I take the privacy of every casino sankra brukeravtale user with utmost care. As a data controller established in Norway, I handle personal information in full accordance with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request allows you request me specifically what personal data I maintain about your account, how it is used, and who it is disclosed with. This guide outlines how to file a DSAR, what to look forward to, and how I uphold your rights throughout the process.
Response Timelines and Applicable Constraints
Under GDPR, I am required to answer your DSAR without undue delay, and at the latest within 30 days of obtaining the authenticated request. If your request is complicated or you file multiple requests, I may prolong this period by up to two extra months. I will notify you of any delay within the first month, together with the reasons for the delay, so you are never left wondering.
Specific circumstances may block full release, for example if disclosing the data would violate others’ rights or expose confidential business data. In such cases I edit or deny the affected portion. I offer the first response free of charge, but if you make manifestly unfounded or unreasonable requests, I may charge a fee or choose not to act, always clarifying the reason and your right to file a complaint to the Datatilsynet.
Which Details You Can Expect
Types of Personal Data I Maintain
My answer to your DSAR includes a comprehensive overview of the personal data I keep. This usually encompasses identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also reveal if automated decision-making is used, such as risk profiling.
Layout and Delivery of Your Data
I furnish the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you choose a printed copy sent by secure post, I can arrange that upon request. The response also contains an explanatory cover letter that links each piece of data to the processing purpose and the legal basis, making the information easy to understand.
Comprehending Your Data Subject Access Request
A Data Subject Access Request constitutes a formal mechanism established by Article 15 of the GDPR. It provides you the right to receive confirmation that I handle personal data about you and to receive a copy of that data. You can also find out why I manage it, which categories of data are relevant, and the recipients or categories of recipients I transmit it with, such as payment providers and regulatory compliance bodies. The DSAR is a effective transparency tool.
The scope of a DSAR is purposefully broad. It covers all personal information directly or indirectly connected to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I supply the data in a systematic, commonly used machine-readable format such as JSON or CSV, unless you ask for a simple document.
Common Questions
May I request information about another individual, for example a relative?
I can only disclose data to the person it concerns. Due to privacy safeguards, I cannot disclose information about a third party, even a family member. If you have legal authority like a power of attorney, provide that documentation. If not, the other person must submit their own DSAR.
What should I do if I lost my registered email address?
In case you forgot your email, contact support with your complete name, date of birth, and registered home address or telephone. Your identity can be confirmed and account information retrieved, after which the DSAR will be processed. This may add a few days, but I will keep you informed.
For how long is my data retained after account closure?
Personal data is kept for the duration mandated by Norwegian anti-money laundering regulations, usually five years following closure. Following the retention period, data is safely erased unless a longer duration is required by law or necessary for legal proceedings. Specific retention timelines are outlined in my privacy policy.
May I receive a copy of information from my terminated account?
Certainly. Even following the closure of your Sankra Casino account, your access rights continue. You can submit a DSAR for the data I still hold. The steps are unchanged: present identification and state the information you seek. I will locate the archived records and supply them within the same legal timeframe.
What happens if I am unhappy with the reply?
If you feel I have not fulfilled my obligations, reach out for an explanation. I will review the matter and provide a supplementary reply. Additionally, you are entitled to lodge a complaint with the Data Protection Authority. An independent inquiry will be made to determine if I satisfied my responsibilities.
Will filing a DSAR impact my account standing?
No. Exercising your data protection rights has no negative impact on your account. I treat access requests neutrally and will not restrict your account, terminate services, or alter loyalty benefits because you asked for data. Openness is essential here, and I urge you to exercise your rights.
Method for Submit a DSAR to Sankra Casino
Essential Information for a Valid Request
To handle your request promptly, I need specific identification details. Supply your full name, the email address registered to your Sankra Casino account, and your username or account number. Describe the specific data you want to access. A general request is valid, but focusing it speeds up the process. Mention if you need the reply in a particular language or format.
Contact Channels and Address
Submit your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. Otherwise, you can mail a signed written request to Sankra Casino’s registered address in Norway. I suggest using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.
Your personal Legal Rights Under GDPR and Norwegian Law
The Access Right Pursuant to Article 15
Article 15 of the GDPR, enforced in Norway through the Personal Data Act, provides every data subject the entitlement to request access to their personal data. I must confirm whether processing is happening, furnish a copy of the data, and inform you of the aims, categories, retention periods, and your associated rights. This legal foundation secures you keep in control of your information while I preserve complete transparency.
Further Rights That Support Your Access
In addition to access, you possess the entitlement to rectification, erasure, restriction of processing, and data portability. If you think your data is wrong or incomplete, you can ask me to rectify it. Under certain conditions you can also request deletion. I mention these because a DSAR is frequently the first step before applying other rights. Being aware of the full scope helps you make precise requests.
Identity Verification and Protection
Why I Need to Confirm Your Identity
Before releasing any personal data, I must be certain I am communicating with the real data subject. This precaution prevents illegal access and identity fraud. GDPR obliges me to take reasonable steps to verify your identity, especially when sensitive information is involved. I therefore ask for supporting documents, but I process them securely and delete the verification data as soon as the process finishes.
Accepted Documents for Verification
You can confirm your identity by providing a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also ask for a recent utility bill showing your registered address. Please redact unnecessary sensitive information such as passport numbers. I only request the photograph and full name for verification. Digital copies sent through encrypted email are recommended.
