File Transfer Terms
Kinana Films AB · Effective from [date of launch] · Version 2026-10-16
1. About these terms
These terms apply when you send files to Kinana Films AB through transfer.kinanafilms.com. By ticking the box before you press Send, you confirm that you have read and accept them, together with our Privacy Policy.
- Who we are: Kinana Films AB, a Swedish limited company, org. no. [XXXXXX-XXXX], [street address], Malmö, Sweden. We are the data controller for personal data handled through the service.
- Contact: [contact email]
- What the service does: it lets people send files to Kinana Films. Files go directly to Kinana Films' Google Workspace storage (Google Drive). We do not use the service to send files out.
- Changes: we may update these terms. The version that applies is the one shown when you send your files.
2. Your responsibilities
When you send files, you confirm that:
- You own the files or have the right to share them with Kinana Films, including any music, footage, images or other material in them.
- Sharing them does not breach a contract, a confidentiality obligation, copyright or anyone else's rights.
- If the files show or identify other people, you have a lawful basis to share that personal data with us, and those people have been told where it is going.
- The files contain no viruses, malware or harmful code.
- The files are not illegal, threatening or abusive, and are not unsolicited advertising.
Sending files does not transfer any rights to Kinana Films, and it does not create an agreement to produce, buy, distribute or comment on your work. Any such agreement must be made separately in writing.
We may delete, without notice, files that break these terms, are unsolicited, or look unsafe. We may block senders who misuse the service. Where we are required to, we report illegal content to the authorities.
We aim to keep the service available, but cannot guarantee it. Always keep your own copy of anything you send. To the extent Swedish law allows, Kinana Films is not liable for files lost or delayed in transfer.
3. Your data: what we keep, where and for how long
We collect only what we need to receive your files and follow up on them. We process it under the EU General Data Protection Regulation (GDPR) and the Swedish Data Protection Act (2018:218).
| Data | Why we need it | Legal basis (GDPR) | How long we keep it |
|---|---|---|---|
| Your files | To receive and work with what you sent | Legitimate interest, art. 6(1)(f), or a contract with you, art. 6(1)(b) | As long as the project needs them. Unsolicited or unrelated files: deleted within 30 days |
| Email, project name, subject, message | To know who sent what and reply | Legitimate interest, art. 6(1)(f) | 12 months after the transfer, longer only if we start working together |
| Time you accepted these terms | To show you agreed | Legitimate interest in documenting the terms, art. 6(1)(f) | Same as the transfer record |
| IP address and technical logs | To stop spam and abuse and keep the service secure | Legitimate interest, art. 6(1)(f) | 30 days |
We do not sell your data, use it for marketing, or add you to a newsletter.
Service providers (processors). We use these companies to run the service, each under a data processing agreement:
- Google (Google Workspace / Google Drive): stores your files and the transfer record.
- Cloudflare (Turnstile): checks that the sender is a person, not a bot.
- Brevo (France): sends us the notification email about your transfer.
- Hostinger (server hosting): runs the upload page and keeps technical logs.
Some of these providers may process data outside the EU/EEA, for example in the United States. When that happens, the transfer is protected by the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
4. Your rights, deletion and governing law
You can ask us at any time to delete your files and data. Email [contact email] with the project name and the email address you sent from. We reply within one month, as GDPR requires.
Under GDPR you also have the right to:
- see what personal data we hold about you and get a copy;
- have incorrect data corrected;
- object to processing based on legitimate interest;
- restrict processing while a question is being handled;
- receive data you gave us in a portable format, where this applies.
If you think we handle your data wrongly, please contact us first. You can also complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), imy.se, or to the data protection authority in your own EU country.
These terms are governed by Swedish law. Disputes are settled by a Swedish general court, with Malmö District Court (Malmö tingsrätt) as the first instance. This does not limit any mandatory consumer rights you have in your country of residence.