DRAFT, pending legal review. Last updated: 2026.
This Privacy Policy explains how your personal data is collected, used and protected when you use the Vesster website (vesster.com). Vesster is a JOYN Group company.
1. Data Controller
The controller of your personal data is IMP – INTELLIGENT MORPHING PORTALS, LDA. (Company No. 514165146), Parkurbis, Zona Industrial Tortosendo, 6200-823 Tortosendo, Portugal, operating the Vesster website. For any privacy question or to exercise your rights, contact us at hello@vesster.com.
2. What we collect
We only collect what you give us and the minimum technical data needed to run the site securely.
- When you request a resource (an executive briefing, use-case blueprint, guide or the Process Agentifiability Scorecard): your name, work email, phone number, company and role, and, for the Scorecard, the process you name and your answers.
- When you contact us (contact form or email): your name, email, company, role and the message you send.
- When you use the site assistant (chatbot): the messages you type. We do not ask the assistant to collect personal data, and you should not enter sensitive information into it.
- Technical metadata: IP address, browser and device information, and standard server logs, for security, abuse prevention and to keep the service working.
- Cookies and similar technologies, as described in our Cookie Policy.
We do not knowingly collect special categories of data through this website.
3. Purposes of processing
We process your data to:
- deliver the document, report or information you requested;
- respond to your enquiry and, where relevant, arrange a meeting;
- with your explicit consent, send you occasional related communications you can unsubscribe from at any time;
- secure the service, prevent abuse and keep records required by law.
4. Lawful basis
Depending on the activity, we rely on: the performance of your request (delivering the resource you asked for), our legitimate interest (responding to enquiries, security and abuse prevention), and your consent (for marketing communications, recorded with its wording and timestamp). Consent can be withdrawn at any time.
5. Double opt-in
For gated resources we use double opt-in: we only deliver the download or report, and only send any further communication, after you confirm your email address by clicking the link we send you. If you never confirm, the pending record is not used to contact you.
6. Storage period
We keep personal data only as long as necessary for the purpose it was collected for, or as required by law, and then delete or anonymise it.
7. Sharing your data
We do not sell your data. We may share it within the JOYN Group and with service providers acting as our processors (for example email delivery, hosting, security), under appropriate agreements and safeguards, and only as needed for the purposes above, or where required by law.
8. International data transfers
Where data is transferred outside the European Economic Area, we apply appropriate safeguards (such as Standard Contractual Clauses) to protect it to the standard required by the GDPR.
9. Information security
We apply organisational and technical security measures appropriate to the risk. Our security posture, certifications and controls are described in our Trust Center, including ISO/IEC 27001, 27017 and 27018 certification.
10. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict and object to the processing of your data, to data portability, and to withdraw consent. You can unsubscribe from any communication at any time. To exercise a right, email hello@vesster.com; we will respond within the timeframe required by law.
11. Data Protection Authority
If you believe your data has been handled improperly, you have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), or the supervisory authority in your country.
12. Third-party pages
This website may link to third-party sites we do not control. This Privacy Policy does not apply to them; please review their own policies.
13. Changes
We may update this Privacy Policy from time to time. The current version is always published on this page, with its update date.