I handle the confidentiality of every Sankra Casino user with utmost care. As a data controller based in Norway, I handle personal information in full accordance with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request lets you request me specifically what personal data I store about your account, how it is utilized, and who it is transmitted with. This guide outlines how to file a DSAR, what to look forward to, and how I uphold your rights during the process.
What Data You Shall Get
Types of Personal Data I Maintain
My reply to your DSAR includes a comprehensive summary of the personal data I hold. This usually covers identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also disclose if automated decision-making is used, such as risk profiling.
Structure and Transmission of Your Data
I furnish the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you choose a printed copy sent by secure post, I can set up that upon request. The response also includes an explanatory cover letter that connects each piece of data to the processing purpose and the legal basis, making the information easy to understand.
Grasping Your Data Subject Access Request
A Data Subject Access Request constitutes a formal mechanism established by Article 15 of the GDPR. It provides you the right to receive confirmation that I process personal data about you and to get a copy of that data. You can also find out why I process it, which categories of data are involved, and the recipients or categories of recipients I disclose it with, such as payment providers and regulatory compliance bodies. The DSAR is a strong transparency tool.
The scope of a DSAR is purposefully broad. It encompasses all personal information directly or indirectly associated to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I deliver the data in a systematic, commonly used machine-readable format such as JSON or CSV, unless you request for a simple document.
How to Submit a DSAR to Sankra Casino
Essential Information for a Valid Request
To process your request efficiently, I need precise identification details. Supply your full name, the email address registered to your Sankra Casino account, and your username or account number. Specify the specific data you want to access. A general request is valid, but specifying it speeds up the process. Mention if you need the reply in a particular language or format.
Submission Channels and Address
Send your DSAR by email to our dedicated Data Protection Officer at [email protected]. As an option, you can mail a signed written request to sankracasino partnere Casino’s registered address in Norway. I suggest using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.
Common Questions
May I request information about another individual, for example a relative?
Data is only shared with the individual it pertains to. To safeguard privacy, I cannot provide details about another person, including a relative. If you hold legal standing like a power of attorney, furnish that documentation. Otherwise, the third party needs to file their own DSAR.
What if I have forgotten my registered email address?
In case you forgot your email, contact support with your complete name, date of birth, and registered home address or telephone. I am able to authenticate your identity and restore account information, then handle the DSAR. This could take a few extra days, but I will update you on progress.
For how long is my data retained after account closure?
I retain personal data as long as required by Norwegian anti-money laundering rules, typically five years after closure. After retention, data is securely deleted unless a longer period is legally mandated or needed for legal claims. Detailed retention periods appear in my privacy notice.
Can I get a copy of my closed account data?
Yes. Even after you close your Sankra Casino account, your right of access remains. A DSAR can be submitted for the data I continue to keep. The steps are unchanged: present identification and state the information you seek. The archived data will be retrieved and provided within the same legal deadline.
What if I am not satisfied with the response?
If you feel I have not fulfilled my obligations, reach out for an explanation. The issue will be reviewed and an additional response will be given. You may also file a grievance with the Data Protection Authority. They will conduct an independent investigation into whether I fulfilled my duties.
Does making a DSAR influence my account status?
No. Using your data protection rights will not adversely affect your account. I process access requests without bias and will not limit your account, end services, or modify loyalty perks due to your data request. Openness is essential here, and I urge you to exercise your rights.
Your Legal Rights Pursuant to GDPR and Norwegian Law
The Right of Access Pursuant to Article 15
Article 15 of the GDPR, implemented in Norway by means of the Personal Data Act, provides every data subject the authority to demand access to their personal data. I must confirm whether processing takes place, furnish a copy of the data, and inform you of the objectives, categories, retention periods, and your connected rights. This legal foundation ensures you keep in control of your information while I preserve complete transparency.
Further Rights That Support Your Access
Beyond access, you possess the authority to rectification, erasure, restriction of processing, and data portability. If you think your data is inaccurate or not full, you can ask me to correct it. Under certain situations you can also ask for deletion. I note these because a DSAR is frequently the first step before exercising other rights. Knowing the full scope assists you submit precise requests.
Identity Authentication and Protection
Why I Have to Authenticate Your Identity
Before sharing any personal data, I must be sure I am communicating with the actual data subject. This precaution prevents unauthorised access and identity fraud. GDPR requires me to take reasonable steps to verify your identity, especially when sensitive information is involved. I thus ask for supporting documents, but I handle them securely and erase the verification data as soon as the process finishes.
Accepted Documents for Verification
You can authenticate your identity by providing a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also request a recent utility bill showing your registered address. Please redact unnecessary sensitive information such as passport numbers. I only need the photograph and full name for verification. Digital copies sent through encrypted email are preferred.
Response Timelines and Potential Restrictions
Under GDPR, I am required to answer your DSAR without unnecessary delay, and at the latest within 30 days of obtaining the confirmed request. If your request is complex or you file multiple requests, I may prolong this period by up to two further months. I will notify you of any prolongation within the first month, together with the reasons for the delay, so you are always kept informed.
Restricted circumstances may hinder full disclosure, for example if disclosing the data would infringe others’ rights or disclose confidential business data. In such cases I redact or refuse the relevant portion. I give the first response free of charge, but if you make obviously groundless or unreasonable requests, I may levy a charge or decline to act, always explaining the reason and your right to file a complaint to the Datatilsynet.