GDPR Compliance

How We Handle the GDPR

This page gives a short, practical overview of how Opto Softechs meets the requirements of the EU General Data Protection Regulation (GDPR). The full details of what data we process and why are in our Privacy Policy.

1. Our Approach

• Only what we need: we collect the data required to answer enquiries, sell and activate licences, deliver updates and keep our website secure – nothing more
• Clear purposes: data collected for one purpose is not used for something unrelated
• No tracking: we do not use analytics tools, advertising pixels or tracking cookies, and our website does not load content from other companies
• Deletion: data is deleted when it is no longer needed, unless the law requires us to keep it

2. Your Data in Our Desktop Software

Our inventory software stores your business data – including any customer data you enter – locally on your own computer. We do not receive, store or have access to it. Only licence activation and update checks connect to our server, and these contain no business data.

This means:

• you remain in full control of your business data and responsible for it under the GDPR
• we do not act as your processor, so no data processing agreement (Art. 28 GDPR) is needed for using the software
• if you send us data for support, we use it only to help you and delete it afterwards

The software also helps you meet your own obligations, for example by keeping your records on your own premises. How you use it and which data you enter remains your decision.

3. Your Rights

Under the GDPR you can ask us to tell you what data we hold about you, correct it, delete it, restrict its use or hand it over in a machine-readable format. You can object to processing based on our legitimate interests and withdraw any consent you gave. The full list is in Section 10 of our Privacy Policy.

How to make a request

• Email contact@optosoftechs.com with the subject ‘Data protection request’
• Tell us what you would like us to do and which email address or licence your request concerns
• If we cannot be sure the request comes from you, we may ask for a little more information to confirm your identity
• We reply within one month. In complex cases this can be extended by up to two further months; we will tell you if that happens
• Requests are free of charge

4. Service Providers and Where Data Is Processed

We work only with service providers that give sufficient guarantees for data protection, and we sign data processing agreements with those that process data for us. Our website and licence server run on servers in the EU (Stockholm, Sweden). As our company is based in Nepal, our team accesses the data from Nepal. Where a service provider processes data outside the EU, this is covered by an adequacy decision of the European Commission or by the EU Standard Contractual Clauses. Details are in Sections 7 and 8 of our Privacy Policy.

5. If Something Goes Wrong

If a security incident affects personal data, we will assess it immediately, take steps to limit the damage and, where required, report it to the competent supervisory authority within 72 hours. If there is a high risk to you, we will inform you directly and explain what you can do.

6. Complaints

If you think we are not handling your data correctly, please contact us first at contact@optosoftechs.com – we will try to resolve it. You also have the right to complain to a data protection supervisory authority, in particular in the EU country where you live or work. A list of the authorities is published by the European Data Protection Board.

7. Changes to This Page

We may change this page at any time, for example when our processes, our service providers or the law change. The current version is always published here, and earlier versions can be viewed through the version history. The binding details of how we process personal data are set out in our Privacy Policy.

8. Contact

Opto Softechs Pvt. Ltd.
Nagarjun Municipality – 1, Kathmandu, Nepal
Email: contact@optosoftechs.com

This GDPR Compliance page was last updated in October 2026.