How to exercise your GDPR rights
how.fm (SoundReply Solutions GmbH) is committed to protecting personal data and enabling individuals to exercise their rights under the EU General Data Protection Regulation (GDPR).
1. What requests you can make
Depending on your situation, you may request to:
- Access – receive confirmation whether we process your personal data and obtain a copy
- Rectification – correct inaccurate or incomplete data
- Erasure – delete your personal data, where applicable
- Restriction – limit processing in specific cases
- Objection – object to processing based on specific grounds
- Portability – receive your data in a structured, commonly used format (where applicable)
2. Who can submit a request
You can submit a request if you are:
- an end user of a how.fm training experience, or
- a contact person at a customer/prospect/partner, or
- otherwise interacting with our services (e.g., via support, sales, or our website).
If you are an end user using how.fm through your employer or another organization, your organization may be the data controller. In that case, we may redirect you to the controller or coordinate with them to complete your request.
3. How to submit a request
Send an email to: gdpr@how.fm
Please use the subject line:
“Data Subject Request – [type of request]”
To help us process your request efficiently, include:
- your full name
- your relationship to how.fm (e.g., end user / customer contact / applicant)
- the email address(es) or identifiers you used with how.fm (if known)
- the country you are contacting us from (optional, helps with legal context)
- a clear description of what you want us to do
- any relevant details to help us locate the data (e.g., organization name, approximate time period)
4. Identity verification (security)
To protect personal data, we may need to verify your identity before we respond. Verification depends on the request and risk level and may include asking for additional information or confirming access through the organization that provides your how.fm account.
We only request information necessary for verification and processing.
5. Response timelines
We will respond without undue delay and normally within one month of receiving your request.
If your request is complex or we receive multiple requests, we may extend the deadline by up to two additional months. If we do so, we will inform you within the initial one-month period and explain why.
6. If we cannot fulfill a request
In some cases we may be unable to fulfill a request (for example, due to legal obligations, overriding legitimate grounds, or because we cannot verify identity). If so, we will explain the reason, where required by law.
7. Complaints
If you believe we have not handled your request appropriately, you have the right to lodge a complaint with a supervisory authority (data protection authority) in your place of residence, workplace, or where an alleged infringement occurred.
You can also contact us at gdpr@how.fm to escalate concerns.