Privacy Policy

Last updated: June 9, 2026

1. Data Controller

The controller of your personal data is VIABILITY Sp. z o.o., with its registered office in Wroclaw, ul. Krupnicza 2/4, 50-075 Wroclaw, Poland, entered in the National Court Register (KRS) under number KRS 0000525760, VAT ID (NIP) 5213679828, REGON 147453354.

2. What Data We Collect

When using the viability.pl website, we may collect the following data:

  • Email address (contact form)
  • Phone number (contact form, optional)
  • Company VAT ID (contact form, optional)
  • Technical data: IP address, browser type, operating system, visit time (cookies and analytics tools)
  • Information about the organization visiting the website: company name, industry, location, organization size - determined automatically based on the IP address by a B2B visitor identification tool (Snitcher). This data relates to the company, not to a specific natural person.
  • Pseudonymous marketing identifiers (_fbp and _fbc cookies) and information about your behavior on the site (pages visited, clicks on selected CTA buttons) - transferred to Meta Platforms Ireland Ltd. via Meta Pixel, only after you grant marketing consent in the cookie banner. Used to measure advertising campaign effectiveness and for remarketing on Meta services (Facebook, Instagram).
  • Pseudonymous LinkedIn marketing identifiers (li_sugr, bcookie, lidc, UserMatchHistory, li_gc cookies) and information about your visit (pages visited, IP address, browser/device data) - transferred to LinkedIn Ireland Unlimited Company via the LinkedIn Insight Tag, only after you grant marketing consent in the cookie banner. Used to measure conversions and for remarketing on LinkedIn.
  • Backup Readiness Score (BRS) assessment data: your email address and the answers you provide (without a company name), processed to prepare and send the assessment report - see section 6.

3. Purpose of Data Processing

We process your personal data for the following purposes:

  • Responding to inquiries and scheduling expert consultations (Art. 6(1)(a) GDPR - consent)
  • Delivery of services and business communication (Art. 6(1)(b) GDPR - contract)
  • Analytics and website improvement (Art. 6(1)(f) GDPR - legitimate interest)
  • Direct marketing with your consent (Art. 6(1)(a) GDPR)
  • Preparing and delivering the Backup Readiness Score assessment report and the discount voucher (Art. 6(1)(b) and (f) GDPR - actions at the data subject's request and legitimate interest)

4. Data Processors

To provide our services and operate the website, we use the services of the following third parties who may process your personal data:

Entity Processing Purpose Website
Google LLC / Google Ireland Ltd. Managing analytics and marketing tags on the website (Google Tag Manager), website traffic analytics and visitor behavior analysis (Google Analytics 4) google.com
Meta Platforms Ireland Ltd. Measuring advertising campaign effectiveness, remarketing and ad optimization on Meta services (Facebook, Instagram) via Meta Pixel. Data may be transferred to Meta Platforms, Inc. in the USA on the basis of Standard Contractual Clauses (EU Commission Implementing Decision 2021/914) and the Data Privacy Framework. facebook.com/business
LinkedIn Ireland Unlimited Company Measuring advertising campaign effectiveness (conversion tracking) and remarketing on LinkedIn via the LinkedIn Insight Tag. Data may be transferred to LinkedIn Corporation in the USA on the basis of Standard Contractual Clauses (EU Commission Implementing Decision 2021/914) and the Data Privacy Framework (Microsoft/LinkedIn certification). linkedin.com
MailerLite Contact form handling, email communication, marketing automation mailerlite.com
Intercom Customer communication, live chat, ticket management intercom.com
Snitcher B.V. B2B visitor identification - matching IP addresses to company data, business traffic analytics snitcher.com

Each of the above entities processes personal data on the basis of appropriate data processing agreements and in compliance with applicable data protection regulations, including the GDPR.

5. Cookies and Visitor Identification

The viability.pl website uses cookies to ensure proper functioning of the site and to collect analytical data.

  • Essential cookies - ensure proper website functionality (e.g., remembering dark/light theme preferences, cookie consent)
  • Analytical cookies - help us understand how users interact with the website (Google Analytics 4 managed via Google Tag Manager). Installed only after analytical consent is given.
  • Marketing cookies (Meta Pixel) - the website uses Meta Pixel (Facebook Pixel) to measure the effectiveness of advertising campaigns on Meta services (Facebook, Instagram), to build custom audiences, and to remarket to people who have visited our site. Meta Pixel sets _fbp and _fbc cookies and transmits events such as PageView to Meta. Installed only after marketing consent is given in the cookie banner. Legal basis: Art. 6(1)(a) GDPR (consent).
  • Marketing cookies (LinkedIn Insight Tag) - the website uses the LinkedIn Insight Tag to measure the effectiveness of advertising campaigns on LinkedIn, to track conversions, and to remarket to people who have visited our site. The tool sets cookies (including li_sugr, bcookie, lidc, UserMatchHistory) and transmits visit data (IP address, pages visited, browser data) to LinkedIn. Installed only after marketing consent is given in the cookie banner. Legal basis: Art. 6(1)(a) GDPR (consent).
  • B2B identification (Snitcher) - the website uses the Snitcher tool to identify organizations (companies) visiting the site based on their public IP address. Snitcher matches the IP address against publicly available company databases and provides us with information about the organization (name, industry, location, size). We do not identify specific natural persons in this way, and the technical data (IP address) is processed on the basis of our legitimate interest (Art. 6(1)(f) GDPR), namely the analysis of business traffic and B2B marketing.

You can change your cookie settings in your browser at any time or withdraw your consent by clicking the "Cookies" link in the page footer.

If you do not want Meta or LinkedIn to receive information about your visit, the following options are available:

  • do not grant marketing consent in the cookie banner (or withdraw it at any time),
  • disable personalized ads in your Facebook/Instagram account settings (Settings → Ad Settings),
  • disable ad personalization and tracking in your LinkedIn account settings (Settings & Privacy → Advertising data),
  • use the opt-out mechanism at youronlinechoices.eu,
  • install browser extensions that block tracking scripts (e.g., uBlock Origin, Privacy Badger, Ghostery).

If you do not wish your organization to be identified by the Snitcher tool, the following options are available:

  • use a VPN service that masks your organization's actual IP address,
  • use private/incognito mode in your browser combined with a VPN,
  • install browser extensions that block tracking scripts (e.g., uBlock Origin, Privacy Badger, Ghostery),
  • use the opt-out mechanism provided by Snitcher at snitcher.com/opt-out,
  • leave the website - if you do not agree to the processing of technical data described above, please refrain from using the viability.pl website.

6. Backup Readiness Score (BRS) Assessment

We provide a free self-assessment of backup system readiness (Backup Readiness Score). To receive the result report and a discount voucher, you provide an email address and answer the questions. We do not ask for your company name.

In connection with the BRS assessment, we process:

  • the email address you provide (to deliver the report and voucher),
  • the answers you give and the generated score, rating and recommendations,
  • the generated discount voucher code,
  • technical data (IP address, browser type) - to ensure security and prevent abuse (e.g. spam).

Legal bases and purposes:

  • preparing and delivering the report and voucher - Art. 6(1)(b) and (f) GDPR (actions at the data subject's request and the controller's legitimate interest);
  • maintaining anonymous comparative statistics (benchmarking of results) - Art. 6(1)(f) GDPR;
  • marketing (newsletter, cyber-resilience materials) - only if you tick a separate, voluntary consent (Art. 6(1)(a) GDPR), which you may withdraw at any time without affecting the lawfulness of earlier processing.

The report email is delivered using Microsoft mail services (Microsoft 365 / Microsoft Graph) acting as a processor. The detailed rules of the promotion and voucher are set out in the Backup Readiness Score Promotion Terms. The assessment result is indicative and does not replace a technical audit.

7. Your Rights

Under the GDPR, you have the following rights:

  • Right of access to your personal data
  • Right to rectification (correction) of data
  • Right to erasure ("right to be forgotten")
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent at any time

To exercise any of these rights, please contact us by writing to our registered office address or through the website contact form.

8. Data Retention Period

We retain your personal data for the period necessary to fulfill the purposes for which it was collected, and in the case of consent - until it is withdrawn. Analytical data is stored for a period of 26 months. Backup Readiness Score assessment data (your email address together with the answers and result) is retained for no longer than 24 months from completing the assessment, and in the case of marketing consent - until it is withdrawn; comparative statistics (benchmarking) are kept in anonymized form.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or disclosure.

10. Changes to the Privacy Policy

We reserve the right to amend this Privacy Policy. We will inform you of any significant changes through an appropriate notice on the website. The current version of the Privacy Policy is always available at this address.

11. Contact

For matters related to personal data protection, you can contact us at:

VIABILITY Sp. z o.o.
ul. Krupnicza 2/4
50-075 Wroclaw, Poland

tel. +48 71 880 88 01

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw, Poland.