I treat the privacy of every Sankra Casino user with utmost care sankra.no. As a data controller based in Norway, I manage personal information in full alignment with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request allows you ask me specifically what personal data I store about your account, how it is employed, and who it is shared with. This guide explains how to file a DSAR, what to anticipate, and how I safeguard your rights over the course of the process.
Understanding Your Data Subject Access Request
A Data Subject Access Request is a formal mechanism introduced by Article 15 of the GDPR. It provides you the right to obtain confirmation that I process personal data about you and to receive a copy of that data. You can also discover why I handle it, which categories of data are involved, and the recipients or categories of recipients I share it with, such as payment providers and regulatory compliance bodies. The DSAR is a effective transparency tool.
The scope of a DSAR is purposefully broad. It includes all personal information directly or indirectly associated to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I provide the data in a structured, commonly used machine-readable format such as JSON or CSV, unless you ask for a simple document.
Identity Authentication and Protection
Why I Must Verify Your Identity
Before releasing any personal data, I must be certain I am communicating with the real data subject. This precaution prevents unauthorised access and identity fraud. the basics covered GDPR obliges me to take reasonable steps to verify your identity, particularly when sensitive information is involved. I therefore ask for supporting documents, but I process them securely and delete the verification data as soon as the process completes.
Valid Documents for Verification
You can verify your identity by submitting a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also ask for a recent utility bill showing your registered address. Please remove unnecessary sensitive information such as passport numbers. I only require the photograph and full name for verification. Digital copies sent through encrypted email are ideal.
Your personal Legal Rights Per GDPR and Norwegian Law
The Entitlement to Access Pursuant to Article 15
Article 15 of the GDPR, enforced in Norway by means of the Personal Data Act, gives every data subject the entitlement to ask for access to their personal data. I am required to confirm whether processing takes place, furnish a copy of the data, and advise you of the purposes, categories, retention periods, and your connected rights. This legal foundation guarantees you remain in control of your information while I preserve complete transparency.
Extra Rights That Underpin Your Access
In addition to access, you have the entitlement to rectification, erasure, restriction of processing, and data portability. If you think your data is inaccurate or incomplete, you can tell me to fix it. Under certain circumstances you can also request deletion. I note these because a DSAR is frequently the first step before applying other rights. Understanding the full scope aids you make precise requests.
Reply Deadlines and Applicable Constraints
Under GDPR, I must respond to your DSAR without unnecessary delay, and at the latest within one month of getting the verified request. If your request is complicated or you make multiple requests, I may prolong this period by up to two additional months. I will advise you of any extension within the first month, together with the grounds for the delay, so you are never left wondering.
Limited circumstances may hinder full release, for example if releasing the data would violate others’ rights or disclose confidential business details. In such cases I censor or refuse the impacted portion. I give the first response free of charge, but if you make clearly baseless or unreasonable requests, I may levy a charge or refuse to respond, always stating the reason and your right to complain to the Datatilsynet.
FAQ
Can I request data about another person, such as a relative?
Information is released solely to the person it relates to. For privacy protection, I will not release information about someone else, even a relative. If you hold legal standing like a power of attorney, furnish that documentation. Otherwise, the third party needs to file their own DSAR.
What should I do if I lost my registered email address?
If you misplaced your email, reach out to support providing your full name, date of birth, and registered mailing address or phone number. I am able to authenticate your identity and restore account information, then handle the DSAR. This may add a few days, but I will keep you informed.
For how long is my data retained after account closure?
I retain personal data as long as required by Norwegian anti-money laundering rules, typically five years after closure. After retention, data is securely deleted unless a longer period is legally mandated or needed for legal claims. Specific retention timelines are outlined in my privacy policy.
Can I get a copy of my closed account data?
Absolutely. Even following the closure of your Sankra Casino account, your access rights continue. You can submit a DSAR for the data I still hold. The steps are unchanged: present identification and state the information you seek. The archived data will be retrieved and provided within the same legal deadline.
What should I do if the response does not meet my expectations?
If you feel I have not fulfilled my obligations, reach out for an explanation. The issue will be reviewed and an additional response will be given. You may also file a grievance with the Data Protection Authority. They will independently investigate whether I met my obligations.
Does submitting a DSAR affect my account status?
Not at all. Using your data protection rights will not adversely affect your account. I treat access requests neutrally and will not restrict your account, terminate services, or alter loyalty benefits because you asked for data. Transparency is fundamental here, and I encourage you to use your rights.
Which Details You Will Receive
Groups of Personal Data I Maintain
My reply to your DSAR provides a comprehensive outline of the personal data I hold. This usually includes identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also indicate if automated decision-making is used, such as risk profiling.
Layout and Transmission of Your Data
I furnish the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you would rather a printed copy sent by secure post, I can organize that upon request. the rundown The response also contains an explanatory cover letter that connects each piece of data to the processing purpose and the legal basis, making the information easy to understand.
Steps to Submit a DSAR to Sankra Casino
Required Information for a Valid Request
To process your request quickly, I need clear identification details. Give your full name, the email address registered to your Sankra Casino account, and your username or account number. Describe the specific data you want to access. A general request is valid, but focusing it speeds up the process. Mention if you need the reply in a particular language or format.
Communication Channels and Address
Submit your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. Otherwise, you can mail a signed written request to Sankra Casino’s registered address in Norway. I advise using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.