The challenge
GBS® runs marketing across multiple brands — newsletter signups, contests, discount-code drops — and on top of that maintains a B2B data exchange with partners that swap registry information (NIP / REGON lookups, consent state, audit). Consent records lived across multiple databases, brand-specific tooling and ad-hoc inboxes. Every GDPR audit was a manual fire drill, and adding a new brand or partner took weeks of plumbing.
What we built
A custom Consent Management Platform that owns the full consent lifecycle for GBS® — across every brand, every marketing action, and the B2B integration surface. Marketing teams configure actions (signups, contests, promos) with per-action verification (email, SMS, or both), and end-customers go through one branded redemption flow that lands consents in a single audit log. For B2B partners the platform exposes a documented OpenAPI surface plus outbound webhook sync, so consent state and revocations propagate without manual exports.
-
Multi-brand action engine — newsletter, contests and code drops configured per brand, with per-action email and SMS verification.
-
Customer-facing redemption flow with dynamic discount-code dispensing and brand-aware theming.
-
Discount-code distribution API — the same dispensing engine is exposed to GBS's own systems, so any custom marketing flow can issue codes through the platform, not just the built-in page.
-
B2B partner surface — a published OpenAPI reference plus outbound webhooks so revocations and registry data flow to partners automatically.
-
Polish company registry (BIR) lookup so B2B partners are validated by NIP/REGON at signup, not by hand.
-
Per-event audit log — every consent grant, withdrawal and partner sync written as a versioned event, queryable for GDPR responses.
Outcome
Onboarding a new brand or B2B partner is a config change now, not a sprint. Every consent is traceable to its action, channel and version, and GDPR audit responses dropped from days to minutes. Marketing teams ship campaigns without waiting on legal, and partners self-serve their integration against the published API.