Pembio Privacy Policy

Your privacy is critically important to us.

Pembio is a Swedish company owned and operated by Pembio AB in Lund - Sweden. Org. nr. 559274-5375.

These General Terms and Conditions (“Terms”) govern the use of Pembio's SaaS platform for managing work (the "Service").

Pembio is fully committed to protecting your privacy rights in relation to any information we may collect (“Personal Data”).

  1. Scope

    This document (the “Privacy Policy”) applies to the Service. We have adopted this Privacy Policy to explain what information may be collected through our Service, how we use this information, and under what circumstances we may disclose the information to third parties. This Privacy Policy applies only to information we collect through the Pembio Services and does not apply to our collection of information from other sources.

    This Privacy Policy, together with the Terms and Conditions available on, set forth the general rules and policies governing your use of the Pembio Services.

  2. What is GDPR?

    The European Union (“EU”) introduced the General Data Protection Regulation in 2018 (the “Regulation”), to strengthen individuals’ ability to exercise their rights to their own Personal Data and to set a common standard for data storage throughout the EU. The Regulation comprises significantly stricter requirements on how Personal Data is processed compared to prior legislation.

    At Pembio, we treat your Personal Data with the greatest degree of care and confidentiality in accordance with the Regulation.

  3. What comprises Personal Data?

    Personal Data is any type of information or data that can be attributed to an individual.

    To read more on how we manage and store your personal data and what security measures we maintain to ensure your personal data is secure read our Data Processing Agreement.

  4. Roles

    As a Pembio user you act as Personal Data Controller while Pembio acts as Personal Data Processor. The Personal Data Controller defines the purpose for collecting the specific data, and is responsible for keeping the data up to date. Data that is no longer needed shall be deleted immediately.

    As Personal Data Processor, Pembio provides the tools necessary for the Controller to handle the data. Pembio stores all Personal Data within the EU. Data sent between users and the system is always sent encrypted.

  5. Authorized subprocessors

    To provide the best possible service Pembio works with select external service providers, referred to as Authorized Subprocessor in the Regulation. We take all reasonable measures to ensure that our subprocessors adhere to the Regulation and handle the data correctly. Read about our subprocessors at

  6. Data

    Only information required to fulfill a certain predetermined purpose is collected, and the data is stored only for as long as necessary to complete the purpose.

  7. Functionality in Pembio related to data protection

    1. Search users and data throughout the system to be able to delete (Right to erasure) and/or show what's been stored.
    2. Automatic deletion of inactive contacts after a defined time
  8. Security

    Pembio encrypts all data sent to and from our servers.

  9. Cookies

    Pembio uses cookies, similar technologies and services to display personalized content and to store your preferences on your computer. Read more about cookies in our cookie policy.

  10. Third parties

    We will only share your Personal Data with third parties when required to do so in order to adhere to a legal obligation (e.g. a court order) or other mandatory law. We may also do so in order to address customer service requests, protect the rights of Pembio or other third parties, or in the context of a business relationship or transaction when the receiver is bound by confidentiality obligations.

  11. Privacy Policy Changes

    Pembio may change this Privacy Policy from time to time at Pembio's discretion. Alterations to the Privacy Policy will be notified through Your continued use of the Pembio Services after any change in this Privacy Policy will constitute your acceptance of such changes.