html_content = """ Kristalcolor | Privacy Policy

Privacy Policy

Last Updated: April 2026

This Privacy Policy describes how Kristalcolor Sas ("we", "us", or "our") collects, uses, and discloses your personal information when you visit our website and use our contact forms. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and Italian legislation.

1. Data Controller

Kristacolor Sas
C/da Defenza 5, 82028
San Bartolomeo in Galdo (BN), Italy
Email: aeroline@kristalcolor.it

2. Types of Data We Collect

We may collect and process the following categories of personal information:

  • Identity Data: Name and surname provided via contact forms.
  • Contact Data: Your corporate email address and telephone number.
  • Professional Data: Company name, job title, or specific technical requirements mentioned in your inquiry.
  • Technical Data: IP address, browser type, and navigation data collected through cookies to ensure site security and performance.

3. Purpose and Legal Basis for Processing

We process your data based on the following legal grounds:

  • Pre-contractual Measures: To respond to your technical inquiries, provide support for our AERO Line coatings, and prepare quotes.
  • Legitimate Interest: To maintain and improve our website, prevent fraud, and ensure the security of our network.
  • Legal Obligation: To comply with tax, accounting, and legal requirements under Italian law.

4. Data Retention

Your personal data will be stored only for the period necessary to fulfill the purposes for which it was collected:

  • Inquiries: Up to 24 months from the last interaction, unless it leads to a commercial contract.
  • Legal Records: Up to 10 years as required by Italian civil and tax codes.

5. Data Recipients

Your data is processed by authorized internal personnel. We may share your information with trusted third-party service providers (Data Processors), such as hosting providers or IT consultants, solely for the purposes described above. We do not sell or trade your data to third parties.

6. International Transfers

Data is primarily processed within the European Economic Area (EEA). If any transfer to third countries occurs, it is managed through Standard Contractual Clauses (SCCs) to ensure an equivalent level of protection.

7. Your Rights (GDPR)

Under the GDPR, you have the following rights:

  • Access and Rectification: Request a copy of your data or correct inaccuracies.
  • Erasure: Request the deletion of your personal data ("Right to be Forgotten").
  • Restriction and Objection: Limit how we process your data or object to its use for legitimate interests.
  • Data Portability: Receive your data in a structured, commonly used format.

To exercise these rights, please contact us at aeroline@kristalcolor.it.

8. Supervisory Authority

If you believe your data has been handled incorrectly, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) at www.garanteprivacy.it.

""" with open("privacy_policy.html", "w") as f: f.write(html_content)