold complete transparency.
Further Rights That Support Your Access
Aside from access, you possess the authority to rectification, erasure, restriction of processing, and data portability. If you suspect your data is inaccurate or incomplete, you can request me to correct it. Under certain conditions you can also ask for deletion. I reference these because a DSAR is frequently the first step before exercising other rights. Understanding the full scope assists you formulate precise requests.
Which Details You Can Expect
Groups of Personal Data I Maintain
My response to your DSAR includes a thorough summary of the personal data I hold. This typically encompasses identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also disclose if automated decision-making is used, such as risk profiling.
Structure and Provision of Your Data
I supply the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you would rather a printed copy sent by secure post, I can set up that upon request. The response also contains an explanatory cover letter that connects each piece of data to the processing purpose and the legal basis, making the information easy to understand.