Processing of personal data

Information to you as a data subject (tenant)

Pandox AB (publ), reg. no. 556030-7885, (“Pandox”) is the controller for the processing of personal data relating to contact persons and other employees of tenants that we receive in connection with the letting of property or premises and in the management and administration of those situations.


1.1. We process personal data for the purpose of administering and managing the rental relationship, contacts in various questions, financial administration incl. billing, marketing, error reporting and remedial actions regarding the property.

1.2. Personal data will also be used for business and method development, as well as market analysis.

1.3. We have through contact with the tenant, usually the data subject’s employer or contractor, obtained customary contact details such as name, telephone number, address and e-mail address.


The legal basis for the processing is that processing is necessary for Pandox's legitimate interests to fulfil the above-mentioned purposes, and that Pandox's interests overrides the data subject's interests or fundamental rights and freedoms to not have their personal data processed.


3.1. Personal data will be transferred between companies in the Pandox Group in order to manage the rental relationship, contact in various matters, financial administration incl. billing, error reporting and remedial actions.

3.2. Personal data may be transferred to subcontractors and others who, for Pandox's behalf, perform services related to the rental relationship and other above stated purposes of the processing.


Pandox only stores personal data within the EU/EEA. If transfer to a third country occurs in exceptional cases, Pandox will ensure that there are legal bases for such transfer and provide the relevant registered with necessary information.

Personal data is stored as long as it is necessary for the purpose of the processing, but no longer than two (2) years after the rental relationship has ended, unless the data is required to determine, enforce or defend legal claims or law requires that the data is to be stored longer.

6.1. As a data subject, you are, without cost, entitled to request information from Pandox about the processing of your personal data. Upon your request, or on our own initiative, we will correct or delete incorrect personal data, and/or limit the processing of these. In addition, you are entitled to request that your personal data is not to be processed for direct marketing purposes. You also have the right to object to such processing as Pandox performs with a weighted assessment as a legal basis. If Pandox considers that processing still needs to be done, it is up to Pandox to show that there are interests that overrides your individual rights.

6.2. If you are displeased with Pandox’s processing of your personal data, please contact us or submit a complaint to the supervisory authority (The Swedish Data Protection Authority,

If you as a data subject have questions about how we process your personal information, please feel free to contact us at

Pandox AB (publ), org. nr. 556030-7885, Vasagatan 11, 101 20 Stockholm, Sweden,, is the controller of the personal data.­­­­­­­­­