I handle the protection of every Sankra Casino user seriously. As a data controller registered in Norway, I manage personal information in full alignment with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request enables you request me precisely what personal data I hold about your account, how it is utilized, and who it is disclosed with. This guide explains how to submit a DSAR, what to expect, and how I uphold your rights throughout the process.
Comprehending Your Data Subject Access Request
A Data Subject Access Request en.wikipedia.org represents a official mechanism introduced by Article 15 of the GDPR. It grants you the right to secure confirmation that I handle personal data about you and to get a copy of that data. You can also discover why I manage it, which categories of data are relevant, and the recipients or categories of recipients I share it with, such as payment providers and regulatory compliance bodies. The DSAR is a strong transparency tool.
The scope of a DSAR is deliberately broad. It encompasses all personal information directly or indirectly linked to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I deliver the data in a organized, commonly used machine-readable format such as JSON or CSV, unless you specify for a simple document.
Method for Submit a DSAR to Sankra Casino
Required Information for a Valid Request
To process your request efficiently, I need clear identification details. Supply your full name, the email address registered to your Sankra Casino account, and your username or account number. Outline the specific data you want to access. A general request is valid, but focusing it speeds up the process. Mention if you need the reply in a particular language or format.
Contact Channels and Address
Forward your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. Alternatively, you can mail a signed written request to Sankra Casino’s registered address in Norway. I advise using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.
Your individual Legal Rights Per GDPR and Norwegian Law
The Access Right Pursuant to Article 15
Article 15 of the GDPR, enforced in Norway by means of the Personal Data Act, grants every data subject the right to demand access to their personal data. I must confirm whether processing takes place, provide a copy of the data, and inform you of the purposes, categories, retention periods, and your associated rights. This legal foundation guarantees you stay in control of your information while I maintain complete transparency.
Extra Rights That Underpin Your Access
Beyond access, you possess the authority to rectification, erasure, restriction of processing, and data portability. If you suspect your data is incorrect or partial, you can tell me to rectify it. Under certain circumstances you can also request deletion. I mention these because a DSAR is frequently the first step before exercising other rights. Being aware of the full scope helps you make precise requests.
Identity Confirmation and Security
Why I Must Verify Your Identity
Prior to disclosing any personal data, I must be certain I am communicating with the real data subject. This precaution prevents unauthorised access and identity fraud. GDPR obliges me to take suitable steps to verify your identity, particularly when sensitive information is involved. I thus ask for supporting documents, but I manage them securely and delete the verification data as soon as the process finishes.
Valid Documents for Verification
You can confirm your identity by submitting a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also require a recent utility bill showing your registered address. Please obscure unnecessary sensitive information such as passport numbers. I only request the photograph and full name for verification. Digital copies sent through encrypted email are ideal.
Which Details You Can Expect
Types of Personal Data I Hold
My response to your DSAR contains a detailed summary of the personal data I store. This usually encompasses identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also reveal if automated decision-making is used, such as risk profiling.
Structure and Transmission of Your Data
I provide the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you choose a printed copy sent by secure post, I can set up that upon request. The response also features an explanatory cover letter that connects each piece of data to the processing purpose and the legal basis, making the information easy to understand.
Response Timelines and Applicable Constraints
Under GDPR, I am required to answer your DSAR without undue delay, and at the latest within 30 days of getting the verified request. If your request is intricate or you file multiple requests, I may prolong this period by up to two further months. I will notify you of any extension within the first month, together with the justifications for the delay, so you are always kept informed.
Limited circumstances may block full release, for example if releasing the data would infringe others’ rights or reveal confidential business data. In such cases I edit or deny the relevant portion. I give the first response without charge, but if you make obviously groundless or disproportionate requests, I may levy a charge or decline to act, always explaining the reason and your right to lodge a complaint to the Datatilsynet.
Common Questions
Is it possible to ask for data about someone else, like a family member?
Information is released solely to the person it relates to https://sankra.no/legal-and-affiliates/. For privacy protection, I will not release information about someone else, even a relative. Should you possess legal authority such as a power of attorney, please submit that paperwork. If not, the other person must submit their own DSAR.
What should I do if I lost my registered email address?
If you lost your email, contact support with full name, date of birth, and registered postal address or phone. I am able to authenticate your identity and restore account information, then handle the DSAR. This might cause a short delay, but I will notify you throughout.
How long do you keep my data after I close my account?
Personal data is kept for the duration mandated by Norwegian anti-money laundering regulations, usually five years following closure. Following the retention period, data is safely erased unless a longer duration is required by law or necessary for legal proceedings. Specific retention timelines are outlined in my privacy policy.
May I receive a copy of information from my terminated account?
Certainly. Even after you close your Sankra Casino account, your right of access remains. A DSAR can be submitted for the data https://www.reddit.com/r/explainlikeimfive/comments/ri8mc9/eli5_how_betting_winning_and_losing_at_horse/ I continue to keep. The procedure is identical: supply identification and indicate the details you require. I will find the stored records and deliver them within the same statutory period.
What happens if I am unhappy with the reply?
Should you think I have not adhered to requirements, get in touch for clarification. The issue will be reviewed and an additional response will be given. Additionally, you are entitled to lodge a complaint with the Data Protection Authority. An independent inquiry will be made to determine if I satisfied my responsibilities.
Does making a DSAR influence my account status?
No, it does not. Asserting your data protection rights carries no negative consequences for your account. I treat access requests neutrally and will not restrict your account, terminate services, or alter loyalty benefits because you asked for data. Clarity is key, and I encourage you to make use of your entitlements.