I take the confidentiality of every sankracasino user with utmost care. As a data controller established in Norway, I manage personal information in full alignment with the General Data Protection Regulation and the Norwegian Personal Data Act. A Data Subject Access Request lets you request me exactly what personal data I hold about your account, how it is utilized, and who it is disclosed with. This guide explains how to make a DSAR, what to anticipate, and how I safeguard your rights over the course of the process.
Comprehending Your Data Subject Access Request
A Data Subject Access Request is a formal mechanism established by Article 15 of the GDPR. It gives you the right to receive confirmation that I process personal data about you and to obtain a copy of that data. You can also discover why I manage it, which categories of data are relevant, and the recipients or categories of recipients I transmit it with, such as payment providers and regulatory compliance bodies. The DSAR is a effective transparency tool.
The scope of a DSAR is purposefully broad. It covers all personal information directly or indirectly associated to your Sankra Casino account, including registration details, transaction logs, responsible gaming records, and correspondence. I provide the data in a systematic, commonly used machine-readable format such as JSON or CSV, unless you request for a simple document.
Response Timelines and Potential Restrictions
Under GDPR, I must respond to your DSAR without undue delay, and at the latest within 30 days of obtaining the authenticated request. If your request is intricate or you make multiple requests, I may prolong this period by up to two extra months. I will advise you of any extension within the first month, together with the reasons for the delay, so you are never in doubt.
Specific circumstances may prevent full divulgence, for example if disclosing the data would infringe others’ rights or expose confidential business information. In such cases I redact or deny the relevant portion. I give the first response free of charge, but if you make manifestly unfounded or disproportionate requests, I may charge a fee or decline to act, always stating the reason and your right to lodge a complaint to the Datatilsynet.
Your individual Legal Rights Under GDPR and Norwegian Law
The Entitlement to Access Under Article 15
Article 15 of the GDPR, implemented in Norway by means of the Personal Data Act, gives every data subject the authority to demand access to their personal data. I must confirm whether processing takes place, supply a copy of the data, and advise you of the purposes, categories, retention periods, and your associated rights. This legal foundation ensures you remain in control of your information while I preserve complete transparency.
Further Rights That Support Your Access
In addition to access, you hold the authority to rectification, erasure, restriction of processing, and data portability. If you suspect your data is inaccurate or incomplete, you can tell me to fix it. Under certain circumstances you can also request deletion. I note these because a DSAR is frequently the first step before exercising other rights. Knowing the full scope assists you submit precise requests.
Steps to Submit a DSAR to Sankra Casino
Necessary Information for a Valid Request
To handle your request promptly, I need clear identification details. Supply your full name, the email address registered to your Sankra Casino account, and your username or account number. Specify the specific data you want to access. A general request is valid, but focusing it speeds up the process. State if you need the reply in a particular language or format.
Submission Channels and Address
Forward your DSAR by email to our dedicated Data Protection Officer at [email protected]. Otherwise, you can mail a signed written request to Sankra Casino’s registered address in Norway. I recommend using email for speed and security. All incoming DSARs are logged and acknowledged within two business days.
Identity Authentication and Safety
Why I Must Verify Your Identity
Before releasing any personal data, I must be certain I am communicating with the actual data subject. This safeguard prevents unauthorised access and identity fraud. GDPR mandates me to take appropriate steps to verify your identity, notably when sensitive information is involved. I thus ask for supporting documents, but I handle them securely and delete the verification data as soon as the process completes.
Approved Documents for Verification
You can authenticate your identity by submitting a clear copy of a valid passport, national ID card, or driving licence. If your account details have changed, I may also require a recent utility bill showing your registered address. Please obscure unnecessary sensitive information such as passport numbers. I only need the photograph and full name for verification. Digital copies sent through encrypted email are recommended.
What Data You Will Receive
Types of Personal Data I Maintain
My reply to your DSAR includes a detailed outline of the personal data I keep. This normally covers identity data, contact details, account transaction history, deposit and withdrawal records, responsible gambling markers, communication logs with support, and any documents you uploaded for KYC purposes. I also indicate if automated decision-making is used, such as risk profiling.
Format and Transmission of Your Data
I provide the requested data in a portable electronic format, typically a password-protected PDF or a machine-readable CSV file. If you would rather a printed copy sent by secure post, I can set up that upon request. The response also features an explanatory cover letter that links each piece of data to the processing purpose and the legal basis, making the information easy to understand.
Frequently Asked Questions
May I request information about another individual, for example a relative?
I can only disclose data to the person it concerns. Due to privacy safeguards, I cannot disclose information about a third party, even a family member. If you have legal authority like a power of attorney, provide that documentation. Otherwise the third party must submit their own DSAR.
What if I have forgotten my registered email address?
If you misplaced your email, reach out to support providing your full name, date of birth, and registered mailing address or phone number. I am able to authenticate your identity and restore account information, then handle the DSAR. This might cause a short delay, but I will notify you throughout.
How long do you keep my data after I close my account?
Personal data is kept for the duration mandated by Norwegian anti-money laundering regulations, usually five years following closure. Following the retention period, data is safely erased unless a longer duration is required by law or necessary for legal proceedings. Specific retention timelines are outlined in my privacy policy.
Can I get a copy of my closed account data?
Yes. Even after you close your Sankra Casino account, your right of access remains. You may file a DSAR for the information I still retain. The process is the same: provide identification and specify the information you need. I will find the stored records and deliver them within the same statutory period.
What happens if I am unhappy with the reply?
If you feel I have not fulfilled my obligations, reach out for an explanation. The issue will be reviewed and an additional response will be given. You also have the right to complain to the Data Protection Authority. An independent inquiry will be made to determine if I satisfied my responsibilities.
Will filing a DSAR impact my account standing?
No, it does not. Using your data protection rights will not adversely affect your account. I process access requests without bias and will not limit your account, end services, or modify loyalty perks due to your data request. Transparency is fundamental here, and I encourage you to use your rights.
Recent Comments