I take the privacy of every se Sankra Casino lisens user with high priority. As a data controller registered in Norway, I process personal information in full alignment with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request allows you inquire me exactly what personal data I maintain about your account, how it is utilized, and who it is disclosed with. This guide explains how to file a DSAR, what to anticipate, and how I protect your rights during the process.
Comprehending Your Data Subject Access Request
A Data Subject Access Request is a structured mechanism created by Article 15 of the GDPR. It gives you the right to secure confirmation that I process personal data about you and to receive a copy of that data. You can also find out why I process it, which categories of data are relevant, and the recipients or categories of recipients I transmit it with, such as payment providers and regulatory compliance bodies. The DSAR is a effective transparency tool.
The scope of a DSAR is purposefully broad. It includes all personal information directly or indirectly linked to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I deliver the data in a systematic, commonly used machine-readable format such as JSON or CSV, tsn.ca unless you request for a simple document.
Steps to Submit a DSAR to Sankra Casino
Essential Information for a Valid Request
To complete your request efficiently, I need clear identification details. Supply your full name, the email address registered to your Sankra Casino account, and your username or account number. Describe the specific data you want to access. A general request is valid, but specifying it speeds up the process. Mention if you need the reply in a particular language or format.
Contact Channels and Address
Submit your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. As an option, you can mail a signed written request to Sankra Casino’s registered address in Norway. I recommend using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.
Identity Confirmation and Safety
Why I Have to Authenticate Your Identity
Prior to disclosing any personal data, I must be certain I am communicating with the genuine data subject. This measure prevents illegal access and identity fraud. GDPR mandates me to take suitable steps to verify your identity, particularly when sensitive information is involved. I consequently ask for supporting documents, but I handle them securely and erase the verification data as soon as the process finishes.
Accepted Documents for Verification
You can verify your identity by providing a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also request a recent utility bill showing your registered address. Please obscure unnecessary sensitive information such as passport numbers. I only require the photograph and full name for verification. Digital copies sent through encrypted email are preferred.
Which Details You Can Expect
Types of Personal Data I Store
My reply to your DSAR contains a thorough outline of the personal data I store. This usually encompasses identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also indicate if automated decision-making is used, such as risk profiling.
Structure and Transmission of Your Data
I supply the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you prefer a printed copy sent by secure post, I can set up that upon request. The response also includes an explanatory cover letter that connects each piece of data to the processing purpose and the legal basis, making the information easy to understand.
Your Legal Rights Per GDPR and Norwegian Law
The Entitlement to Access Pursuant to Article 15
Article 15 of the GDPR, applied in Norway via the Personal Data Act, gives every data subject the authority to ask for access to their personal data. I must confirm whether processing is happening, provide a copy of the data, and inform you of the purposes, categories, retention periods, and your related rights. This legal foundation secures you keep in control of your information while I maintain complete transparency.
Further Rights That Underpin Your Access
In addition to access, you possess the entitlement to rectification, erasure, restriction of processing, and data portability. If you think your data is incorrect or not full, you can request me to fix it. Under certain conditions you can also ask for deletion. I reference these because a DSAR is frequently the first step before applying other rights. Knowing the full scope assists you formulate precise requests.
Reply Deadlines and Potential Restrictions
Under GDPR, I am required to answer your DSAR without undue delay, and at the latest within a month of receiving the authenticated request. If your request is complicated or you make multiple requests, I may extend this period by up to two additional months. I will notify you of any delay within the first month, together with the justifications for the delay, so you are always kept informed.
Restricted circumstances may block full divulgence, for example if sharing the data would infringe others’ rights or reveal confidential business information. In such cases I edit or refuse the relevant portion. I provide the first response free of charge, but if you make obviously groundless or unreasonable requests, I may impose a cost or decline to act, always stating the reason and your right to file a complaint to the Datatilsynet.
Frequently Asked Questions
Is it possible to ask for data about someone else, like a family member?
Data is only shared with the individual it pertains to. Due to privacy safeguards, I cannot disclose information about a third party, even a family member. If you hold legal standing like a power of attorney, furnish that documentation. If not, the other person must submit their own DSAR.
What if I have forgotten my registered email address?
If you lost your email, contact support with full name, date of birth, and registered postal address or phone. I can verify your identity and recover account details, then process the DSAR. This might cause a short delay, but I will notify you throughout.
For how long is my data retained after account closure?
I hold personal data for the period stipulated by Norwegian anti-money laundering laws, generally five years after account closure. After retention, data is securely deleted unless a longer period is legally mandated or needed for legal claims. Full retention schedules are available in my privacy notice.
Can I get a copy of my closed account data?
Certainly. Your right to access persists even after your Sankra Casino account is closed. A DSAR can be submitted for the data I continue to keep. The process is the same: provide identification and specify the information you need. I will locate the archived records and supply them within the same legal timeframe.
What happens if I am unhappy with the reply?
If you feel I have not fulfilled my obligations, reach out for an explanation. The issue will be reviewed and an additional response will be given. You also have the right to complain to the Data Protection Authority. They will independently investigate whether I met my obligations.
Does submitting a DSAR affect my account status?
No, it does not. Exercising your data protection rights has no negative impact on your account. I process access requests without bias and will not limit your account, end services, or modify loyalty perks due to your data request. Openness is essential here, and I urge you to exercise your rights.