Depending on the purpose for which the Bank collects cookies, a distinction is made between essential, always-on cookies and optional, i.e. requiring the user's consent, analytical and marketing cookies, including tracking technologies.

Essential cookies – are necessary to ensure proper operation of website (app) or to deliver services rendered by the Bank through electronic channels, as required by the user. They can be installed provided that the user expresses relevant consent by use of software setting on his or her device.

The Bank is using them for the following purposes:

• Ensuring security, including security of transactions or to detect abuse in the area of authentication within a website;
• Ensuring appropriate website display (depending on the type of device used);
• Supporting user session on applications, forms, questionnaires and in the transaction system (cookies are used to identify user session in Millenet). Such cookies help increase security by ensuring that all calls to server are originated on the Client's computer. Cookies and the IP address of the computer from which the user connects are validated on the server. In case of attempt to impersonate user's session from another computer, the session will be interrupted;
• Memorising user selected settings and user interface personalisation in terms of e.g. selected language or region of the user, font size, appearance of the website.

In mobile apps, the mobile device ID is used. Device ID is a series of numbers and letters that allows you to identify each mobile device (tablet, smartphone) and is stored in that device. Mobile device identifiers are used in mobile apps to ensure performance of many processes. Device ID is necessary for processes connected with: mobile app activation, authorisation of payment transactions, virtualisation of payment card and payment with use of mobile device, BLIK transactions and purchase of city transport tickets, adding and displaying loyalty cards in mobile app or configuration and displaying additions before login.

In addition, InstanceID is also used for purpose of device identification – it is an identifier generated in the process of registration/activation of mobile app. InstanceID of mobile app is valid until next activation of the app. The Bank also uses identifiers allowing login as well as communication with the device after login.

In mobile apps there are also cookies used, which are not used for analytics or marketing. Instead, they are used for the functions using Webview technology in the mobile app. This technology allows to display selected screens from websites inside the mobile app with help of mobile app interface. Cookies for hybrid processes are created by mobile app and their objective is to keep client identification / authorisation information to enable opening of a specific website with specific functionality without the need for user to log in again. These cookies are not saved in the phone after mobile app is switched off.

Analytical cookies – are used to ensure monitoring of the correct functioning of the Bank's website and to collect statistical information on its use, including:

• Collection of information on the way the Bank website is used i.e. collection of traffic statistics and its sources;
• Detection of various types of abuses, e.g. artificial web traffic generated by bots;
• Bank website improvement;
• Execution of settlements with business partners.

When using analytical cookies, we also take into account information obtained from so-called tracking technologies provided by external partners. A description of these technologies and how to use them can be found below.

• Google Analytics – Google Analytics technology collects basic information anonymously on user activities on the Bank's website and is used for reporting traffic sources and analysing user behaviour on the website. For more information go to the privacy policy of Google Ireland Limited link opens in a new window
• Partner pixels – on our website there are pixels, i.e. tracking codes of our business partners, which help us settle accounts for business cooperation.

Marketing cookies – used to analyse the results of marketing campaigns and profiling advertisements displayed on external websites and to improve products and services offered by the Bank.

The Bank uses them to profile advertisements displayed on external websites and on the Bank's website:

• Google advertising – our website contains tracking codes for measuring conversions, reporting advertising campaigns and events in Google Marketing Platform and Google Ads. Google’s cookies may be used for personalized advertising, e.g. to match our communication to a specific group of recipients. For more information see the privacy policy of Google Ireland Limited link opens in a new window
• Analysis using technologies similar to cookies – in order to better understand user behaviour and optimise the operation of websites, Bank Millennium may anonymously collect and process information about user activity on the Bank's websites, including forms, even if they have not been submitted. Thus, Bank Millennium may deliver to users of its websites better designed and intuitive solutions.

Mobile applications sometimes also use mobile device identifiers for marketing purposes, which are provided by the operating system of the mobile device and can be reset by the user. Typical ID of ad displays are AdID (Android) and IDFA Identity For Advertisers, iOS). The Bank does not use such identifiers in the Mobile Application. Detailed information on the use of identifiers and the rules for displaying advertisements in the Mobile Application can be found in "Mobile Application Privacy Policy".

Essential cookies do not require users' consent, but acceptance of optional cookies and other tracking technologies is voluntary. You can choose not to allow analytics or marketing cookies and tracking technologies to be installed. You can withdraw your consent at any time on the Cookie Policy page, as well as by using the Banner Cookies link in the footer of the website. Withdrawal of the consents granted does not affect the lawfulness of the processing of your data obtained by the Bank, which has already been made on the basis of these consents until their withdrawal.

By using the Bank Millennium website, you can opt out of the use of analytical and marketing cookies and other tracking technologies. This will not affect the basic functioning of the website. In some cases, the lack of consent to the use of analytical cookies may affect the optimization of the Bank's website. On the other hand, if you do not consent to marketing cookies, you may not receive the Bank's advertising tailored to your preferences. This means that the ads displayed on your device can be general, contextual (i.e. they will be displayed based on population – similar to how ads in magazines work) – both on the Bank's website and on other websites you visit.

Change relative to consent

• Analytics cookies and other tracking technologies

  I agree that Bank Millennium S.A. ("Bank") uses analytical cookies and tracking technologies saved on this device when I use the Bank Millennium website. I agree that the Bank will use them, i.a., to monitor the correctness of the operation of its websites, settle accounts for cooperation with partners and detect various types of abuse, e.g. artificial Internet traffic.

  You can withdraw your consent at any time by deleting cookies from your device or by using the consent change button below, as well as by using the Banner Cookies link in the footer of the website. Withdrawal of the consents granted does not affect the lawfulness of the processing of your data obtained by the Bank, which has already been made on the basis of these consents until their withdrawal.

• Marketing cookies and other tracking technologies

  I agree that Bank Millennium S.A. ("Bank") may use marketing cookies and tracking technologies stored on this device when I use the Bank's website. I, hereby, express my consent for the Bank to provide me with matching marketing information and show personalised products and services. In addition, the Bank may combine information collected on this basis with other data held by the Bank to prepare tailor-made offer of products and services.

  You can withdraw your consent at any time by deleting cookies from your device or by using the consent change button below, as well as by using the Banner Cookies link in the footer of the website. Withdrawal of the consents granted does not affect the lawfulness of the processing of your data obtained by the Bank, which has already been made on the basis of these consents until their withdrawal.