Version: v1.0 Last updated: 29 August 2026
This Policy explains how DBC1 sp. z o.o. uses cookies and similar technologies. It should be read together with our Privacy Policy.
| Property | What we use |
|---|---|
| dbc1.com - our marketing website, including the pages carrying our legal documents | Strictly necessary and, with your consent, analytics and advertising cookies |
| The DBC1 platform (administration interface and mobile applications) | Strictly necessary cookies and local storage only |
| card.dbc1.com and customer-branded card pages | See Section 5 |
| forms.dbc1.com - our contact and request forms | Strictly necessary cookies only. The pages are served on our behalf by our forms provider, within the European Economic Area |
| status.dbc1.com - our service status page | See Section 6 |
Cookies are small text files placed on your device when you visit a website. Similar technologies include local storage, session storage and pixel tags, which work in comparable ways. In this Policy, "cookies" covers all of them.
Cookies set by us are first-party. Cookies set by another organisation whose content or service appears on our site are third-party.
These are required for the site or platform to work. They cannot be switched off, and we do not ask for consent to use them, because they are necessary to provide a service you have requested.
| Purpose | Type | Retention |
|---|---|---|
| Maintaining your session while signed in | First-party | Session |
| Authentication and sign-in state | First-party | 30 days |
| Recording your cookie preferences | First-party | 12 months |
| Load balancing and routing requests | First-party | Session |
| Protection against cross-site request forgery | First-party | Session |
These help us understand how our marketing website is used, so we can improve it. We only set them if you consent.
| Purpose | Set by | Retention |
|---|---|---|
| Measuring page views, sessions and navigation paths | Google Analytics 4 | 14 months |
| Distinguishing one visit from another so sessions can be counted | Google Analytics 4 | 14 months |
Google Analytics processes this data in the United States. IP addresses are truncated before storage, and we do not enable advertising personalisation or cross-device profiling within it.
These let us measure which campaigns bring people to us, and show our advertising to people who have visited. We only set them if you consent.
| Purpose | Set by | Retention |
|---|---|---|
| Measuring which campaigns lead to visits and enquiries | LinkedIn Insight Tag | Up to 6 months |
| Building audiences so our advertising can be shown to people who have visited | LinkedIn Insight Tag | Up to 6 months |
LinkedIn processes this data as an independent controller for its own advertising purposes as well as ours. Their handling of it is governed by their own privacy policy, and you can opt out of LinkedIn's advertising in your LinkedIn settings whether or not you accept our cookies.
These cookies are on our marketing website only, and that includes the pages carrying our legal documents. We considered excluding those pages and decided against it: an exception that has to be remembered at every site update is one that quietly stops being true. A single rule we can state accurately is worth more than a narrower one we cannot maintain.
They are not on our platform, our card pages, our forms domain or our trust centre. Those carry no analytics and no advertising cookies of any kind.
On our website. When you first visit, you are asked whether you accept non-essential cookies. You can accept all, reject all, or choose by category. Rejecting non-essential cookies does not limit access to any part of the site.
You can change your choice at any time using the Cookie settings link in the footer of every page.
In your browser. You can block or delete cookies through your browser settings. Blocking strictly necessary cookies may prevent parts of the site or platform from working.
Do Not Track. Browsers send this signal inconsistently and there is no agreed standard for responding to it, so we do not rely on it. Use the controls above instead.
Pages served at card.dbc1.com, and equivalent pages served under a customer's own domain, are designed to work without setting cookies for analytics, advertising or tracking.
When someone taps or scans a card, we record the event so that the cardholder's organisation can see how often their cards are used. That record includes the time, the type of device, and the country the scan came from, derived from the IP address. Location is not resolved below country level. It is not linked to a cookie and is not used to recognise the same person across other websites.
The organisation that issued the card decides what is done with that information. If you have questions about it, contact that organisation. See our Cardholder Privacy Notice for more.
A card page may link to other websites. Those websites set their own cookies, which we do not control.
Where we embed a third-party service - for example a scheduling tool, a form, or a support widget - that provider may set its own cookies. We only embed services that are necessary for the function concerned, and each is identified in the cookie table in Section 3.
We use strictly necessary cookies on the basis that they are required to provide a service you have requested. We use all other cookies only with your consent, under Article 173 of the Polish Telecommunications Law and Article 6(1)(a) GDPR. You can withdraw consent at any time; this does not affect anything done before withdrawal.
We may update this Policy. The current version and its date are shown at the top. Where we introduce a new category of cookie, we will ask for consent again.
Questions about this Policy: dpo@dbc1.com