I take the privacy of every Sankra Casino user seriously sankra.no. As a data controller established in Norway, I process personal information in full alignment with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request lets you request me precisely what personal data I maintain about your account, how it is employed, and who it is shared with. This guide explains how to file a DSAR, what to anticipate, and how I safeguard your rights during the process.
Your personal Legal Rights Pursuant to GDPR and Norwegian Law
The Entitlement to Access Pursuant to Article 15
Article 15 of the GDPR, applied in Norway by means of the Personal Data Act, provides every data subject the right to demand access to their personal data. quick tutorial I have to confirm whether processing is happening, supply a copy of the data, and notify you of the purposes, categories, retention periods, and your connected rights. This legal foundation guarantees you remain in control of your information while I preserve complete transparency.
Extra Rights Which Back Your Access
In addition to access, you hold the entitlement to rectification, erasure, restriction of processing, and data portability. If you believe your data is wrong or incomplete, you can ask me to rectify it. Under certain conditions you can also ask for deletion. I note these because a DSAR is frequently the first step before applying other rights. Knowing the full scope assists you formulate precise requests.
Identity Verification and Security
Why I Have to Authenticate Your Identity
Prior to disclosing any personal data, I must be certain I am communicating with the actual data subject. This safeguard prevents unauthorized entry and identity fraud. GDPR requires me to take suitable steps to verify your identity, notably when sensitive information is involved. I therefore ask for supporting documents, but I manage them securely and delete the verification data as soon as the process finishes.
Accepted Documents for Verification
You can verify your identity by sending a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also require a recent utility bill showing your registered address. Please obscure unnecessary sensitive information such as passport numbers. I only need the photograph and full name for verification. Digital copies sent through encrypted email are preferred. full picture
Method for Submit a DSAR to Sankra Casino
Essential Information for a Valid Request
To process your request promptly, I need precise identification details. Give your full name, the email address registered to your Sankra Casino account, and your username or account number. Specify the specific data you want to access. A general request is valid, but narrowing it down speeds up the process. Indicate if you need the reply in a particular language or format.
Contact Channels and Address
Forward your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. As an option, you can mail a signed written request to Sankra Casino’s registered address in Norway. I advise using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.
What Data You Shall Get
Categories of Personal Data I Hold
My reply to your DSAR contains a detailed summary of the personal data I hold. This typically includes identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also reveal if automated decision-making is used, such as risk profiling.
Format and Transmission of Your Data
I furnish the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you prefer a printed copy sent by secure post, I can arrange that upon request. The response also includes an explanatory cover letter that maps each piece of data to the processing purpose and the legal basis, making the information easy to understand.
Response Timelines and Potential Restrictions
Under GDPR, I need to reply to your DSAR without undue delay, and at the latest within 30 days of obtaining the verified request. If your request is intricate or you file multiple requests, I may lengthen this period by up to two further months. I will notify you of any extension within the first month, together with the grounds for the delay, so you are always kept informed.
Limited circumstances may block full release, for example if releasing the data would violate others’ rights or expose confidential business details. In such cases I edit or refuse the impacted portion. I provide the first response without charge, but if you make manifestly unfounded or unreasonable requests, I may impose a cost or decline to act, always clarifying the reason and your right to lodge a complaint to the Datatilsynet.
Grasping Your Data Subject Access Request
A Data Subject Access Request represents a structured mechanism introduced by Article 15 of the GDPR. It grants you the right to obtain confirmation that I manage personal data about you and to obtain a copy of that data. You can also learn why I manage it, which categories of data are involved, and the recipients or categories of recipients I share it with, such as payment providers and regulatory compliance bodies. The DSAR is a strong transparency tool.
The scope of a DSAR is deliberately broad. It includes all personal information directly or indirectly connected to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I provide the data in a organized, commonly used machine-readable format such as JSON or CSV, unless you request for a simple document.
FAQ
Can I request data about another person, such as a relative?
Information is released solely to the person it relates to. Due to privacy safeguards, I cannot disclose information about a third party, even a family member. If you hold legal standing like a power of attorney, furnish that documentation. If not, the other person must submit their own DSAR.
What if I have forgotten my registered email address?
In case you forgot your email, contact support with your complete name, date of birth, and registered home address or telephone. I am able to authenticate your identity and restore account information, then handle the DSAR. This may add a few days, but I will keep you informed.
What is the data retention period after I close my account?
I hold personal data for the period stipulated by Norwegian anti-money laundering laws, generally five years after account closure. Once retention ends, data is securely destroyed unless a longer timeframe is legally required or needed for legal disputes. Detailed retention periods appear in my privacy notice.
Can I get a copy of my closed account data?
Certainly. Even following the closure of your Sankra Casino account, your access rights continue. You may file a DSAR for the information I still retain. The procedure is identical: supply identification and indicate the details you require. I will locate the archived records and supply them within the same legal timeframe.
What if I am not satisfied with the response?
If you believe I have not complied, contact me for clarification. I will examine the situation and issue a further reply. You also have the right to complain to the Data Protection Authority. They will conduct an independent investigation into whether I fulfilled my duties.
Does making a DSAR influence my account status?
No. Asserting your data protection rights carries no negative consequences for your account. I process access requests without bias and will not limit your account, end services, or modify loyalty perks due to your data request. Transparency is fundamental here, and I encourage you to use your rights.
