Last updated: 25 September 2026
This Privacy Policy explains how Viravix Group OÜ collects, uses, stores and protects personal data when you visit https://cipexperts.com/ (the “Website”), submit a contact form, email us or call CIP Experts.
CIP Experts is a brand operated by Viravix Group OÜ. Viravix Group OÜ is the controller of the personal data described in this Privacy Policy.
Controller details
Viravix Group OÜ
Registry code: 12648143
VAT number: EE101750518
Registered address: Joala tn 9-20, 20103 Narva, Estonia
Email: [email protected]
Telephone: Estonia: +372 880 7560 · Poland: +48 732 084 994 · Ukraine: +380 44 358 18 40
This Privacy Policy applies to Website visitors and persons who contact CIP Experts through the Website, by email or by telephone.
Depending on how you interact with us, we may collect the following categories of personal data.
When you submit a contact form or email us, we may collect:
Please provide only the information necessary for your enquiry. Do not include special categories of personal data or confidential personal information unless it is necessary and you are authorised to provide it. If an attachment contains another person’s personal data, you must be authorised to share it and, where required, inform that person about this Privacy Policy.
When you call one of the telephone numbers published on the Website, we may process your telephone number, the date, time and duration of the call, information you provide during the conversation and an audio recording of the call.
Incoming calls are recorded using CallGear. A notice about recording is provided before or at the beginning of the call. If you do not wish to communicate through a recorded telephone channel, you may contact us by email or through the Website form instead.
If your enquiry is relevant to our services or may lead to a business relationship, authorised personnel may enter relevant information into Pipedrive CRM. This may include your name, professional contact details, company, enquiry, correspondence, commercial interest and the status of our communication.
When you use the Website, we may automatically receive:
We process personal data only where we have a valid legal basis under the General Data Protection Regulation (“GDPR”).
| Purpose | Personal data concerned | Legal basis |
| Responding to enquiries, assessing requests, preparing proposals and taking requested steps before entering into a contract | Identity, professional, contact, enquiry, attachment and communication data | Steps taken at your request before entering into a contract — Article 6(1)(b) GDPR; and our legitimate interest in managing B2B enquiries — Article 6(1)(f) GDPR |
| Managing prospective and existing business relationships in Pipedrive CRM | Identity, professional, contact, company, enquiry, correspondence and relationship-status data | Our legitimate interest in organising enquiries, following up relevant requests and managing B2B relationships — Article 6(1)(f) GDPR |
| Handling and recording incoming calls for communication quality, accurate follow-up, evidence of requests and dispute resolution | Telephone number, call metadata, information provided during the call and audio recording | Our legitimate interest in documenting and improving business communications and protecting legal rights — Article 6(1)(f) GDPR; steps requested before entering into a contract — Article 6(1)(b) GDPR. Where applicable law requires consent, recording will be based on consent — Article 6(1)(a) GDPR |
| Providing services and managing a contractual relationship | Identity, professional, contact, contract, transaction and communication data | Performance of a contract — Article 6(1)(b) GDPR |
| Sending relevant B2B marketing communications | Name, professional contact details, company, role, interests and marketing preferences | Your consent — Article 6(1)(a) GDPR; or our legitimate interest in promoting relevant B2B services where direct marketing is permitted by applicable law — Article 6(1)(f) GDPR |
| Complying with accounting, tax and other legal obligations | Identity, contact, contract and transaction data | Compliance with a legal obligation — Article 6(1)(c) GDPR |
| Establishing, exercising or defending legal claims | Relevant contact, communication, call, contract and transaction data | Our legitimate interest in protecting our legal rights — Article 6(1)(f) GDPR |
| Operating, maintaining and securing the Website, including preventing spam and abuse through reCAPTCHA | Technical logs, device, access and interaction data | Our legitimate interest in ensuring the availability, integrity and security of the Website — Article 6(1)(f) GDPR |
| Measuring Website use and advertising performance through Google Analytics and Google Ads | Online identifiers, cookie data, device, usage, advertising and conversion data | Your consent — Article 6(1)(a) GDPR |
Where we rely on legitimate interests, we balance those interests against your rights and reasonable expectations. You may object to processing based on legitimate interests as explained in Section 13.
We use information submitted through the Website or by email to understand your request, respond to you, prepare a proposal and, where appropriate, establish or manage a business relationship.
Your first name, last name and email address are required in the Website contact form. Job title, telephone number and company name are optional. If you do not provide required information, we may be unable to process your request.
Attachments are optional. They may contain technical documentation, a curriculum vitae or other information you choose to provide. We process an attachment only in connection with the purpose for which it was submitted.
Where personal data is required to enter into or perform a contract or comply with a legal obligation, providing it is necessary. If you do not provide it, we may be unable to enter into or perform the relevant contract.
Incoming calls to the telephone numbers published on the Website are routed and recorded through CallGear, provided by SIA Callgear. We use this service to receive and manage calls, maintain accurate records of requests, support follow-up and protect our legitimate interests in the event of a dispute.
Access to call recordings is restricted to authorised persons who need it for the purposes described above. Call recordings are not used for automated decision-making.
A Website notice alone does not replace any call-recording notice or consent required by applicable national law. Callers must be informed before or at the start of recording.
Where an enquiry is relevant to our services, we may add it to Pipedrive CRM, provided by Pipedrive OÜ, to organise communications, assign follow-up actions and manage a prospective or existing business relationship.
We may send occasional information about CIP Experts services that is relevant to your professional role or previous enquiry. We send such communications only where we have your consent or where applicable law permits relevant B2B direct marketing based on legitimate interests.
Every electronic marketing communication will provide a way to opt out. You may also object or withdraw your consent at any time by emailing [email protected]. Opting out of marketing does not affect service-related or necessary business communications.
The Website uses Complianz to display the cookie banner, record and manage cookie choices and control non-essential technologies based on the visitor’s consent.
The Website may use:
You can accept or reject non-essential cookies through the cookie banner and change or withdraw your choice at any time through the cookie settings available on the Website. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
Detailed and automatically updated information about the cookies and technologies detected on the Website, including their providers, purposes and durations, is provided in our Cookie Policy.
We use Google Analytics 4 and may link the Google Analytics property with Google Ads. In the European Economic Area, these services are provided by Google Ireland Limited.
Google Analytics helps us understand Website traffic and usage. Google Ads integration may be used to measure advertising performance and conversions and to optimise campaigns. Full analytics and advertising measurement using cookies or similar identifiers takes place only after the relevant consent has been provided through Complianz.
The Website uses Google Consent Mode. When consent is denied, Google tags do not store analytics or advertising cookies. If Advanced Consent Mode is enabled, Google may still receive limited cookieless signals about the consent status, device, Website interaction and request environment for aggregated measurement and modelling. According to Google, these signals are not used to track individual users across websites, build remarketing lists or create individual advertising profiles.
Depending on the enabled Google settings and your consent, Google may process:
For users in the European Economic Area, Switzerland and the United Kingdom, Google Analytics does not log or store individual IP addresses. IP addresses are used to derive approximate location data and are discarded before the data is logged.
The Google Analytics cookies normally used after consent include:
| Cookie | Provider | Purpose | Default duration |
| _ga | Google Analytics | Distinguishes one visitor from another for statistical purposes | Up to 2 years |
| _ga_* | Google Analytics | Maintains session state | Up to 2 years |
Google Ads may use additional cookies or similar technologies after marketing consent. Their actual names, purposes and durations will be listed in the Cookie Policy generated from the Website’s active configuration.
Google Analytics user-level and event-level data is retained for 2 months. Aggregated reports may be retained for longer. Google Ads and consent-mode data are retained in accordance with the active account settings, the relevant processing purpose and Google’s applicable retention controls.
You may withdraw consent through the Website’s cookie settings. You may also use the Google Analytics Opt-out Browser Add-on. For more information, see Google’s Privacy Policy.
We use Google reCAPTCHA to protect Website forms against spam, automated submissions and abuse. reCAPTCHA analyses technical and interaction information to determine whether a form submission is likely to have been made by a person or automated software.
This information may include IP address, device and browser information, Website interactions, date and time, and other signals required to assess abuse risk. We use reCAPTCHA on the basis of our legitimate interest in securing the Website and its forms. If the implemented version uses non-essential storage or technologies requiring consent, they will be controlled through Complianz and described in the Cookie Policy.
Google states that data collected for reCAPTCHA operation and security is not used for personalised advertising. More information is available in Google’s Privacy Policy and applicable reCAPTCHA terms.
Access to personal data is limited to persons who need it for the purposes described in this Privacy Policy. We may disclose personal data to:
The Website’s server infrastructure is located in Estonia. The Website domain is registered through Zone Media OÜ. Service providers process personal data only for agreed purposes and are required to protect it appropriately. We do not sell personal data.
Some service providers or their subprocessors may process personal data outside the European Economic Area. This may occur in connection with Google services, Pipedrive, CallGear or other technical service providers.
Where processing involves an international transfer of personal data, we use safeguards required by Chapter V of the GDPR, such as an adequacy decision adopted by the European Commission, approved Standard Contractual Clauses or another lawful transfer mechanism, together with supplementary safeguards where appropriate.
You may contact us at [email protected] for more information about the safeguards applicable to a particular transfer.
We retain personal data only for as long as necessary for the purposes for which it was collected, including compliance with legal, accounting and reporting requirements and the establishment, exercise or defence of legal claims. The retention period is determined by the nature of the data, the status of the enquiry or relationship, applicable limitation periods, legal obligations and relevant system settings.
When personal data is no longer required, we delete it or anonymise it so that it can no longer be linked to an identifiable person.
Subject to the conditions and limitations set out in applicable law, you have the right to:
You have an absolute right to object at any time to the processing of your personal data for direct marketing.
We do not use personal data collected through the Website, contact forms, email or telephone calls to make decisions based solely on automated processing that produce legal or similarly significant effects.
To exercise your rights, email [email protected]. We may ask for information needed to verify your identity. We will respond within the period required by the GDPR, normally within one month.
You may lodge a complaint with the supervisory authority in the country where you live or work, or where you believe an infringement occurred. As Viravix Group OÜ is established in Estonia, you may also contact:
Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon)
Tatari 39, 10134 Tallinn, Estonia
Email: [email protected]
Website: https://www.aki.ee/en
We encourage you to contact us first so that we can try to resolve your concern.
We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Access to email, CRM data and call recordings is restricted according to business need.
No method of transmission or storage is completely secure. If you believe that your interaction with us is no longer secure, please notify us promptly at [email protected].
The Website may contain links to third-party websites. We do not control those websites and are not responsible for their privacy practices. We recommend reviewing the privacy policy of each third-party website you visit.
We may update this Privacy Policy when the Website, services, providers, technology settings or legal obligations change. The current version will be published on this page, and the “Last updated” date will show when it was most recently revised. If changes materially affect how we process personal data, we will provide an additional notice where required by law.
For questions, requests or complaints concerning this Privacy Policy or our processing of personal data, contact:
Viravix Group OÜ / CIP Experts
Joala tn 9-20, 20103 Narva, Estonia
Email: [email protected]
Telephone: Estonia: +372 880 7560 · Poland: +48 732 084 994 · Ukraine: +380 44 358 18 40
Thank you for your request!
Our team will contact you soon to discuss your project and the next steps.
Request Sent
Thank you for contacting CIP Experts. Our manager will contact you within one business day.
