I take the protection of every casino sankra partnere user seriously. As a data controller registered in Norway, I handle personal information in full compliance with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request lets you inquire me precisely what personal data I store about your account, how it is utilized, and who it is shared with. This guide explains how to file a DSAR, what to look forward to, and how I protect your rights during the process.
Understanding Your Data Subject Access Request
A Data Subject Access Request constitutes a structured mechanism introduced by Article 15 of the GDPR. It grants you the right to obtain confirmation that I handle personal data about you and to receive a copy of that data. You can also learn why I manage it, which categories of data are relevant, and the recipients or categories of recipients I share it with, such as payment providers and regulatory compliance bodies. The DSAR is a strong transparency tool.
The scope of a DSAR is deliberately broad. It covers all personal information directly or indirectly linked to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I provide the data in a structured, commonly used machine-readable format such as JSON or CSV, unless you ask for a simple document.
Method for Submit a DSAR to Sankra Casino
Essential Information for a Valid Request
To handle your request promptly, I need specific identification details. Supply your full name, the email address registered to your Sankra Casino account, and your username or account number. Specify the specific data you want to access. A general request is valid, but narrowing it down speeds up the process. Mention if you need the reply in a particular language or format.
Submission Channels and Address
Forward your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. Otherwise, you can mail a signed written request to Sankra Casino’s registered address in Norway. I recommend using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.
Which Details You Will Receive
Categories of Personal Data I Maintain
My response to your DSAR provides a thorough summary of the personal data I keep. This typically covers identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also indicate if automated decision-making is used, such as risk profiling.
Layout and Delivery of Your Data
I furnish the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you prefer a printed copy sent by secure post, I can organize that upon request. The response also includes an explanatory cover letter that links each piece of data to the processing purpose and the legal basis, making the information easy to understand.
Identity Authentication and Safety
Why I Must Verify Your Identity
Before releasing any personal data, I must be sure I am communicating with the real data subject. This measure prevents unauthorised access and identity fraud. read the full article GDPR mandates me to take reasonable steps to verify your identity, particularly when sensitive information is involved. I consequently ask for supporting documents, but I handle them securely and remove the verification data as soon as the process ends.
Accepted Documents for Verification
You can verify your identity by submitting a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also request a recent utility bill showing your registered address. Please obscure unnecessary sensitive information such as passport numbers. I only require the photograph and full name for verification. Digital copies sent through encrypted email are recommended.
Your personal Legal Rights Per GDPR and Norwegian Law
The Right of Access Pursuant to Article 15
Article 15 of the GDPR, enforced in Norway by means of the Personal Data Act, gives every data subject the authority to demand access to their personal data. I am required to confirm whether processing takes place, furnish a copy of the data, and advise you of the objectives, categories, retention periods, and your connected rights. This legal foundation ensures you stay in control of your information while I maintain complete transparency.
Further Rights That Support Your Access
Aside from access, you hold the right to rectification, erasure, restriction of processing, and data portability. If you believe your data is incorrect or incomplete, you can tell me to fix it. Under certain circumstances you can also demand deletion. I mention these because a DSAR is frequently the first step before applying other rights. Understanding the full scope helps you submit precise requests.
Answer Timeframes and Potential Restrictions
Under GDPR, I need to reply to your DSAR without undue delay, and at the latest within 30 days of receiving the verified request. If your request is intricate or you file multiple requests, I may lengthen this period by up to two extra months. I will notify you of any prolongation within the first month, together with the reasons for the delay, so you are never left wondering.
Restricted circumstances may prevent full release, for example if releasing the data would violate others’ rights or expose confidential business data. In such cases I censor or deny the relevant portion. I provide the first response at no cost, but if you make obviously groundless or excessive requests, I may charge a fee or decline to act, always stating the reason and your right to lodge a complaint to the Datatilsynet.
Common Questions
Can I request data about another person, such as a relative?
Data is only shared with the individual it pertains to. To safeguard privacy, I cannot provide details about another person, including a relative. Should you possess legal authority such as a power of attorney, please submit that paperwork. Otherwise, the third party needs to file their own DSAR.
What happens if I cannot recall my registered email?
In case you forgot your email, contact support with your complete name, date of birth, and registered home address or telephone. I can verify your identity and recover account details, then process the DSAR. This might cause a short delay, but I will notify you throughout.
For how long is my data retained after account closure?
I retain personal data as long as required by Norwegian anti-money laundering rules, typically five years after closure. Following the retention period, data is safely erased unless a longer duration is required by law or necessary for legal proceedings. Full retention schedules are available in my privacy notice.
May I receive a copy of information from my terminated account?
Yes. Even following the closure of your Sankra Casino account, your access rights continue. A DSAR can be submitted for the data I continue to keep. The process is the same: provide identification and specify the information you need. I will find the stored records and deliver them within the same statutory period.
What if I am not satisfied with the response?
If you feel I have not fulfilled my obligations, reach out for an explanation. I will examine the situation and issue a further reply. Additionally, you are entitled to lodge a complaint with the Data Protection Authority. They will conduct an independent investigation into whether I fulfilled my duties.
Does submitting a DSAR affect my account status?
No. Exercising your data protection rights has no negative impact on your account. I treat access requests neutrally and will not restrict your account, terminate services, or alter loyalty benefits because you asked for data. Transparency is fundamental here, and I encourage you to use your rights.