Privacy Policy
In accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR), Spanish Organic Law 3/2018 of 5 December (LOPDGDD), and other applicable personal data protection legislation, LESS THAN THREE TECH, S.L. informs website users about the processing of their personal data.
1. DATA CONTROLLER
- Controller: LESS THAN THREE TECH, S.L.
- Tax identification number (NIF): B-13647029
- Registered office: / Schultz 5, 3ºB-1, 33003 Oviedo (Asturias)
- Email: [email protected]
- Activity: development, implementation and provision of technological solutions relating to cloud infrastructures, observability, monitoring, DevOps, FinOps, SecOps, cost optimisation, technological sustainability and associated technology consulting and support services.
2. PERSONAL DATA PROCESSED
The following categories of personal data may be processed through this website:
A) Data provided directly by the user: first and last names, email address, telephone number, company, position, department or professional role, information contained in enquiries or requests submitted, and information included in applications or CVs when participating in recruitment processes.
B) Data obtained automatically: IP address, browsing data, device identifiers, browser and operating system technical data, and data obtained through cookies and similar technologies, in accordance with the Cookie Policy.
LESS THAN THREE TECH, S.L. does not deliberately request or process special categories of personal data as defined in Article 9 of the GDPR. Users warrant that the data provided are accurate, complete, truthful and up to date.
3. PURPOSES OF PROCESSING
Personal data will be processed for the following purposes:
- a) Handling enquiries and requests: managing requests for information, commercial enquiries, contact requests and requests for product or service demonstrations made through forms, email or any other available channel.
- b) Managing commercial and contractual relationships: carrying out necessary pre-contractual steps, preparing commercial proposals, managing service provision and maintaining the professional or contractual relationship.
- c) Commercial communications: sending information about products, services, news, events, activities or content relating to the activity of LESS THAN THREE TECH, S.L., where prior consent exists or another legal basis applies.
- d) Recruitment processes: managing applications received through the website or channels available for attracting talent.
- e) Website security and operation: ensuring system security, preventing unauthorised access, detecting technical incidents and improving website operation and performance.
- f) Compliance with legal obligations: meeting applicable tax, accounting, commercial, administrative and any other legal obligations.
No automated decision-making or profiling with legal effects on users is carried out.
4. LEGAL BASIS FOR PROCESSING
The legal bases for processing data are:
- a) Handling enquiries and requests: taking pre-contractual steps requested by the data subject and performing a contractual relationship where applicable.
- b) Service provision and contractual management: performance of a contract and taking pre-contractual steps.
- c) Commercial communications: the data subject’s express consent and legitimate interest in sending communications about services similar to those previously contracted, where applicable law permits.
- d) Recruitment processes: taking pre-contractual steps at the candidate’s request and the data subject’s consent where necessary.
- e) Website security: the controller’s legitimate interest in ensuring the security of information, systems and services provided.
- f) Regulatory compliance: compliance with legal obligations applicable to the controller.
5. DATA RETENTION PERIOD
Personal data will be retained for the following periods:
- Enquiries and requests for information: for a maximum of twelve (12) months after the last interaction with the user.
- Customers and suppliers: for the duration of the contractual relationship and subsequently for the periods required by applicable tax, commercial, accounting and civil legislation.
- Commercial communications: until the data subject withdraws consent or exercises the right to object.
- Recruitment processes: for a maximum of two (2) years after receipt of the CV, unless the candidate requests its deletion earlier.
Once these periods have ended, data will be blocked where legally required and subsequently securely deleted.
6. RECIPIENTS OF DATA
As a general rule, personal data will not be disclosed to third parties. However, data may be communicated where necessary for:
- Compliance with legal obligations.
- Responding to requests from administrative or judicial authorities.
- Defending the rights and legitimate interests of LESS THAN THREE TECH, S.L.
- Service provision by technology providers acting as data processors.
These providers may include companies providing:
- Hosting and web hosting.
- Corporate email.
- Cloud services.
- CRM and commercial management.
- Web analytics.
- Technology support and IT security.
All will act under a data processing agreement in accordance with Article 28 of the GDPR.
7. INTERNATIONAL DATA TRANSFERS
Some technology providers used by LESS THAN THREE TECH, S.L. may be located outside the European Economic Area or process data from third countries.
In such cases, international data transfers will take place only where appropriate safeguards exist under Articles 44 et seq. of the GDPR, including, as applicable:
- European Commission adequacy decisions.
- Standard Contractual Clauses.
- Binding corporate rules.
- Any other valid mechanisms provided for by applicable law.
8. DATA SUBJECTS’ RIGHTS
Data subjects may exercise the following rights at any time:
- Right of access.
- Right to rectification.
- Right to erasure.
- Right to object.
- Right to restriction of processing.
- Right to data portability.
- Right to withdraw consent given.
To exercise these rights, they may send a request to:
Email: [email protected]
Subject: EXERCISE OF DATA PROTECTION RIGHTS
The request must allow the data subject to be adequately identified.
If they consider that their rights have not been properly addressed, they may also lodge a complaint with the Spanish Data Protection Agency: https://www.aepd.es.
9. MANDATORY NATURE OF DATA
Data identified as mandatory in forms are necessary to handle the user’s request.
Failure to provide these data may prevent the enquiry from being handled, the requested service from being provided or the corresponding relationship from being formalised.
10. SECURITY MEASURES
LESS THAN THREE TECH, S.L. applies appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 of the GDPR. These measures include, among others:
- Access controls.
- Authentication mechanisms.
- Protection of communications.
- Backup systems.
- Confidentiality commitments.
- Security incident management procedures.
However, users should be aware that security measures on the Internet are not completely infallible.
11. LINKS TO THIRD-PARTY WEBSITES
The website may contain links to third-party websites or resources. LESS THAN THREE TECH, S.L. accepts no responsibility for the content, privacy policies or data processing practices of such external sites. Users are advised to review the relevant privacy policies before providing personal information.
12. COMMERCIAL COMMUNICATIONS
Electronic commercial communications will be sent only with the user’s prior consent or where a legal authorisation permits this under the LSSI-CE.
Users may withdraw consent or unsubscribe at any time using the mechanisms included in each communication or by contacting the controller.
13. CHANGES TO THE PRIVACY POLICY
LESS THAN THREE TECH, S.L. reserves the right to amend this Privacy Policy to reflect legislative changes, interpretations by supervisory authorities or changes to the processing carried out.
The current version will remain available on this page at all times.
Last updated: August 2026