This Privacy Notice aims to inform you about how ΚΟΣΜΗΜΑΤΑ ΦΩΣ (referred to as "We", "Us," "Our," or "Fos") collects and processes your personal data when you use Our website (www.fosjewels.com) (referred to as the "Website") and/or when you place an order by electronic means and/or you enter into a contract with Us for the purchase of our products (referred to as the "Jewellery"). It also explains the purposes for which your personal data is processed and the rights you are entitled to as a data subject. With regard to the personal data collected in connection with the use of the services available on Website and/or for the purpose of ordering Jewellery and/or entering into a contract with Us, you may contact our Data Controller at our registered office at Thiseos 2 Nisou, PC.2571, Nicosia CY or by sending an email to contact@fosjewels.com with 'Personal Data' as the email subject. WE PROCESS YOUR PERSONAL DATA FOR ONE OR MORE OF THE FOLLOWING PURPOSES: 1. Browsing The Website automatically collects certain technical information, such as IP addresses, domain names, and URIs, in order to ensure its proper functioning, to carry out aggregated statistical analyses, and, in the event of suspected cybercrime, to identify the responsible parties. The legal basis for processing this data is the performance of services necessary to enable users to access the Website, as well as our legitimate interest in ensuring the security and proper operation of our IT systems and in preventing and investigating potential unlawful activities, in accordance with applicable data protection laws. 2. Online Purchases Personal data collected in the context of online purchases are processed for the purpose of fulfilling orders and carrying out related activities, including the shipment of Jewellery, invoicing, payment administration, order tracking, delivery, and, where applicable, the management of returns and refunds. The data processed include contact details (first and last name, email address, telephone number) and the shipping address. In the event of a return, you may also be required to provide your IBAN, which is necessary in order to process the refund for returned Jewellery. Payment method details (such as credit card numbers or security codes) are not processed by us and are handled exclusively by the payment service provider selected by you. The legal basis for processing this data is the performance of the sales contract. Data is retained for the duration necessary to fulfill contractual and legal obligations related to the purchase and sale of products, including those under applicable tax laws. 3. Customer Care We provide customer assistance services by telephone or email in relation to the purchase of Jewellery or the use of our services. Telephone calls may be recorded for the purpose of monitoring and improving the quality and efficiency of the service provided. The personal data processed include the information necessary to respond to your requests, such as your name, email address, and any additional information required for identification and verification purposes. The legal basis for this processing is the performance of a sales contract or the implementation of pre-contractual measures taken at your request, as well as our legitimate interest in protecting and defending our rights before courts or other competent authorities in the event of legal claims. The recording of telephone calls is based on our legitimate interest in improving the quality and effectiveness of our customer service. 4. Profiling We use information relating to your profile and purchasing habits to send you personalized communications and exclusive offers, where you have provided your consent to receive promotional communications, and to analyse customer preferences so as to develop products and services aligned with those preferences. The data processed for profiling purposes may include information relating to your purchases, country of origin, gender, age, and interactions with us through our Website, any applications developed by Us or by third parties on Our behalf, and Our social media channels (e.g., Instagram). Your profile may also be enriched with statistical information lawfully obtained from other sources, such as demographic or geolocation data relating to your area of residence, as well as information concerning the electronic devices used to interact with Us. The legal basis for this processing is your consent, which you may withdraw at any time by contacting us at contact@fosjewels.com with 'Personal Data' as the email subject. 5. Antifraud Personal data is processed for the purpose of verifying the correspondence between the buyer and the holder of the payment instrument used to complete a purchase, in order to prevent and combat fraudulent activities. For these purposes, the data processed may include your first and last name, email address, IP address, details of e-commerce orders, and information relating to the type of payment instrument used for the purchase. The legal basis for this processing is our legitimate interest in preventing, detecting, and combating fraud. 6. Reserved Area Registration Personal data is processed for the purpose of creating and managing a registered user account that enables you to save and manage content such as your wishlist (i.e., your list of favorite products), purchase history, and other related information. The data processed include the personal and contact details provided in the online registration form. Information that is necessary for the use of our services is marked with an asterisk; failure to provide such mandatory data will prevent us from creating your account and providing the requested services. The legal basis for this processing is the performance of the Website registration agreement. 7. E-Receipt Sending Personal data is processed for the purpose of sending the purchase receipt by email following a purchase made on our Website. The data processed for this purpose consists of your email address. The legal basis for this processing is the fulfillment of legal obligations related to tax and accounting requirements, as well as the performance of contractual obligations. 8. Participation in Satisfaction Surveys Personal data may be processed for the purpose of collecting information about your interests, preferences, and opinions regarding the quality of our products, our online, remote, and/or off-premises services, and our customer service. Depending on the survey, the data processed may include your name, contact details, and order number. The legal basis for this processing is your explicit consent, provided by completing and submitting each survey. RETENTION We retain personal data only for as long as necessary to fulfil the purposes for which it was collected and as required by applicable law. The criteria used to determine retention periods include the nature of the personal data, the purpose(s) of processing, any applicable legal, regulatory, tax, accounting, or contractual retention obligations, and the period during which we may need to retain the data to protect our legal rights or to respond to claims. Once the personal data is no longer necessary for these purposes and no legal obligation requires its retention, it will be securely deleted or anonymised. TO WHOM DO WE COMMUNICATE YOUR DATA? To achieve the purposes for which We process your personal data, we may need to disclose it to the following categories of recipients: credit institutions, companies providing shipping and transport services, and insurance companies. These recipients act as independent Data Controllers, and their involvement is necessary to carry out operations essential to the use of our services, such as processing payments and delivering purchased Jewellery. COOKIE Our website uses cookies to make your browsing faster, easier, and more personalized. Cookies are small text files stored on your device that can remember your preferences, login details, or items in your cart, and help us improve your experience. We use two main types of cookies: technical cookies, which are necessary for the proper functioning of the Website, such as navigation and language preferences, and do not require your consent before being set; and profiling cookies, which collect information about your browsing habits to provide personalized content and advertising and require your explicit consent before they are placed. Cookies may also be session cookies, which are temporary and deleted after you close your browser, or permanent cookies, which remain on your device to remember settings for future visits. Strictly necessary cookies are exempt from consent requirements, but for all other cookies we ask for your permission before they are used. You can accept, refuse, or manage your cookie preferences at any time via our Cookie Settings or through the cookie banner displayed when you first visit the Website. Consent must be freely given, specific, informed, and unambiguous, and you can withdraw it at any time by adjusting your settings or using the tools provided; withdrawing consent does not affect the lawfulness of processing carried out prior to withdrawal. Non-essential cookies will not be activated unless you provide consent, and you can continue to browse the Website even if you refuse certain types of cookies (although some features may not function as intended). WHAT ARE THE RIGHTS YOU MAY EXERCISE AS A DATA SUBJECT? You may exercise your rights in relation to your personal data by contacting us at contact@fosjewels.com with 'Personal Data' as the email subject. We undertake to respond to your request as soon as possible and, in any event, within thirty (30) days of receipt. Where necessary, we may request additional information to verify your identity in connection with your request to ensure the proper handling of your personal data. You may exercise the following rights in relation to your personal data: • Right of access: Obtain confirmation as to whether personal data concerning you is being processed and, if so, access such data and receive information regarding its origin, the categories of personal data processed, the recipients or categories of recipients, the purposes of processing, the existence of automated decision-making (including profiling), the data retention period, and the rights available under applicable law. • Right to rectification: Request the correction of inaccurate personal data and the completion of incomplete personal data. • Right to erasure: Request the deletion of personal data when it is no longer necessary for the purposes for which it was collected or when we are no longer authorized to process it. • Right to restriction of processing: Obtain restriction of processing in the following circumstances: i. When you contest the accuracy of the data, for the period necessary to verify accuracy. ii. When the processing is unlawful and you oppose erasure, requesting restriction instead. iii. When the data is no longer necessary for processing but required by you for the establishment, exercise, or defense of legal claims. • Right to data portability: Receive personal data in a structured, commonly used, and machine-readable format and request its transmission to another data controller where technically feasible. • Right to object: You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data based on our legitimate interests, including profiling based on such interests. Upon objection, we will no longer process your personal data unless we demonstrate compelling legitimate grounds which override your interests, rights, and freedoms. • Right to withdraw consent: Withdraw consent at any time where processing is based on your consent, without affecting the lawfulness of processing carried out prior to withdrawal. This Privacy Notice has been prepared in accordance with the Law providing for the Protection of Natural Persons with regard to the Processing of Personal Data and the Free Movement of such Data of 2018 (Law 125(I)/2018). Last Update: 07.08.2026