Personal Data Protection Policy

Personal Data Protection

Who we are
Marathon Trading is the trading name of the registered company Ioannis M. Kapakiotis & Sons Ltd (ΗΕ 7672). Our address is at 35 Kilkis Avenue, Latsia, 2234 Nicosia, Cyprus. You can contact us by post at this address, by email at or by telephone at 0035722899500.

How we obtain personal data
We obtain your personal data through information you provide directly to us (e.g. when you contact us via our contact form, join our newsletter or when you wish to report an adverse event or product quality complaint).

What personal data we collect
The personal data that we collect from you varies depending on whether you are a consumer, doctor or a patient. The information we collect may include name, contact details, details of your medication, as well as details of the side effects experienced from your medication.

Why we collect your personal data
We collect your personal data in accordance with applicable regulatory requirements that aim to ensure patient safety in relation to the use of medicines and high standards of product quality. (Pharmacovigilance purposes) We also collect your personal data to inform you through email of a new product launch, product withdrawals from the market and updates on important information regarding our products. (Marketing purposes)

Who we share your personal data with
We are legally obliged by the European and Cyprus law to refer a potential complaint to the Marketing Authorization Holder (MAH) of the product or the MAH’s local representative. Therefore, in the event that you have reported an adverse event or product quality complaint, your personal data will be shared with the above mentioned authorities. We use external service providers (MailChimp) for data processing to support us in carrying out all our marketing activities (e.g. sending out newsletters). These service providers process data only on the instructions and under the control of Marathon Trading and solely for the purposes described in this personal data protection policy.

Transferring data outside the EU
The processing of your data for the purposes mentioned above, may involve transferring outside of the European Economic Area (EEA). For the processing related to pharmacovigilance purposes, your personal data may be transferred to the Marketing Authorization Holder (MAH) which is located in Switzerland. This is necessary as the relevant legal framework provides for forwarding quality and adverse event complaints that you may submit, directly to the MAH. Switzerland has been recognized by the European Commission as fulfilling the adequate level of personal data protection and therefore as a safe third country in regards to data protection policies. As for the processing related to marketing purposes, your personal data is sent outside of the EU for the purposes of marketing support, as described in the previous paragraph. We share your personal data with the Rocket Science Group (MailChimp). MailChimp, which is based in the U.S., participates in and has certified its compliance to the Privacy Shield framework, which allows EU customers to transfer their lawfully obtained personal data to MailChimp under the GDPR. Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA.

How long we keep your personal data for
As it relates to information that is retained and processed for marketing purposes, your personal data will be kept as long as you continue to consent to receive our marketing material. In case that you withdraw this consent as described in the next section (Your data protection rights), your information will be deleted. As it relates to information generated by addressing a complaint, your personal data will be retained only for the purposes of investigation and assessment of the complaint, for ensuring high standards of quality and safety of health care and of medicinal products and devices. The provided data will be retained for a time period as per the legal framework, the guidelines given from time to time by the regulatory bodies and the common practice and will be erased when it is no longer needed for these purposes. Then, anonymized information may be kept for statistical and scientific purposes.

Your data protection rights
You have the right to contact us at to request access, alteration, restriction or deletion of your personal data. You may withdraw your consent at any time, to stop us from using your information for marketing purposes. You can do this by emailing us at It is however stressed that the above mentioned rights shall not obstruct Marathon Trading of complying with its legal obligations or the general practice.

Your right to complain
If you have a complaint about our use of your personal data, you can contact us at or the Office of the Commissioner for Personal Data Protection at