Vesanta Privacy Policy

Definitions

The following definitions clarify key terms used in this policy to ensure transparency. These definitions are provided in the context of Vesanta operations and are not exhaustive legal definitions.

Personal data refers to any information that relates to an identified or identifiable individual, such as name, contact details, professional background, identifiers and employment information used to deliver Vesanta services.
Processing means any operation performed on personal data, whether automated or manual, including collection, storage, use, disclosure, alignment, erasure and transfer performed in the provision and improvement of Vesanta services.
User denotes any visitor, registrant or subscriber who accesses Vesanta services on dnexa.pro, including candidates, mentors, clients and partners interacting with the platform.
Service refers to the Vesanta career growth platform and associated resources delivered through dnexa.pro aimed at developing managerial skills for the oil and gas sector, including training modules, assessments and networking tools.
Cookies are small text files placed on your device to recognize your browser and support site functionality, analytics and preference management. We also use similar technologies such as web beacons and local storage.

Data Collection

We collect information directly provided by users, data generated through use of the platform and information from third-party sources where necessary to operate, secure and improve our services. Collection is limited to data necessary for stated purposes.

Data You Provide

Users may supply personal and professional information when registering, applying to programs or contacting support. This data enables Vesanta to administer accounts, evaluate eligibility and deliver personalized content.

Identifying data: full name, date of birth, professional title and employer.
Contact details: email address and postal address for communications and invoicing.
Professional information: CV, qualifications, certifications, work history and areas of expertise.
Account credentials and profile settings created for access to Vesanta services.
Communications content: messages, applications, feedback and support inquiries submitted through the platform.
Payment and billing details provided for paid services processed by authorized payment processors.

Automatically Collected Data

When you interact with dnexa.pro, the platform automatically collects technical and usage data needed to maintain service integrity, analyze performance and improve user experience.

Device and browser information, including IP address, operating system and browser type.
Usage metrics such as pages visited, features used, session duration and interaction timestamps.
Log files and diagnostic data collected for security monitoring and troubleshooting.
Cookie and tracking identifiers used for session management and analytics.
Geolocation data derived from IP addresses where necessary to comply with regional requirements.
Performance indicators and aggregated anonymized analytics for product improvement.

Third-Party Data Sources

Vesanta may supplement user-provided data with information from trusted third-party sources to verify credentials, prevent fraud and improve service accuracy. Any such data is processed in accordance with this policy.

Verification providers for professional credentials and identity checks.
Payment processors that supply transaction confirmation details.
Analytics and hosting partners that provide aggregated performance and security logs.

Purposes of Processing

We process personal data only for specific, legitimate purposes directly related to delivering and securing Vesanta services. Processing is minimized to what is necessary for each purpose.

Account creation, authentication and management to enable access to platform features.
Delivery of career development content, assessments and program enrollment communications.
Customer support and handling inquiries to resolve issues and provide guidance.
Payment processing and billing administration for paid training and services.
Security, fraud prevention and protection of platform integrity and user data.
Service analytics, product improvement and user experience optimization using aggregated data.
Regulatory compliance and legal obligations, including tax and audit requirements.
Communications about updates, terms, policy changes and relevant service information.

Legal Bases for Processing

Where applicable, Vesanta relies on lawful bases to process personal data. For users subject to EU data protection rules, we identify the legal grounds relevant to each processing activity.

Performance of a contract: processing needed to deliver services requested by the user.
Legal compliance: processing required to meet legal or regulatory obligations.
Legitimate interests: processing for platform security, fraud prevention and service improvement, balanced against user rights.
Consent: where specific processing requires explicit consent, users will be provided with clear opt-in controls.

EU Data Protection and GDPR

For individuals whose data falls under EU data protection rules, Vesanta respects the rights established by the General Data Protection Regulation (GDPR). We maintain processes to enable rights requests and compliance where applicable.

Right of access: users may request a copy of personal data we hold about them.
Right to rectification: users can request correction of inaccurate or incomplete data.
Right to erasure: users may request deletion of data where retention is not required by law or contract.
Right to restriction of processing: users can request limits on specific processing activities.
Right to data portability: where applicable, users may receive their data in a structured, machine-readable format.
Right to object: users may object to processing based on legitimate interests, subject to review and applicable exemptions.

Cookies and Similar Technologies

Vesanta uses cookies and similar technologies to enable core platform functionality, remember preferences and collect analytics. We distinguish between necessary and optional cookies and provide controls to manage cookie settings.

Types of cookies in use include session cookies for authentication, persistent cookies for preferences, and third-party cookies used by analytics and advertising partners. Each cookie type serves a defined operational purpose.

Cookie categories: strictly necessary (required for site operation), performance and analytics (used to measure and improve the platform), and functional (to enhance user experience).

Users may manage cookie preferences through their browser settings or via the cookie consent tool provided on dnexa.pro. Disabling certain cookies may affect platform functionality and personalization.

For a detailed list of cookies and retention periods, review our cookie policy available on dnexa.pro/cookie-policy.

Data Sharing and Disclosure

Vesanta restricts data sharing to third parties that provide essential services or where disclosure is required by law. Shared data is limited to what is necessary to achieve the intended purpose and is subject to contractual safeguards.

Service providers engaged to host infrastructure, process payments and deliver platform services under data processing agreements.
Professional advisors such as auditors or legal counsel where disclosure is necessary for compliance or dispute resolution.
Partners and employers when users consent to share profiles or applications for recruitment and program placement.
Regulators, law enforcement or courts when required by lawful process or to protect legal rights.
Analytics and advertising providers for aggregated insights, only when users have given consent where required.
Other third parties with user consent or as otherwise disclosed at the time of data collection.

International Data Transfers

Vesanta operates globally and may transfer personal data to servers and service providers located outside Singapore. Transfers are conducted in compliance with applicable law and with appropriate safeguards to protect personal data.

When transfers occur to jurisdictions without an adequacy decision, Vesanta implements safeguards such as standard contractual clauses, encryption and strict access controls to protect data subjects' rights.

Data Retention

Vesanta retains personal data for the period necessary to fulfil processing purposes, comply with legal obligations and resolve disputes. Retention periods are regularly reviewed and documented.

Account and profile data are retained for the duration of account activity and for a defined period after account closure to meet legal, tax and audit obligations or to address potential claims.

Communications and support correspondence are retained for operational purposes and to maintain a record of interactions; retention periods are aligned with business and regulatory needs.

System logs and security records are retained for a limited period to support incident contribute, fraud prevention and service stability, then archived or deleted according to our retention schedule.

When personal data is no longer required, Vesanta will securely delete or anonymize the information in accordance with industry practices and contractual requirements.

Security Measures

Vesanta employs technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration and destruction. Security practices are reviewed periodically and updated as the threat landscape evolves.

Encryption of data in transit and at rest where appropriate to the sensitivity of the information.
Access controls, role-based permissions and multi-factor authentication for administrative access.
Regular security assessments, monitoring, logging and incident response procedures to detect and address vulnerabilities.

Your Rights

Vesanta supports the exercise of data subject rights and has established procedures to respond to requests in a timely and verifiable manner. Requests may be subject to verification and applicable legal limitations.

Access: request confirmation of processing and obtain a copy of personal data.
Rectification: request correction of inaccurate or incomplete personal data.
Erasure: request deletion of personal data in circumstances permitted by law.
Restriction and objection: request limitation of processing or object to processing where applicable.
Portability: request transfer of data to another controller in a structured, commonly used format where applicable.
Withdrawal of consent: where processing is based on consent, users may withdraw consent without affecting processing carried out prior to withdrawal.
Right to rectify inaccurate or incomplete personal data held by Vesanta, including requests to update contact details, professional credentials, and profile information.
Right to restrict or object to specific processing activities where legal grounds permit, including profiling for recruitment or targeted outreach, subject to applicable law and operational requirements.

How to Exercise Your Privacy Rights

Requests to access, correct, delete, restrict processing, or port personal data can be submitted to Vesanta's privacy team. To ensure secure handling, we may require identity verification and reasonable detail about the requested action. Each request is assessed under Singapore data protection law and processed in accordance with our internal procedures.

[email protected]

We aim to acknowledge receipt of privacy requests within 5 business days and to provide a substantive response within 30 calendar days in most cases. Complex requests or requests requiring coordination with third parties may take longer; you will be informed if additional time is needed.

Marketing Communications

Vesanta may send informational updates, programme announcements, event invitations, and industry insights related to oil and gas leadership development. Marketing messages are based on your expressed interests and consent where required. Communications are designed to be relevant to career advancement within the Singapore and regional energy sector.

You may opt out of marketing communications at any time by using the unsubscribe link in our emails, updating your contact preferences in your account, or contacting Vesanta at [email protected]. Opting out will not affect transactional communications related to active services or account administration.

Children's Data

Vesanta's services are intended for professionals and aspiring managers in the energy sector. We do not knowingly collect personal data from children under 18. If we become aware that we have collected personal data of a person under 18 without appropriate consent, we will take measures to delete that data in line with applicable law.

Third-Party Links

Our site may include links to external sites and partner platforms used for training delivery, assessment, or recruitment. These third-party sites operate under their own privacy policies. Vesanta is not responsible for third-party data practices; we recommend reviewing their privacy terms before sharing personal data.

Changes to This Policy

We periodically review and update our privacy practices to reflect legal, operational, and technological changes. Material updates will be published on the Vesanta website with the effective date. Continued use of our services after updates indicates acceptance of the revised policy within the limits permitted by law.