Who we are

OptiTech Sverige AB ("OptiTech", "we", "us") is the controller of the personal data described in this policy.

  • Company: OptiTech Sverige AB
  • Registration number: 559489-8917
  • Address: Karlslundsvägen 8, 177 44 Stockholm, Sweden
  • Contact: info@optitech-sverige.se

This policy explains what personal data we collect through our website and services, why we collect it, and what rights you have.

What data we collect

Data you give us. When you contact us, request a demo, book a meeting, sign up for updates, or create an account, we collect the information you provide, such as your name, email address, phone number, company name, role, and the content of your message.

Data we collect automatically. When you visit our website, we collect technical data such as IP address, browser type, device information, language settings, pages visited, and how you interact with the site. Some of this data is collected through cookies and similar technologies. Optional analytics and marketing cookies are only used with your consent. See our Cookie policy for details.

Data from our services. When your organization uses the OptiTech platform, we process account data such as name, work email, role, and login history, and usage data such as settings and activity logs, to provide, secure, and improve the service.

Data in the platform on behalf of customers. Compliance content that your organization stores in the platform, such as policies, evidence, incident records, and vendor assessments, can contain personal data. For that data we act as a processor on behalf of your organization under a data processing agreement. This policy covers our processing as a controller; the OptiTech platform terms describe processing on behalf of customers.

Why we process your data

We process personal data to:

  • Provide, operate, and secure our website and services
  • Respond to inquiries, demo requests, and support cases
  • Send information you have requested, such as newsletters, webinar invitations, or product updates
  • Analyze and improve our website, services, and marketing
  • Establish, exercise, or defend legal claims
  • Comply with legal obligations, such as accounting requirements

We rely on the following legal bases under the GDPR:

  • Contract: to provide the services you or your organization have signed up for
  • Legitimate interest: to secure and improve our website and services, and to communicate with business contacts
  • Consent: for optional cookies and marketing communications. You can withdraw consent at any time
  • Legal obligation: where processing is required by law

How long we keep data

We keep personal data only as long as needed for the purposes above:

  • Contact and demo inquiries: while the dialogue is active and up to 12 months after the last contact
  • Newsletter subscriptions: until you unsubscribe
  • Account data: for as long as the account exists, and up to 30 days after termination to allow data export
  • Security and access logs: up to 12 months
  • Accounting records: 7 years, as required by the Swedish Bookkeeping Act

When data is no longer needed, we delete or anonymize it.

Sharing your data

We do not sell your personal data. We share data only with:

  • Service providers that help us run our website and services, such as hosting, email, analytics, and support tools, under data processing agreements. The subprocessors used for the platform are listed on the subprocessors page
  • Professional advisers, such as auditors and lawyers, where needed
  • Authorities, when required by law
  • A buyer or successor in the event of a merger or acquisition, under confidentiality

Where data is transferred outside the EU/EEA, we use safeguards such as the European Commission's standard contractual clauses.

How we protect your data

We use appropriate technical and organizational measures to protect personal data, including encryption in transit and at rest, role-based access controls, logging and monitoring, and regular security testing. Personal data is stored within the EU/EEA.

Your rights

Under the GDPR you have the right to:

  • Access: get a copy of the personal data we hold about you
  • Rectification: have incorrect or incomplete data corrected
  • Erasure: have your data deleted when it's no longer needed
  • Restriction: limit how we use your data while a question is resolved
  • Portability: receive your data in a structured, machine-readable format
  • Objection: object to processing based on legitimate interest, including direct marketing
  • Withdraw consent: at any time, where processing is based on consent, without affecting processing that already took place

To exercise your rights, contact us at info@optitech-sverige.se. We respond within one month. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), www.imy.se.

Changes to this policy

We may update this policy from time to time. The latest version is always available on this page, with the date of the last update at the top.

Contact

Questions about this policy or our data handling? Contact us at info@optitech-sverige.se or by mail at OptiTech Sverige AB, Karlslundsvägen 8, 177 44 Stockholm, Sweden.