Marketing Data Privacy Notice


We at G.G. Papaloisou Ltd take the privacy and security of your personal data very seriously. This Marketing Privacy Notice outlines what personal data we may collect about you and how we may use it.

Who we are?

We are C.G. Papaloisou Ltd (“C.G. Papaloisou”, “We”, “Us”, “Our”). Our address is 35 Kilkis Avenue, 2234 Latsia. You can contact us by post at the above address, by email at privacy@papaloizou.com or by telephone at 0035722490305.

C.G. Papaloisou has assigned a Data Protection Officer responsible for overseeing our compliance with the General Data Protection Regulation, which you may contact at privacy@papaloizou.com, or c/o the Data Protection Officer, C.G. Papaloisou, 35 Kilkis Avenue, 2234 Latsia, Cyprus in case of any questions or concerns regarding the processing of your personal data.

What information do we collect?

Certain information will be provided by you as part of completing our Marketing communication form. We will collect the following personal data:

• Name
• Email address
• Specialty (e.g. pathologist, neurologist, pharmacist)

Why do we collect your personal data?

Your personal data is used by us in accordance with this Privacy Notice, to inform you through email communication, of the following:

• New Product launch
• Product withdrawal from market
• Updates on important information regarding our products

Will personal data be passed on to third parties?

We will share personal information with other entities in our group (namely Alector Pharmaceuticals Ltd), as part of the marketing activities described above.
We use external service providers (MailChimp) for data processing to support us in carrying out all our marketing activities (e.g. sending out newsletters). These service providers process data only on the instructions and under the control of C.G. Papaloisou Ltd, and solely for the purposes described in this data protection notice.

Your personal data is not send outside of Cyprus, except for the purpose of MailChimp, which is based in the U.S. MailChimp participates in and has certified its compliance to the Privacy Shield framework, which allows EU customers to transfer their lawfully obtained personal data to MailChimp under the GDPR. We will not use the information to make any automated decisions that might affect you.

How long is personal data stored for?

Your information for marketing purposes is kept for as long as you continue to consent to receive our marketing material. You may find more information in our Data Retention Policy.

Data Subject Rights

You may contact C.G. Papaloisou at privacy@papaloizou.com at any time to request access to the personal data we hold about you, to correct any mistakes or to request deletion of the same, or to request the restriction of processing or object to certain types of processing of your personal data. If such a request places C.G. Papaloisou or its affiliates in breach of their obligations under applicable laws, regulations or codes of practice, then C.G. Papaloisou may not be able to comply with your request, but you may still be able to request that we restrict the use of your personal data for further processing.

You may withdraw your consent at any time, to stop us from using your information for marketing purposes. You can do this by either:

• Clicking the unsubscribe link at the end of our emails or
• Emailing us at privacy@papaloizou.com

Once we receive your request, we will update your profile to ensure that you do not receive our newsletter within one month.

Your right to complain

If you have a complaint about our use of your information, you can contact the Office of the Commissioner for Personal Data Protection via their website at www.dataprotection.gov.cy or write to them at:

1 Iasonos str., 1082 Nicosia
P.O. Box 23378, 1682 Nicosia
Tel: +357 22818456
Fax: +357 22304565
Email: commissioner@dataprotection.gov.cy

Could personal data be processed after consent is withdrawn?

If consent has been withdrawn or an individual has requested the restriction of personal data processing, your personal data may still be processed in order to fulfill our regulatory obligations with healthcare authorities.