Privacy Notice
Last updated: 24 August 2026
1. Who we are
Vemta is operated by Andrew Bush, sole trader (autónomo), registered in Spain. NIE: Z1110287J. Address: Mallorca 234, Barcelona, Spain 08008. Contact: andrew@vemta.ai.
This notice applies to the website vemta.ai and any personal data collected through it.
2. What data we collect and why
We collect only the data you provide when booking a call through our calendar link (Cal.com):
- Full name
- Work email address
- Company name
- ATS platform (applicant tracking system) you use
This data is used solely to schedule and conduct the research interview. It is not used for marketing, not shared with third parties for their own purposes, and not used to train AI models.
Legal basis: Legitimate interest (Art. 6(1)(f) EU GDPR) — conducting structured research interviews to understand recruitment operations before building any product. You may withdraw at any time by emailing andrew@vemta.ai.
3. Interviews
Interviews cover process and workflow, not candidate or worker records. No candidate or worker personal data is shared during interviews. Notes taken during interviews are anonymised before being used in any summary or report.
We will not name your organisation to any other party without your explicit permission.
4. Data retention
Booking data is held for the duration of the research programme (up to six months from the date of your interview) and then deleted. Anonymised research notes may be retained indefinitely; they contain no personal data.
5. Sub-processors
We use the following third-party services that may process your personal data:
- Cal.com — calendar and booking. EU data region. Privacy policy: cal.com/privacy
- Vercel / Cloudflare Pages — website hosting, EU region. No personal data stored beyond access logs (IP address, request metadata), retained for up to 30 days.
- Email provider (Google Workspace / Fastmail) — email correspondence. Used only when you initiate contact by email.
This site uses no cookies, no analytics pixels, and no third-party tracking scripts. No consent banner is required.
6. Your rights
Under EU GDPR and UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request erasure of your data
- Object to or restrict processing
- Withdraw consent at any time (where processing is based on consent)
- Receive your data in a portable format
To exercise any of these rights, email andrew@vemta.ai. We will respond within one calendar month.
7. Complaints
You have the right to lodge a complaint with a supervisory authority. As Vemta is operated from Spain, the primary supervisory authority is:
Agencia Española de Protección de Datos (AEPD)
www.aepd.es
For UK clients, you may also contact the Information Commissioner’s Office (ICO): ico.org.uk
8. Changes to this notice
If we make material changes to this notice, the “last updated” date at the top will change. We will not notify you by email unless the changes affect data we already hold about you.