Privacy notice
Last updated: 10 September 2026
Legal notice for the TurboTransfer service.
Data controller
The data controller is Safin Italia Srl, owner of the A126 Corporate Advisors brand, Via della Tecnica 18, Potenza, Italy — VAT no. 01646900769. For any request concerning personal data: [email protected].
What data we process
Transferred files: the content of your files is encrypted end-to-end in your browser before upload (AES-256-GCM) and travels to and is stored on our servers only in encrypted form. The decryption key is embedded in the generated link and never reaches our systems, not even for an instant: we do not send the link, you share it yourself. The controller is technically unable to read transferred content. To run the service we keep only the surrounding data in clear: file names and sizes, the sender email if provided, the expiry date and the download count.
Email addresses: the sender email, if you provide it, is used to recognise clients and, if you ask for it, to send you the download notification. We neither receive nor process the recipient address. The email remains linked to the transfer and is deleted with it; in the technical activity log it is kept for a maximum of 12 months.
Technical logs: we record IP address, user agent and request date/time for security, abuse prevention and diagnostics.
Cookies: strictly necessary technical cookies (language, consent storage) and, only with your consent, Google Analytics 4 statistical cookies. Details in the Cookie policy.
Purposes and legal bases
Provision of the file transfer service: performance of a contract (art. 6.1.b GDPR). Security and abuse prevention: legitimate interest of the controller (art. 6.1.f). Aggregate usage statistics: consent (art. 6.1.a), revocable at any time.
Retention
Encrypted files are automatically and permanently deleted when the transfer expires. Technical logs are kept for a maximum of 12 months. Data linked to a transfer (file names and sender email included) is deleted together with it.
Recipients
Data is processed on hosting infrastructure located in the European Union. We do not sell or share data with third parties. If you consent to statistical cookies, aggregate browsing data is processed by Google Ireland Ltd (Google Analytics 4); any transfers outside the EU take place under the safeguards of the Standard Contractual Clauses.
Your rights
You may exercise at any time the rights provided by articles 15-22 GDPR: access, rectification, erasure, restriction, objection and portability, by writing to [email protected]. You also have the right to lodge a complaint with the Italian supervisory authority (www.garanteprivacy.it).
Safin Italia Srl (owner of the A126 Corporate Advisors brand) · Via della Tecnica 18, Potenza, Italy · VAT no. 01646900769 · [email protected]