I treat the privacy of every Sankra Casino user seriously. As a data controller established in Norway, I manage personal information in full accordance with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request enables you request me precisely what personal data I hold about your account, how it is employed, and who it is disclosed with. This guide explains how to submit a DSAR, what to expect, and how I protect your rights during the process.
Grasping Your Data Subject Access Request
A Data Subject Access Request constitutes a structured mechanism established by Article 15 of the GDPR. It provides you the right to secure confirmation that I manage personal data about you and to receive a copy of that data. You can also learn why I manage it, which categories of data are relevant, and the recipients or categories of recipients I transmit it with, such as payment providers and regulatory compliance bodies. The DSAR is a powerful transparency tool. see everything
The scope of a DSAR is deliberately broad. It encompasses all personal information directly or indirectly linked to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I provide the data in a structured, commonly used machine-readable format such as JSON or CSV, unless you request for a simple document.
Which Details You Can Expect
Groups of Personal Data I Hold
My answer to your DSAR includes a thorough overview of the personal data I store. This typically encompasses identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also reveal if automated decision-making is used, such as risk profiling.
Layout and Transmission of Your Data
I supply the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you prefer a printed copy sent by secure post, I can organize that upon request. The response also contains an explanatory cover letter that connects each piece of data to the processing purpose and the legal basis, making the information easy to understand.
Your individual Legal Rights Under GDPR and Norwegian Law
The Entitlement to Access Pursuant to Article 15
Article 15 of the GDPR, enforced in Norway by means of the Personal Data Act, grants every data subject the right to ask for access to their personal data. I must confirm whether processing occurs, supply a copy of the data, and inform you of the purposes, categories, retention periods, and your connected rights. This legal foundation ensures you keep in control of your information while I maintain complete transparency.
Extra Rights Which Back Your Access
Aside from access, you hold the right to rectification, erasure, restriction of processing, and data portability. If you believe your data is inaccurate or incomplete, you can tell me to rectify it. Under certain situations you can also demand deletion. I mention these because a DSAR is often the first step before applying other rights. Understanding the full scope aids you submit precise requests.
Answer Timeframes and Possible Limitations
Under GDPR, I must respond to your DSAR promptly, and at the latest within one month of receiving the authenticated request. If your request is complicated or you submit multiple requests, I may lengthen this period by up to two additional months. I will inform you of any delay within the first month, together with the justifications for the delay, so you are never in doubt.
Limited circumstances may block full divulgence, for example if disclosing the data would infringe others’ rights or disclose confidential business information. In such cases I redact or reject the affected portion. I give the first response at no cost, but if you make manifestly unfounded or disproportionate requests, I may charge a fee or refuse to respond, always stating the reason and your right to file a complaint to the Datatilsynet.
Identity Authentication and Safety
Why I Need to Confirm Your Identity
Prior to disclosing any personal data, I must be certain I am communicating with the actual data subject. This safeguard prevents unauthorized entry and identity fraud. GDPR mandates me to take suitable steps to verify your identity, notably when sensitive information is involved. I therefore ask for supporting documents, but I manage them securely and delete the verification data as soon as cbc.ca the process completes.
Valid Documents for Verification
You can authenticate your identity by providing a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also require a recent utility bill showing your registered address. Please redact unnecessary sensitive information such as passport numbers. I only need the photograph and full name for verification. Digital copies sent through encrypted email are preferred.
Steps to Submit a DSAR to Sankra Casino
Necessary Information for a Valid Request
To process your request efficiently, I need clear identification details. Supply your full name, the email address registered to your casino sankra affiliate partnerskap account, and your username or account number. Describe the specific data you want to access. A general request is valid, but narrowing it down speeds up the process. State if you need the reply in a particular language or format.
Contact Channels and Address
Forward your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. Otherwise, you can mail a signed written request to Sankra Casino’s registered address in Norway. I suggest using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.
Frequently Asked Questions
Can I request data about another person, such as a relative?
I can only disclose data to the person it concerns. To safeguard privacy, I cannot provide details about another person, including a relative. If you hold legal standing like a power of attorney, furnish that documentation. Otherwise the third party must submit their own DSAR.
What should I do if I lost my registered email address?
If you misplaced your email, reach out to support providing your full name, date of birth, and registered mailing address or phone number. Your identity can be confirmed and account information retrieved, after which the DSAR will be processed. This might cause a short delay, but I will notify you throughout.
How long do you keep my data after I close my account?
I retain personal data as long as required by Norwegian anti-money laundering rules, typically five years after closure. Once retention ends, data is securely destroyed unless a longer timeframe is legally required or needed for legal disputes. Detailed retention periods appear in my privacy notice.
Can I get a copy of my closed account data?
Absolutely. Even following the closure of your Sankra Casino account, your access rights continue. You may file a DSAR for the information I still retain. The procedure is identical: supply identification and indicate the details you require. I will find the stored records and deliver them within the same statutory period.
What if I am not satisfied with the response?
Should you think I have not adhered to requirements, get in touch for clarification. The issue will be reviewed and an additional response will be given. You also have the right to complain to the Data Protection Authority. An independent inquiry will be made to determine if I satisfied my responsibilities.
Will filing a DSAR impact my account standing?
Not at all. Exercising your data protection rights has no negative impact on your account. I treat access requests neutrally and will not restrict your account, terminate services, or alter loyalty benefits because you asked for data. Openness is essential here, and I urge you to exercise your rights.