Processing of personal data

Information to you as a data subject (contact person of supplier)

Pandox AB (publ), reg. no. 556030-7885, (“Pandox”) is the controller for the processing of personal data relating to contact persons and other employees of our suppliers that Pandox receive in connection with our business, rental of real estate or premises and in administration of those situations.


1.1. Pandox process personal data for the purpose of managing the supplier relationship, contact in various questions, billing and, if applicable, error reporting and repairs regarding real estate/premises.

1.2. Personal data will also be used for business and method development, as well as market analysis.

1.3. Pandox have through contact with the tenant, usually the data subject’s employer or contractor, obtained customary contact details such as name, telephone number, address and e-mail address.


The legal basis for the processing is that the processing is necessary for Pandox's legitimate interests to fulfil the above-mentioned purpose, and that those interests overrides the data subject's interests or fundamental rights and freedoms to not have their personal data processed.


3.1. Personal data will be transferred between companies in the Pandox Group in order to manage the supplier relationship, contact in various matters, financial administration incl. billing, error reporting and remedial actions.

3.2. Personal data may be transferred to subcontractors and others who, for Pandox's behalf, perform services related to the rental relationship and other above stated purposes of the processing.


Pandox only stores personal data within the EU/EEA. If transfer to a third country occurs in exceptional cases, Pandox will ensure that there are legal bases for such transfer and provide the relevant data subject with necessary information.


Personal data is stored as long as it is necessary for the purpose of the processing, but no longer than one (1) year after the supplier relationship has ended, unless the data is required to determine, enforce or defend legal claims or law requires that the data is to be stored longer.


6.1. As a data subject, you are, without cost, entitled to request information from Pandox about the processing of your personal data. Upon your request, or on our own initiative, Pandox will correct or delete incorrect personal data, and/or limit the processing of these. In addition, you are entitled to request that your personal data is not to be processed for direct marketing purposes. You also have the right to object to such processing as Pandox performs with a weighted assessment as a legal basis. If Pandox considers that processing still needs to be done, it is up to Pandox to show that there are interests that overrides your individual rights.

6.2. If you are displeased with Pandox’s processing of your personal data, please contact us or submit a complaint to the supervisory authority (The Swedish Data Protection Authority,

If you as a data subject have questions about how Pandox process your personal information, please feel free to contact us at

Pandox AB (publ), org. nr. 556030-7885, Vasagatan 11, 101 20 Stockholm, Sweden,, is the controller of the personal data.