I take the confidentiality of every sankracasino vilkår og betingelser user with high priority. As a data controller registered in Norway, I handle personal information in full accordance with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request enables you request me specifically what personal data I store about your account, how it is utilized, and who it is disclosed with. This guide outlines how to make a DSAR, what to anticipate, and how I uphold your rights throughout the process.
Frequently Asked Questions
Is it possible to ask for data about someone else, like a family member?
I can only disclose data to the person it concerns. Due to privacy safeguards, I cannot disclose information about a third party, even a family member. If you hold legal standing like a power of attorney, furnish that documentation. If not, the other person must submit their own DSAR.
What happens if I cannot recall my registered email?
If you misplaced your email, reach out to support providing your full name, date of birth, and registered mailing address or phone number. I am able to authenticate your identity and restore account information, then handle the DSAR. This might cause a short delay, but I will notify you throughout.
What is the data retention period after I close my account?
Personal data is kept for the duration mandated by Norwegian anti-money laundering regulations, usually five years following closure. Following the retention period, data is safely erased unless a longer duration is required by law or necessary for legal proceedings. Specific retention timelines are outlined in my privacy policy.
Can I get a copy of my closed account data?
Absolutely. Your right to access persists even after your Sankra Casino account is closed. You may file a DSAR for the information I still retain. The process is the same: provide identification and specify the information you need. The archived data will be retrieved and provided within the same legal deadline.
What should I do if the response does not meet my expectations?
If you feel I have not fulfilled my obligations, reach out for an explanation. I will review the matter and provide a supplementary reply. Additionally, you are entitled to lodge a complaint with the Data Protection Authority. They will independently investigate whether I met my obligations.
Does making a DSAR influence my account status?
No, it does not. Using your data protection rights will not adversely affect your account. Access requests are handled impartially, and your account will not be limited, services terminated, or loyalty rewards changed because you requested information. Transparency is fundamental here, and I encourage you to use your rights.
What Data You Will Receive
Groups of Personal Data I Store
My answer to your DSAR includes a thorough summary of the personal data I keep. This usually covers identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also disclose if automated decision-making is used, such as risk profiling.
Structure and Delivery of Your Data
I supply the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you prefer a printed copy sent by secure post, I can arrange that upon request. The response also features an explanatory cover letter that connects each piece of data to the processing purpose and the legal basis, making the information easy to understand.
Response Timelines and Possible Limitations
Under GDPR, I need to reply to your DSAR without undue delay, and at the latest within a month of receiving the confirmed request. If your request is intricate or you make multiple requests, I may extend this period by up to two extra months. I will advise you of any delay within the first month, together with the justifications for the delay, so you are never in doubt.
Specific circumstances may block full disclosure, for example if sharing the data would harm others’ rights or disclose confidential business details. In such cases I edit or refuse the relevant portion. I offer the first response free of charge, but if you make manifestly unfounded or unreasonable requests, I may charge a fee or decline to act, always clarifying the reason and your right to complain to the Datatilsynet.
Grasping Your Data Subject Access Request
A Data Subject Access Request constitutes a formal mechanism established by Article 15 of the GDPR. It provides you the right to receive confirmation that I handle personal data about you and to obtain a copy of that data. You can also discover why I manage it, which categories of data are relevant, and the recipients or categories of recipients I disclose it with, such as payment providers and regulatory compliance bodies. The DSAR is a powerful transparency tool.
The scope of a DSAR is purposefully broad. It encompasses all personal information directly or indirectly linked to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I provide the data in a systematic, commonly used machine-readable format such as JSON or CSV, unless you specify for a simple document.
Identity Confirmation and Safety
Why I Must Verify Your Identity
Prior to disclosing any personal data, I must be sure I am communicating with the actual data subject. This safeguard prevents unauthorised access and identity fraud. GDPR obliges me to take suitable steps to verify your identity, especially when sensitive information is involved. I therefore ask for supporting documents, but I manage them securely and remove the verification data as soon as the process finishes.
Valid Documents for Verification
You can authenticate your identity by submitting a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also ask for a recent utility bill showing your registered address. Please redact unnecessary sensitive information such as passport numbers. I only require the photograph and full name for verification. Digital copies sent through encrypted email are preferred.
How to Submit a DSAR to Sankra Casino
Essential Information for a Valid Request
To process your request promptly, I need precise identification details. Supply your full name, the email address registered to your Sankra Casino account, and your username or account number. Describe the specific data you want to access. A general request is valid, but focusing it speeds up the process. State if you need the reply in a particular language or format.
Contact Channels and Address
Submit your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. Alternatively, you can mail a signed written request to Sankra Casino’s registered address in Norway. step-by-step guide I advise using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.
Your individual Legal Rights Under GDPR and Norwegian Law
The Entitlement to Access Pursuant to Article 15
Article 15 of the GDPR, implemented in Norway via the Personal Data Act, provides every data subject the entitlement to request access to their personal data. I am required to confirm whether processing takes place, provide a copy of the data, and advise you of the objectives, categories, retention periods, and your related rights. This legal foundation ensures you stay in control of your information while I preserve complete transparency.
Extra Rights Which Back Your Access
Beyond access, you hold the authority to rectification, erasure, restriction of processing, and data portability. If you believe your data is inaccurate or partial, you can tell me to rectify it. Under certain conditions you can also demand deletion. I note these because a DSAR is commonly the first step before using other rights. Knowing the full scope assists you formulate precise requests.