I treat the privacy of every casino sankra brukervilkår user seriously. As a data controller registered in Norway, I manage personal information in full alignment with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request enables you ask me precisely what personal data I store about your account, how it is utilized, and who it is transmitted with. This guide explains how to submit a DSAR, what to look forward to, and how I safeguard your rights throughout the process.

Comprehending Your Data Subject Access Request

A Data Subject Access Request represents a official mechanism created by Article 15 of the GDPR. It grants you the right to receive confirmation that I handle personal data about you and to receive a copy of that data. You can also learn why I handle it, which categories of data are relevant, and the recipients or categories of recipients I share it with, such as payment providers and regulatory compliance bodies. The DSAR is a strong transparency tool.

The scope of a DSAR is intentionally broad. It covers all personal information directly or indirectly connected to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I supply the data in a organized, commonly used machine-readable format such as JSON or CSV, unless you specify for a simple document.

Identity Confirmation and Security

Why I Have to Authenticate Your Identity

Before sharing any personal data, I must be sure I am communicating with the genuine data subject. This measure prevents unauthorised access and identity fraud. GDPR obliges me to take appropriate steps to verify your identity, especially when sensitive information is involved. I consequently ask for supporting documents, but I handle them securely and delete the verification data as soon as the process ends.

Accepted Documents for Verification

You can authenticate your identity by sending a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also require a recent utility bill showing your registered address. Please remove unnecessary sensitive information such as passport numbers. I only require the photograph and full name for verification. Digital copies sent through encrypted email are recommended.

Your individual Legal Rights Per GDPR and Norwegian Law

The Access Right Under Article 15

Article 15 of the GDPR, applied in Norway through the Personal Data Act, grants every data subject the entitlement to ask for access to their personal data. I am required to confirm whether processing occurs, provide a copy of the data, and advise you of the aims, categories, retention periods, and your connected rights. This legal foundation guarantees you remain in control of your information while I uphold complete transparency.

Further Rights That Support Your Access

Aside from access, you hold the authority to rectification, erasure, restriction of processing, and data portability. If you think your data is wrong or partial, you can tell me to rectify it. Under certain conditions you can also ask for deletion. I note these because a DSAR is often the first step before using other rights. Knowing the full scope aids you formulate precise requests.

Steps to Submit a DSAR to Sankra Casino

Essential Information for a Valid Request

To complete your request quickly, I need clear identification details. Provide your full name, the email address registered to your Sankra Casino account, and your https://www.cbc.ca/news/canada/toronto/bingo-police-dog-man-charged-etobicoke-1.6920708 username or account number. Describe the specific data you want to access. A general request is valid, but focusing it speeds up the process. Indicate if you need the reply in a particular language or format.

Contact Channels and Address

Send your DSAR by email to our dedicated Data Protection Officer at dataprotection@sankra.no. Otherwise, you can mail a signed written request to Sankra Casino’s registered address in Norway. I advise using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.

What Information You Will Receive

Categories of Personal Data I Hold

My reply to your DSAR includes a thorough outline of the personal data I store. This typically includes identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also disclose if automated decision-making is used, such as risk profiling.

Structure and Transmission of Your Data

I supply the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you prefer a printed copy sent by secure post, I can organize that upon request. The response also contains an explanatory cover letter that maps each piece of data to the processing purpose and the legal basis, making the information easy to understand.

Answer Timeframes and Potential Restrictions

Under GDPR, I must respond to your DSAR promptly, and at the latest within 30 days of obtaining the verified request. If your request is complicated or you submit multiple requests, I may extend this period by up to two additional months. I will notify you of any prolongation within the first month, together with the grounds for the delay, so you are never in doubt.

Specific circumstances may hinder full divulgence, for example if disclosing the data would harm others’ rights or expose confidential business information. In such cases I redact or reject the impacted portion. I give the first response free of charge, but if you make manifestly unfounded or disproportionate requests, I may impose a cost or refuse to respond, always explaining the reason and your right to lodge a complaint to the Datatilsynet.

FAQ

Is it possible to ask for data about someone else, like a family member?

I can only disclose data to the person it concerns. For privacy protection, I will not release information about someone else, even a relative. Should you possess legal authority such as a power of attorney, please submit that paperwork. If not, the other person must submit their own DSAR.

What happens if I cannot recall my registered email?

If you misplaced your email, reach out to support providing your full name, date of birth, and registered mailing address or phone number. I can verify your identity and recover account details, then process the DSAR. This could take a few extra days, but I will update you on progress.

How long do you keep my data after I close my account?

I hold personal data for the period stipulated by Norwegian anti-money laundering laws, generally five years after account closure. Following the retention period, data is safely erased unless a longer duration is required by law or necessary for legal proceedings. Detailed retention periods appear in my privacy notice.

May I receive a copy of information from my terminated account?

Yes. Your right to access persists even after your Sankra Casino account is closed. You may file a DSAR for the information I still retain. The process is the same: provide identification and specify the information you need. The archived data will be retrieved and provided within the same legal deadline.

What should I do if the response does not meet my expectations?

If you believe I have not complied, contact me for clarification. The issue will be reviewed and an additional response will be given. You also have the right to complain to the Data Protection Authority. They will independently investigate whether I met my obligations.

Will filing a DSAR impact my account standing?

No. Exercising your data protection rights has no negative impact on your account. I treat access requests neutrally and will not restrict your account, terminate services, or alter loyalty benefits because you asked for data. Transparency is fundamental here, and I encourage you to use your rights.