Last updated: 26 October 2026

This is a translation of the Italian original. In case of discrepancy, the Italian version prevails.

This notice is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018, to those who visit this website and to those who contact us using the published contact details and form.

1. Data controller

FRALEX SRL, registered office at Via XIV Ottobre, 47, 96011 Augusta (SR), Italy – VAT no. 02142590898.
E-mail: amministrazione@fralexsrl.com – Certified e-mail (PEC): fralex_srl@pec.it – Tel. +39 327 706 9130.

2. Types of data processed

Browsing data

The computer systems running this website acquire, in the course of normal operation, certain technical data whose transmission is implicit in the use of Internet protocols (for example IP address, date and time of the request, page visited, browser type). They are recorded in the server logs by the hosting provider for security and for the proper functioning of the service.

Data provided voluntarily – contact form

By filling in the form you provide your full name, company, e-mail address, phone number (optional), country or market of interest, type of request and the content of your message. The form sends this data by e-mail to our company mailbox; the website does not store it in a database. To protect against spam, the server temporarily keeps the sender's IP address, in encrypted form that cannot be read in clear, for a maximum of one hour.

Data provided by e-mail, phone or WhatsApp

If you contact us through these channels, we will process the data you provide in order to reply. Using WhatsApp also involves processing of data by WhatsApp Ireland Ltd. under its own privacy policy.

3. Purposes and legal bases

  • Answering requests and carrying out pre-contractual steps at the request of the data subject (Art. 6(1)(b) GDPR).
  • Managing business relationships with customers and suppliers, where these arise (Art. 6(1)(b) and (c) GDPR).
  • Ensuring the security of the website and preventing abuse and spam (legitimate interest, Art. 6(1)(f) GDPR).
  • Establishing, exercising or defending legal claims (legitimate interest, Art. 6(1)(f) GDPR).

We do not use the data from the form to send promotional communications and we do not pass it to third parties for marketing purposes.

4. Whether providing data is mandatory

Providing the data marked as required in the form is necessary to answer your request; without it we cannot follow up on your enquiry. The phone number is optional.

5. How data is processed

Data is processed by electronic and, where necessary, paper means, by authorised and trained staff, with technical and organisational measures appropriate to ensure confidentiality, integrity and availability. The website uses an encrypted HTTPS connection. No automated decision-making or profiling takes place.

6. Retention periods

  • Contact requests that do not lead to a business relationship: up to 24 months from the last exchange, unless a different need for protection arises.
  • Data relating to contractual relationships and commercial and tax documentation: for the period required by law (normally 10 years, Art. 2220 of the Italian Civil Code).
  • Technical logs: for the period set by the hosting provider for security purposes.

7. Recipients of the data

Data may be processed by parties providing services to the Controller, appointed where required as data processors under Art. 28 GDPR: hosting and e-mail service providers, consultants and professionals (for example accountants and lawyers) and – for requests that become transactions – the logistics and customs operators involved in the specific supply. Data may be disclosed to authorities where required by law. It is not made public.

8. Transfers outside the EU

As a rule, the Controller does not transfer data from the form outside the European Economic Area. Where a request concerns a transaction with non-EU counterparties, any data necessary for those counterparties will be shared in compliance with Chapter V GDPR (for example under Art. 49(1)(b), where necessary for pre-contractual measures taken at the data subject's request).

If you choose to contact us via WhatsApp, the service is provided by WhatsApp Ireland Ltd., which may transfer data to the United States within the Meta group on the basis of the EU-U.S. Data Privacy Framework and standard contractual clauses, as described in its privacy policy.

9. Your rights

You may exercise at any time the rights under Articles 15-22 GDPR: access, rectification, erasure, restriction, portability and objection to processing based on legitimate interest. Requests should be sent to amministrazione@fralexsrl.com or by certified e-mail to fralex_srl@pec.it.

You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority of your EU country of residence.

10. Cookies

For information on cookies and other tools used by this website, please see our Cookie Policy.

11. Changes

This notice may be updated. The version in force is always the one published on this page, showing the date of the last update.