I handle the confidentiality of every Sankra Casino user seriously. As a data controller registered in Norway, I manage personal information in full alignment with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request lets you inquire me specifically what personal data I hold about your account, how it is used, and who it is disclosed with. This guide describes how to make a DSAR, what to look forward to, and how I safeguard your rights throughout the process.
Understanding Your Data Subject Access Request
A Data Subject Access Request is a official mechanism introduced by Article 15 of the GDPR. It provides you the right to secure confirmation that I manage personal data about you and to get a copy of that data. You can also learn why I process it, which categories of data are included, and the recipients or categories of recipients I share it with, such as payment providers and regulatory compliance bodies. The DSAR is a powerful transparency tool.
The scope of a DSAR is intentionally broad. It includes all personal information directly or indirectly connected to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I deliver the data in a structured, commonly used machine-readable format such as JSON or CSV, unless you ask for a simple document.
Your personal Legal Rights Under GDPR and Norwegian Law
The Entitlement to Access Under Article 15
Article 15 of the GDPR, applied in Norway through the Personal Data Act, provides every data subject the entitlement to demand access to their personal data. I have to confirm whether processing is happening, supply a copy of the data, and inform you of the objectives, categories, retention periods, and your connected rights. This legal foundation secures you remain in control of your information while I preserve complete transparency. vetted source
Further Rights Which Back Your Access
Beyond access, you possess the right to rectification, erasure, restriction of processing, and data portability. If you believe your data is inaccurate or partial, you can tell me to rectify it. Under certain circumstances you can also demand deletion. I note these because a DSAR is frequently the first step before using other rights. Understanding the full scope helps you submit precise requests.
Identity Verification and Protection
Why I Have to Authenticate Your Identity
Before sharing any personal data, I must be sure I am communicating with the real data subject. This precaution prevents unauthorized entry and identity fraud. GDPR obliges me to take reasonable steps to verify your identity, notably when sensitive information is involved. I consequently ask for supporting documents, but I handle them securely and delete the verification data as soon as the process completes.
Accepted Documents for Verification
You can confirm your identity by sending a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also ask for a recent utility bill showing your registered address. Please remove unnecessary sensitive information such as passport numbers. I only require the photograph and full name for verification. Digital copies sent through encrypted email are ideal.
Which Details You Can Expect
Types of Personal Data I Hold
My answer to your DSAR includes a thorough summary of the personal data I hold. This usually includes identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also disclose if automated decision-making is used, such as risk profiling.
Structure and Transmission of Your Data
I furnish the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you would rather a printed copy sent by secure post, I can organize that upon request. The response also contains an explanatory cover letter that maps each piece of data to the processing purpose and the legal basis, making the information easy to understand.
Steps to Submit a DSAR to Sankra Casino
Required Information for a Valid Request
To handle your request promptly, I need specific identification details. Give your full name, the email address registered to your Sankra Casino account, and your username or account number. Specify the specific data you want to access. A general request is valid, but specifying it speeds up the process. Mention if you need the reply in a particular language or format.
Communication Channels and Address
Forward your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. Otherwise, you can mail a signed written request to Sankra Casino’s registered address in Norway. I recommend using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.
Answer Timeframes and Applicable Constraints
Under GDPR, I am required to answer your DSAR without undue delay, and at the latest within 30 days of getting the verified request. If your request is complicated or you file multiple requests, I may extend this period by up to two extra months. I will notify you of any prolongation within the first month, together with the grounds for the delay, so you are always kept informed.
Restricted circumstances may block full release, for example if sharing the data would violate others’ rights or reveal confidential business data. In such cases I censor or deny the impacted portion. I offer the first response without charge, but if you make obviously groundless or unreasonable requests, I may charge a fee or refuse to respond, always stating the reason and your right to file a complaint to the Datatilsynet.
Common Questions
Can I request data about another person, such as a relative?
Information is released solely to the person it relates to. For privacy protection, I will not release information about someone else, even a relative. If you hold legal standing like a power of attorney, furnish that documentation. Otherwise, the third party needs to file their own DSAR.
What should I do if I lost my registered email address?
If you misplaced your email, reach out to support providing your full name, date of birth, and registered mailing address or phone number. I am able to authenticate your identity and restore account information, then handle the DSAR. This might cause a short delay, but I will notify you throughout.
For how long is my data retained after account closure?
Personal data is kept for the duration mandated by Norwegian anti-money laundering regulations, usually five years following closure. Following the retention period, data is safely erased unless a longer duration is required by law or necessary for legal proceedings. Full retention schedules are available in my privacy notice.
May I receive a copy of information from my terminated account?
Yes. Even following the closure of your Sankra Casino account, your access rights continue. You may file a DSAR for the information I still retain. The process is the same: provide identification and specify the information you need. I will locate the archived records and supply them within the same legal timeframe.
What if I am not satisfied with the response?
If you feel I have not fulfilled my obligations, reach out for an explanation. I will examine the situation and issue a further reply. Additionally, you are entitled to lodge a complaint with the Data Protection Authority. They will conduct an independent investigation into whether I fulfilled my duties.
Does submitting a DSAR affect my account status?
No sankra.no. Exercising your data protection rights has no negative impact on your account. Access requests are handled impartially, and your account will not be limited, services terminated, or loyalty rewards changed because you requested information. Openness is essential here, and I urge you to exercise your rights.