I take the privacy of every Sankra Casino user with utmost care https://sankra.no/legal-and-affiliates/. As a data controller registered in Norway, I manage personal information in full compliance with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request enables you inquire me precisely what personal data I store about your account, how it is employed, and who it is disclosed with. This guide outlines how to make a DSAR, what to expect, and how I safeguard your rights during the process.
Frequently Asked Questions
May I request information about another individual, for example a relative?
Data is only shared with the individual it pertains to. Due to privacy safeguards, I cannot disclose information about a third party, even a family member. If you hold legal standing like a power of attorney, furnish that documentation. Otherwise the third party must submit their own DSAR.
What happens if I cannot recall my registered email?
If you misplaced your email, reach out to support providing your full name, date of birth, and registered mailing address or phone number. I am able to authenticate your identity and restore account information, then handle the DSAR. This could take a few extra days, but I will update you on progress.
For how long is my data retained after account closure?
I retain personal data as long as required by Norwegian anti-money laundering rules, typically five years after closure. After retention, data is securely deleted unless a longer period is legally mandated or needed for legal claims. Specific retention timelines are outlined in my privacy policy.
Is it possible to obtain a copy of data from my closed account?
Absolutely. Even after you close your Sankra Casino account, your right of access remains. You may file a DSAR for the information I still retain. The process is the same: provide identification and specify the information you need. I will find the stored records and deliver them within the same statutory period.
What should I do if the response does not meet my expectations?
Should you think I have not adhered to requirements, get in touch for clarification. The issue will be reviewed and an additional response will be given. You also have the right to complain to the Data Protection Authority. They will independently investigate whether I met my obligations.
Will filing a DSAR impact my account standing?
No. Using your data protection rights will not adversely affect your account. I process access requests without bias and will not limit your account, end services, or modify loyalty perks due to your data request. Transparency is fundamental here, and I encourage you to use your rights.
Your Legal Rights Pursuant to GDPR and Norwegian Law
The Right of Access Pursuant to Article 15
Article 15 of the GDPR, enforced in Norway through the Personal Data Act, gives every data subject the right to demand access to their personal data. I must confirm whether processing is happening, provide a copy of the data, and inform you of the purposes, categories, retention periods, and your associated rights. This legal foundation secures you stay in control of your information while I maintain complete transparency.
Extra Rights That Support Your Access
Beyond access, you possess the entitlement to rectification, erasure, restriction of processing, and data portability. If you believe your data is inaccurate or partial, you can ask me to correct it. Under certain circumstances you can also demand deletion. I mention these because a DSAR is commonly the first step before exercising other rights. Understanding the full scope assists you formulate precise requests.
Comprehending Your Data Subject Access Request
A Data Subject Access Request constitutes a structured mechanism created by Article 15 of the GDPR. It grants you the right to obtain confirmation that I process personal data about you and to obtain a copy of that data. You can also find out why I manage it, which categories of data are included, and the recipients or categories of recipients I transmit it with, such as payment providers and regulatory compliance bodies. The DSAR is a strong transparency tool.
The scope of a DSAR is deliberately broad. It includes all personal information directly or indirectly associated to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I provide the data in a systematic, commonly used machine-readable format such as JSON or CSV, unless you specify for a simple document.
How to Submit a DSAR to Sankra Casino
Required Information for a Valid Request
To handle your request promptly, I need precise identification details. Give your full name, the email address registered to your Sankra Casino account, and your username or account number. Specify the specific data you want to access. A general request is valid, but specifying it https://www.cbc.ca/news/canada/toronto/woman-wins-record-9m-at-slots-in-ontario-casino-1.706753 speeds up the process. State if you need the reply in a particular language or format.
Submission Channels and Address
Send your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. Alternatively, you can mail a signed written request to Sankra Casino’s registered address in Norway. I advise using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.
Answer Timeframes and Applicable Constraints
Under GDPR, I must respond to your DSAR without unnecessary delay, and at the latest within one month of receiving the confirmed request. If your request is intricate or you file multiple requests, I may lengthen this period by up to two further months. I will advise you of any prolongation within the first month, together with the justifications for the delay, so you are never left wondering.
Limited circumstances may prevent full release, for example if releasing the data would infringe others’ rights or expose confidential business details. In such cases I redact or deny the affected portion. I provide the first response at no cost, but if you make clearly baseless or unreasonable requests, I may charge a fee or decline to act, always stating the reason and your right to file a complaint to the Datatilsynet.
Which Details You Will Receive
Categories of Personal Data I Hold
My reply to your DSAR contains a comprehensive outline of the personal data I store. This usually covers identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also indicate if automated decision-making is used, such as risk profiling.
Layout and Delivery of Your Data
I provide the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you choose a printed copy sent by secure post, I can set up that upon request. The response also includes an explanatory cover letter that links each piece of data to the processing purpose and the legal basis, making the information easy to understand.
Identity Verification and Security
Why I Need to Confirm Your Identity
Before sharing any personal data, I must be certain I am communicating with the real data subject. This measure prevents unauthorised access and identity fraud. GDPR mandates me to https://www.bbc.co.uk/programmes/m001v1vs take reasonable steps to verify your identity, notably when sensitive information is involved. I consequently ask for supporting documents, but I process them securely and delete the verification data as soon as the process completes.
Approved Documents for Verification
You can authenticate your identity by providing a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also ask for a recent utility bill showing your registered address. Please obscure unnecessary sensitive information such as passport numbers. I only need the photograph and full name for verification. Digital copies sent through encrypted email are preferred.