Privacy Policy

In accordance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR), Organic Law 3/2018 of 5 December (LOPDGDD), and other applicable personal data protection legislation, LESS THAN THREE TECH, S.L. informs website users about the processing of their personal data.

DATA CONTROLLER

Owner: LESS THAN THREE TECH, S.L.
Tax identification number (NIF): B-13647029
Registered office: / Schultz 5, 3ºB-1, 33003 Oviedo (Asturias)
Email: [email protected]
Activity: development, implementation and provision of technological solutions relating to cloud infrastructure, observability, monitoring, DevOps, FinOps, SecOps, cost optimisation, technological sustainability and associated technology consulting and support services.

PERSONAL DATA PROCESSED

The following categories of personal data may be processed through this website:

Data provided directly by users: first and last name, email address, telephone number, company, job title, department or professional role, information contained in enquiries or requests submitted, and information included in applications or CVs when participating in recruitment processes.
Data obtained automatically: IP address, browsing data, device identifiers, technical browser and operating system data, and data obtained through cookies and similar technologies, in accordance with the Cookie Policy.

LESS THAN THREE TECH, S.L. does not request or deliberately process the special categories of personal data referred to in Article 9 of the GDPR. Users warrant that the data provided is accurate, complete, truthful and up to date.

PURPOSES OF PROCESSING

Personal data will be processed for the following purposes:

Handling enquiries and requests: managing requests for information, commercial enquiries, contact requests and requests for product or service demonstrations made through forms, email or any other available channel.
Managing commercial and contractual relationships: carrying out necessary pre-contractual measures, preparing commercial proposals, managing service provision and maintaining the professional or contractual relationship.
Commercial communications: sending information about products, services, news, events, activities or content related to the activities of LESS THAN THREE TECH, S.L., where prior consent has been given or another legally recognised basis applies.
Recruitment processes: managing applications received through the website or through the channels made available for talent acquisition.
Website security and operation: ensuring system security, preventing unauthorised access, detecting technical incidents and improving website operation and performance.
Compliance with legal obligations: complying with tax, accounting, commercial, administrative and any other applicable obligations.

No automated decision-making or profiling with legal effects on users is carried out.

LEGAL BASIS FOR PROCESSING

The legal bases permitting the processing of data are as follows:

Handling enquiries and requests: taking pre-contractual measures requested by the data subject and performing a contractual relationship where applicable.
Service provision and contract management: performance of a contract and taking pre-contractual measures.
Commercial communications: the data subject’s express consent and legitimate interest in sending communications relating to services similar to those previously contracted, where permitted by applicable legislation.
Recruitment processes: taking pre-contractual measures at the applicant’s request and obtaining the data subject’s consent where necessary.
Website security: the controller’s legitimate interest in ensuring the security of information, systems and services provided.
Regulatory compliance: compliance with legal obligations applicable to the controller.

DATA RETENTION PERIODS

Personal data will be retained for the following periods:

Enquiries and requests for information: for a maximum of twelve (12) months from the last interaction with the user.
Customers and suppliers: for the duration of the contractual relationship and subsequently for the periods required by applicable tax, commercial, accounting and civil legislation.
Commercial communications: until the data subject withdraws consent or exercises the right to object.
Recruitment processes: for a maximum of two (2) years from receipt of the CV, unless the applicant requests its erasure earlier.

Once the indicated periods have expired, the data will be blocked where legally required and subsequently securely deleted.

DATA RECIPIENTS

As a general rule, personal data will not be disclosed to third parties. However, it may be disclosed where necessary for:

Compliance with legal obligations.
Responding to requests from administrative or judicial authorities.
Defending the rights and legitimate interests of LESS THAN THREE TECH, S.L.
The provision of services by technology providers acting as data processors.

Such providers may include companies providing:

Hosting and web hosting.
Corporate email.
Cloud services.
CRM and commercial management.
Web analytics.
Technology support and IT security.

All of them will act under a data processing agreement in accordance with Article 28 of the GDPR.

INTERNATIONAL DATA TRANSFERS

Some technology providers used by LESS THAN THREE TECH, S.L. may be located outside the European Economic Area or carry out processing from third countries.

In these cases, international data transfers will take place only where appropriate safeguards exist under Articles 44 et seq. of the GDPR, including, where applicable:

European Commission adequacy decisions.
Standard Contractual Clauses.
Binding corporate rules.
Any other valid mechanisms provided for by applicable legislation.

DATA SUBJECT RIGHTS

Data subjects may exercise the following rights at any time:

Right of access.
Right to rectification.
Right to erasure.
Right to object.
Right to restriction of processing.
Right to data portability.
Right to withdraw consent.

To exercise these rights, they may send a request to:

Email: [email protected]

Subject: EXERCISE OF DATA PROTECTION RIGHTS

The request must enable the data subject to be adequately identified.

Furthermore, if you consider that your rights have not been properly addressed, you may lodge a complaint with the Spanish Data Protection Agency: https://www.aepd.es.

MANDATORY PROVISION OF DATA

Data requested in forms and marked as mandatory is necessary to handle the user’s request.

Refusal to provide such data may prevent the enquiry from being handled, the requested service from being provided or the corresponding relationship from being formalised.

SECURITY MEASURES

LESS THAN THREE TECH, S.L. applies appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with Article 32 of the GDPR. These measures include, among others:

Access controls.
Authentication mechanisms.
Protection of communications.
Backup systems.
Confidentiality commitments.
Security incident management procedures.

However, users should be aware that Internet security measures are not absolutely infallible.

LINKS TO THIRD-PARTY WEBSITES

The website may contain links to third-party websites. LESS THAN THREE TECH, S.L. accepts no responsibility for the content, privacy policies or data processing practices of such external websites. Users are advised to review the relevant privacy policies before providing personal information.

COMMERCIAL COMMUNICATIONS

Commercial communications by electronic means will only be sent where the user has given prior consent or where a legal authorisation permits this under the LSSI-CE.

Users may withdraw consent or unsubscribe at any time using the mechanisms included in each communication or by contacting the controller.

CHANGES TO THE PRIVACY POLICY

LESS THAN THREE TECH, S.L. reserves the right to amend this Privacy Policy to adapt it to legislative changes, interpretations by supervisory authorities or changes in the processing carried out.

The current version will always be available on this page.

Last updated: August 2026