Privacy policy
1. Who is responsible
- Data controller: Luis José Valdez Rospigliosi (Tres60 analytics), NIF X1982393T.
- Address: Av. José Manuel Baena Martín 5, Bloque 3, 5.º B, 31006 Pamplona (Navarre), Spain.
- Email for data matters: [email protected]
- There is no data protection officer: the law does not require one for an activity of this size.
The law that applies is the GDPR (Regulation (EU) 2016/679) and, for people in the United Kingdom, the UK GDPR as well.
2. What data, what for and on what basis
| What you do | What data we receive | What we use it for | Legal basis (GDPR art. 6) |
|---|---|---|---|
| You write to us by WhatsApp, email or phone to ask a question or request a quote | Name, phone, email, crop, hectares, location and what you tell us | Answering you and preparing your quote | 6.1.b: steps taken at your request before a contract |
| You send us your soil test, photos or field boundaries | What the document contains: usually the holder’s name, the field location and the results | Doing the free interpretation or the work you order | 6.1.b |
| You order a service | Contact and billing details; farm data; drone images of your fields | Providing the service, delivering the report and invoicing you | 6.1.b and 6.1.c (tax and accounting obligations) |
| You asked for information or you are a client, and we write to you again about similar services | Name and contact details | Telling you about services similar to the ones you asked for, with an easy way to say no | 6.1.f (legitimate interest) and Spanish LSSI art. 21 |
| You visit the website | Pages viewed, the page you came from, device and browser type, approximate country and clicks on buttons. No cookies, and your IP address is not stored | Knowing how many visits the website gets and which pages are of interest | 6.1.f (legitimate interest in measuring the audience of our own website) |
We take no automated decisions with legal effects on you and we do not profile you. We do not collect data from children.
A soil test may include data about other people (for example, the owner of the field). Send it to us only if you have the right to do so.
3. How long we keep it
- Enquiries and quotes that are not accepted: 12 months from the last message, then we delete them.
- Clients: for the length of the service and then for as long as tax and commercial rules require and for the time limits for claims. After that they are deleted or anonymised.
- Documents about your fields for the nutrient balance: 3 years from the last soil test, which is the cycle of the test and its two follow-up seasons.
- Drone images: 12 months from delivery.
- Visit statistics: 6 months, which is what the free plan of the counter keeps.
4. Who we share data with
We do not sell your data. Only service providers who work on our behalf and under contract receive it (GDPR art. 28):
- Website hosting: Cloudflare, Inc. (United States). When you visit the website, Cloudflare processes your IP address to serve the pages.
- Email: OVHcloud (France), which hosts the email of tres60analytics.com.
- Reports: GitLab Inc. (United States), where we store reports and from where the private link we send you is published.
- Visit statistics: Umami Software, Inc. (United States), with the data stored on servers in the European Union. It uses no cookies and does not store your IP address: it uses it at that moment to find out the country.
- WhatsApp: if you write to us on WhatsApp, the service is provided by WhatsApp Ireland Ltd. (Meta group), under its own privacy policy.
- Technical collaborators: analysis laboratories and image processing providers, only when the service you order requires it, and with the minimum data needed.
- Public authorities, when a law requires us to.
5. Transfers outside the European Union
Cloudflare, GitLab and Meta’s services may process data in the United States. These transfers rely on the European Commission’s adequacy decision on the EU-US Data Privacy Framework (Implementing Decision (EU) 2023/1795) and, if that decision stopped applying, on the Commission’s standard contractual clauses (GDPR arts. 45 and 46). You can ask us for more information by writing to the address above.
6. Your rights
You can ask us for access, rectification, erasure, objection, restriction of processing and portability of your data (GDPR arts. 15 to 22; the UK GDPR gives you the same rights if you are in the United Kingdom). Write to [email protected] saying what you want. We will answer within one month at most. We may ask you to prove who you are.
If you think we are not handling your data properly, you can complain to the Agencia Española de Protección de Datos (aepd.es), the Spanish authority. If you live in the United Kingdom, you can also complain to the Information Commissioner’s Office (ICO) (ico.org.uk). Before that, we would be grateful if you gave us the chance to put it right.
7. Security
We apply reasonable measures to protect data: computers and accounts have passwords, we make backups on a separate disk, and only the person providing the service has access to your data.
8. Changes
If we change this policy, we will publish the new version here with its date.
Last updated: 22 October 2026.