Marketing Data Privacy Notice


We at G.G. Papaloisou Ltd take the privacy and security of your personal data very seriously. This Marketing Privacy Notice outlines what personal data we may collect about you and how we may use it.

Who we are?

We are C.G. Papaloisou Ltd (“C.G. Papaloisou”, “We”, “Us”, “Our”). Our address is 35 Kilkis Avenue, 2234 Latsia. You can contact us by post at the above address, by email at [email protected] or by telephone at 0035722490305.

C.G. Papaloisou has assigned a Data Privacy Team responsible for overseeing our compliance with the General Data Protection Regulation, which you may contact at [email protected], or c/o the Data Privacy Team, C.G. Papaloisou, 35 Kilkis Avenue, 2234 Latsia, Cyprus in case of any questions or concerns regarding the processing of your personal data.

What information do we collect?

Certain information will be provided by you as part of completing our Marketing communication form. We will collect the following personal data:

Why do we collect your personal data?

Your personal data is used by us in accordance with this Privacy Notice, to inform you through email communication, of the following:

Will personal data be passed on to third parties?

We will share personal information with other entities in our group (namely Alector Pharmaceuticals Ltd and Louanfarm Trading Ltd), as part of the marketing activities described above.

We use external service providers (MailChimp) for data processing to support us in carrying out all our marketing activities (e.g. sending out newsletters). These service providers process data only on the instructions and under the control of C.G. Papaloisou Ltd, and solely for the purposes described in this data protection notice.

Transferring data outside the EU

We share your personal data with the Rocket Science Group (MailChimp). This will involve transferring your data outside of the European Economic Area (EEA). Your personal data is send outside of EU for the purposes of marketing support, as described in the previous paragraph. MailChimp, which is based in the U.S participates in and has certified its compliance to the Privacy Shield framework, which allows EU customers to transfer their lawfully obtained personal data to MailChimp under the GDPR. Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA.

How long is personal data stored for?

Your information for marketing purposes is kept for as long as you continue to consent to receive our marketing material. You may find more information in our Data Retention Policy.

Data Subject Rights

You may contact C.G. Papaloisou at [email protected] at any time to request access to the personal data we hold about you, to correct any mistakes or to request deletion of the same, or to request the restriction of processing or object to certain types of processing of your personal data. If such a request places C.G. Papaloisou or its affiliates in breach of their obligations under applicable laws, regulations or codes of practice, then C.G. Papaloisou may not be able to comply with your request, but you may still be able to request that we restrict the use of your personal data for further processing.

You may withdraw your consent at any time, to stop us from using your information for marketing purposes. You can do this by either:

Once we receive your request, we will update your profile to ensure that you do not receive our newsletter within one month.

Your right to complain

If you have a complaint about our use of your information, you can contact the Office of the Commissioner for Personal Data Protection via their website at www.dataprotection.gov.cy or write to them at:

1 Iasonos str., 1082 Nicosia
P.O.  Box 23378, 1682 Nicosia
Tel: +357 22818456
Fax: +357 22304565

Email: [email protected]

Could personal data be processed after consent is withdrawn?

If consent has been withdrawn or an individual has requested the restriction of personal data processing, your personal data may still be processed in order to fulfill our regulatory obligations with healthcare authorities.