I handle the privacy of every sankracasino juridisk informasjon user with high priority. As a data controller based in Norway, I manage personal information in full accordance with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request allows you request me specifically what personal data I hold about your account, how it is employed, and who it is transmitted with. This guide explains how to submit a DSAR, what to look forward to, and how I protect your rights over the course of the process.
Answer Timeframes and Applicable Constraints
Under GDPR, I must respond to your DSAR promptly, and at the latest within one month of obtaining the authenticated request. If your request is complex or you file multiple requests, I may prolong this period by up to two further months. I will advise you of any extension within the first month, together with the grounds for the delay, so you are never left wondering.
Restricted circumstances may hinder full release, for example if disclosing the data would infringe others’ rights or reveal confidential business information. In such cases I redact or deny the impacted portion. I give the first response free of charge, but if you make obviously groundless or disproportionate requests, I may levy a charge or decline to act, always stating the reason and your right to lodge a complaint to the Datatilsynet.
Which Details You Can Expect
Groups of Personal Data I Store
My response to your DSAR contains a comprehensive outline of the personal data I hold. This typically encompasses identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also indicate if automated decision-making is used, such as risk profiling.
Structure and Provision of Your Data
I furnish the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you prefer a printed copy sent by secure post, I can organize that upon request. The response also includes an explanatory cover letter that links each piece of data to the processing purpose and the legal basis, making the information easy to understand.
Your individual Legal Rights Per GDPR and Norwegian Law
The Access Right Under Article 15
Article 15 of the GDPR, enforced in Norway by means of the Personal Data Act, gives every data subject the entitlement to request access to their personal data. I have to confirm whether processing occurs, furnish a copy of the data, and inform you of the objectives, categories, retention periods, and your related rights. This legal foundation guarantees you remain in control of your information while I preserve complete transparency.
Additional Rights That Underpin Your Access
Beyond access, you hold the authority to rectification, erasure, restriction of processing, and data portability. If you believe your data is incorrect or not full, you can ask me to fix it. Under certain conditions you can also demand deletion. I reference these because a DSAR is frequently the first step before exercising other rights. Understanding the full scope aids you formulate precise requests. the checklist
Identity Authentication and Security
Why I Need to Confirm Your Identity
Prior to disclosing any personal data, I must be certain I am communicating with the genuine data subject. This measure prevents unauthorised access and identity fraud. GDPR mandates me to take appropriate steps to verify your identity, especially when sensitive information is involved. I thus ask for supporting documents, but I handle them securely and erase the verification data as soon as the process ends.
Accepted Documents for Verification
You can verify your identity by providing a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also ask for a recent utility bill showing your registered address. Please redact unnecessary sensitive information such as passport numbers. I only need the photograph and full name for verification. Digital copies sent through encrypted email are recommended.
Understanding Your Data Subject Access Request
A Data Subject Access Request represents a structured mechanism introduced by Article 15 of the GDPR. It gives you the right to receive confirmation that I manage personal data about you and to receive a copy of that data. You can also find out why I process it, which categories of data are relevant, and the recipients or categories of recipients I share it with, such as payment providers and regulatory compliance bodies. The DSAR is a effective transparency tool.
The scope of a DSAR is deliberately broad. It covers all personal information directly or indirectly connected to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I provide the data in a organized, commonly used machine-readable format such as JSON or CSV, unless you request for a simple document.
FAQ
Can I request data about another person, such as a relative?
I can only disclose data to the person it concerns. Due to privacy safeguards, I cannot disclose information about a third party, even a family member. Should you possess legal authority such as a power of attorney, please submit that paperwork. Otherwise, the third party needs to file their own DSAR.
What should I do if I lost my registered email address?
If you lost your email, contact support with full name, date of birth, and registered postal address or phone. I am able to authenticate your identity and restore account information, then handle the DSAR. This may add a few days, but I will keep you informed.
What is the data retention period after I close my account?
I hold personal data for the period stipulated by Norwegian anti-money laundering laws, generally five years after account closure. After retention, data is securely deleted unless a longer period is legally mandated or needed for legal claims. Full retention schedules are available in my privacy notice.
May I receive a copy of information from my terminated account?
Yes. Your right to access persists even after your Sankra Casino account is closed. A DSAR can be submitted for the data I continue to keep. The procedure is identical: supply identification and indicate the details you require. I will locate the archived records and supply them within the same legal timeframe.
What if I am not satisfied with the response?
If you believe I have not complied, contact me for clarification. The issue will be reviewed and an additional response will be given. You also have the right to complain to the Data Protection Authority. They will independently investigate whether I met my obligations.
Will filing a DSAR impact my account standing?
No, it does not. Asserting your data protection rights carries no negative consequences for your account. I process access requests without bias and will not limit your account, end services, or modify loyalty perks due to your data request. Clarity is key, and I encourage you to make use of your entitlements.
Method for Submit a DSAR to Sankra Casino
Required Information for a Valid Request
To process your request quickly, I need specific identification details. Provide your full name, the email address registered to your Sankra Casino account, and your username or account number. Describe the specific data you want to access. A general request is valid, but specifying it speeds up the process. State if you need the reply in a particular language or format.
Submission Channels and Address
Send your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. Otherwise, you can mail a signed written request to Sankra Casino’s registered address in Norway. I advise using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.