Privacy Policy

This website is operated by FC Bayern München AG. The protection of your personally identifiable data is very important to us. In this privacy policy, you will find information about the handling of your personally identifiable data when you visit the FC Bayern Munich website.

1. Controller and data protection officer

The party responsible for the processing of personally identifiable data on this website is:

FC Bayern München AG, Säbener Straße 51-57, D-81547 Munich, Germany

Phone: +49 89 699 31-0
Fax: +49 89 64 41 65
Email service@fcbayern.com

If you have any questions regarding data protection, you can also contact our data protection officer at datenschutz@fcbayern.com at any time.

2. Collection and use of non-personally identifiable data when using the site

If you use this website without transmitting data to us in any other way (e.g. by registration), we only collect technically necessary data that is automatically transmitted to our server by your browser (e.g. browser type/version, operating system used, referrer URL, pages accessed, length of visit, IP address, date and time of request) or that is required by technically necessary or functional cookies.

As far as personally identifiable data is concerned, we process this on the basis of our legitimate interest in providing you with a functioning, secure website (Art. 6(1)(f) GDPR). There is no merging of data with other data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of illegal use of our website.

More information about cookies and website tracking can be found here.

3. Collection and use of personally identifiable data

a) Registration (myFCB)

When you register on myFCB, we process the following personally identifiable data relating to you: Place of residence, language of communication, email, password for your login and other information that you voluntarily provide to us, e.g. name, date of birth, information about your favourite player and newsletter preferences.

When you use myFCB, we also process the following information which you make available to us in the registered area at myFCB or which arises during your use. This includes, for example, information about your address, telephone numbers or account or credit card information, information about your membership with FC Bayern München eV, the Kids Club, the Fan Club, the purchase of tickets or products in the Fan Shop, subscriptions to FC Bayern.TV Plus as well as top-ups of your Arena Card. You can always view and change the specific data under myFCB.

We process this data in order to offer you the myFCB area, in particular to provide you with exclusive and personalised content, easy participation in competitions and easy access to offers and services.

We process your personally identifiable data until you have deleted your myFCB account and as long as it is necessary for the fulfilment of mutual obligations in connection with myFCB. In addition, we store your personally identifiable data only for the assertion of or defence against legal claims or as long as legal obligations to store exist.

For IT security purposes, we also process technical information regarding your use of myFCB, such as your IP address and the time you logged on to myFCB. We delete this information 18 months after the respective registration on myFCB.

b) Ticket/fan article purchase and other contractual relationships

We only process personally identifiable data (e.g. name, delivery and billing address, email, content of an order, price) if you have provided it to us in the context of a registration, order of products and services or enquiries, and only insofar as this is necessary for the establishment, execution or termination of the legal relationship.

To purchase certain tickets (e.g. arena tours) you will be redirected to the offers of our partners. Please also note the corresponding data protection information of our partners.

We process your personally identifiable data only as long as it is necessary for the fulfilment of the contract and for the fulfilment of mutual obligations. In addition, we store your personally identifiable data only for the assertion of or defence against legal claims or as long as legal obligations to store exist.

c) Website optimisation without cookies

In order to present the website and its functions to you in an optimal and user-friendly manner, we use various service providers who support us in delivering pictures, graphics and videos (please also note our additional information on videos under section 6) on the website, conducting surveys or finding hashtags about FC Bayern on the Internet (“Website Optimisation Services").

For this purpose, we process your IP address, your name, answers to surveys, your browser type and your social media posts, depending on the function and information you publish (e.g. on social media).

We provide these Website Optimisation Services on the basis of our legitimate interest in providing you with a functioning, secure and informative website (Art. 6 (1)(f) GDPR).

If your consent (Art. 6(1)(a) GDPR) is required, e.g. if we reproduce photos with personal images from social media on our website, we will obtain this separately from you in advance. You can revoke your consent at any time with effect for the future by sending us a message. The lawfulness of the data processing carried out by us before revocation remains unaffected.

Your personally identifiable data will only be processed as long as this is necessary to provide you with the respective website functions.

Newsletter service

If you wish, we can process your personally identifiable data to provide you with information on current events and attractive offers from FC Bayern München (FC Bayern München AG, FC Bayern München Fanshop AG & Co. KG, FC Bayern München Service AG & Co. KG, FC Bayern Munich LLC, FC Bayern Munich Shanghai Co. Ltd, FC Bayern Tours GmbH, Allianz Arena München Stadion GmbH, FC Bayern München eV, FC Bayern München Basketball GmbH) and its official partners, which you can find on the website. If you subscribe to the newsletter, we process your email address and information to send the newsletter to you.

Subscription to the newsletter is only possible with your consent. The legal basis for the processing is Art. 6(1)(a) GDPR (consent). You can unsubscribe from a newsletter at any time via the link at the end of the newsletter or directly via your user profile in myFCB.

We process your personally identifiable data for these purposes as long as you show an interest in our newsletters or until you revoke your consent. In addition, we store your personally identifiable data only for the assertion of or defence against legal claims or as long as legal obligations to store exist.

d) WhatsApp messenger service

We offer a WhatsApp messenger service to keep you up to date on your chosen topics. We will send messages via our WhatsApp account to the WhatsApp phone number you provided.

When you sign up for our WhatsApp messenger service, we process the following personal information about you to send messages as part of our WhatsApp messenger service: Surname and first name, telephone number (mobile), your and our messages sent in connection with the Service, and usage data for communication (date, time of messages). . Your consent is the legal basis for the processing (Art. 6(1)(a) GDPR). You declare your consent by sending a start message to our WhatsApp number. An existing messaging account with WhatsApp is required to use this service.

The WhatsApp messenger service is intended for users who are at least 16 years of age or whose legal guardians have consented. By registering, you confirm that you meet this requirement.

We will send you messages via the WhatsApp messenger service of WhatsApp Ireland Limited (for users in the EU) or WhatsApp, Inc. (for other users). For more information about WhatsApp's processing of your personal information, please see WhatsApp's privacy policy, available at https://www.whatsapp.com/legal/#privacy-policy. WhatsApp, Inc. is certified under the EU-USA Privacy Shield. Further information can be found here: https://www.privacyshield.gov/…0000TSnwAAG&status=Active. EU-US Privacy Shield is a mechanism accepted by the EU to transfer personally identifiable data from Europe to the USA.

To provide this service, we use the technical service provider Messenger People GmbH, Herzog-Heinrich-Str. 9, 80336 Munich, as the processor. This service allows us to send WhatsApp messages to multiple recipients without having to form a WhatsApp group. Users of our WhatsApp Messenger service will not see who the other participants of the WhatsApp Messenger service are.

You may revoke your subscription to our WhatsApp Messenger Service at any time with effect for the future, e.g. by sending us a WhatsApp message with the content "STOP". The lawfulness of messages sent by us via the WhatsApp messenger service before revocation remains unaffected.

In addition, to have any information we hold about your registration and use of our WhatsApp messenger service removed, please send us a WhatsApp message saying “ALLE DATEN LOESCHEN” (“DELETE ALL DATA”) through WhatsApp. We will then only store your data if we are legally obliged to do so.

e) Product recommendations by email

As a customer of our online offer, you will regularly receive product recommendations from us by email. You will receive these product recommendations from us regardless of whether you have subscribed to a newsletter or not. We will use the email address you provide during the purchase process to promote our own goods and/or services similar to those you have purchased from us based on an order you have already placed.

The processing of your personally identifiable data for this purpose takes place on the basis of our legitimate interest in direct advertising to existing customers (Art. 6(1)(f) GDPR). You may object to this product recommendation at any time by writing to FC Bayern München AG, Säbener Str. 51-57, 81547 Munich, Germany, using the link at the end of this product recommendation or by writing to datenschutz@fcbayern.com.

We process your personally identifiable data for this purpose as long as you show an interest in our products or until you object to receiving product recommendations. In addition, we store your personally identifiable data only for the assertion of or defence against legal claims or as long as legal obligations to store exist.

f) Flyers, catalogues and all advertising delivered by post

We process your name, your address data and your interest in FC Bayern for marketing purposes if we are convinced that we have attractive offers ready for you.

The processing of your personally identifiable data for this purpose takes place on the basis of our legitimate interest in advertising by post (Art. 6(1)(f) GDPR). You can object to the receipt of such direct advertising at any time by sending a written message to FC Bayern München AG, Säbener Str. 51-57, 81547 Munich or by email to service@fcbayern.de. Upon receipt of your objection, we will immediately cease sending you marketing information and will not pass the data on to third parties for marketing purposes.

g) Contact form

On our website you can enter personally identifiable data via a contact form. If you use the contact form, we process the data you enter in the input mask (e.g. surname, first name, email address, message, time of request and server log data).

The legal basis for the processing is Art. 6(1)(b) GDPR (contract fulfilment).
We use the data exclusively in order to process and answer your enquiry.

We only process the personally identifiable data you provide us to contact you until we have conclusively answered your enquiry. In addition, we store your personally identifiable data only for the assertion of or defence against legal claims or as long as legal obligations to store exist.

h) Special campaigns with partners

From time to time, we conduct special campaigns together with certain business partners, during which you can also take advantage of attractive offers from our partners ("special campaigns"). In order to carry out these campaigns, it may be necessary for us to process your personal data and pass it on to our partners. We will inform you about the details, in particular the identity of the respective partner and the processed personal data (e.g. name, address, e-mail address), in each case in connection with your participation in the special campaign.

The processing of your personal data, including the transmission of your personal data to the respective partner, will only take place with your consent. The legal basis for the processing is Art. 6 para. 1 lit. a DSGVO (consent). Our partners will then process your personal data on receipt under their own responsibility. Please therefore also note the corresponding data protection information of our partners.

We will only process the personal data you provide us to contact you as long as this is necessary to enable you to participate in the special campaign. In addition, we store personal data only to assert or defend against legal claims or as long as there are legal obligations to store.

4. Cookies and website tracking

a) What are cookies and website tracking?

Some of our online services require us to use cookies or other tracking technologies ("cookies"). In this way, information about your visit to our website can be stored. This data enables us to improve our website and to display advertising on the site that is specifically tailored to your interests.

b) Legal basis for the processing of personally identifiable data in connection with cookies

Only with your consent (Art. 6(1)(a) GDPR) do we process personally identifiable data, such as information on plug-ins used, browser, length of stay, language used, etc., for marketing, analysis and optimisation purposes and for the design of the website to meet our customers’ needs. From this data, user profiles and target group segments can be created under a pseudonym (i.e. not associated with your real name, but with a number), which are used for targeted marketing or information campaigns. We receive your consent via your corresponding consent in the cookie banner on our website. Our cookie consent solution is also integrated in our cookie banner. There you can select separately for each individual cookie whether the cookie is to be enabled or remain deactivated.

We process personally identifiable data collected using other technologies, e.g. mandatory or functionality cookies, on the basis of our legitimate interest in providing you with a functioning, secure website (Art. 6(1)(f) GDPR).

A list of the cookies we use can be found here.

c) Possibilities of opposing the use of cookies

Below you will find information on the options for deactivating cookies.

Browser settings

Most browsers are set by default to accept cookies, but you can reconfigure your browser so that it rejects cookies or asks you to confirm them beforehand. The help function in the menu bar of most web browsers explains how you can prevent your browser from accepting new cookies, how you can have your browser notify you when you receive a new cookie, or how you can delete all cookies that have already been received and block the browser for all further cookies.

However, if you refuse cookies, some of our services (and those of other websites) may not be available and so some functions cannot be used. Cookies must also be activated in order to be able to object to the use of programs/uses by setting an opt-out cookie.

Cookie consent solution via our cookie tool

You can also use our cookie consent solution below at any time to accept or reject individual cookies separately by placing a green tick next to the cookie or removing it and clicking on "Save settings".

Cookie consent solution

Opt-out via http://www.youronlinechoices.com

You can also object to cookies via the respective links in the cookie list or centrally at http://www.youronlinechoices.com. The respective cookie will then no longer collect any data about your future visits to our and other websites. In addition, this prevents the respective cookie from being created again. Please note, however, that this objection sets an opt-out cookie on your device. You may not delete this. If you have deleted all your cookies in your browser, you must set the respective opt-out cookie again using the above link. The objection applies only to the device and web browser on which it was placed. Please repeat the procedure on all devices if necessary.

5. Integration of social plugins

On our website we provide social plugins of the social networks Facebook, Twitter and WhatsApp. These are offers from the US company Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA), Twitter Inc. (1355 Market Street, Suite 900, San Francisco CA 94103) and WhatsApp Inc. (650 Castro Street, Suite 120-219, Mountain View, California 94041). You can recognise the plugins by the respective logos of the companies. You can use these plugins to like, share or otherwise be active directly on the respective network.

Before you click on the Facebook, Twitter and WhatsApp buttons, only the server address is sent to Facebook, Twitter and WhatsApp instead of your IP address using the data protection-friendly alternative used (Shariff button). As long as you do not click on the link to share content, it remains invisible to the operators of the respective social network.

We use this data protection-friendly alternative (Shariff button) to prevent social networks from tracking and storing Internet behaviour without the active contribution of the user. Further information on the solution used can be found under the following link: http://www.heise.de/ct/ausgabe…nform-nutzen-2463330.html

By using the social plugin, you agree to the transfer of your personally identifiable data to the respective network. Specifically, information about which of our Internet pages you have visited and your IP address are then transmitted to the social network, even if you do not have a profile with the respective network or are not logged in there at the time. If you are logged in as a member of the social networks, the network assigns the information to your personal user account.

For more information about Facebook's processing of your personally identifiable data, please refer to the Facebook privacy policy at: https://de-de.facebook.com/policy.php

For more information about the processing of your personally identifiable data by Twitter, please refer to the Twitter privacy policy at: https://twitter.com/de/privacy

For more information about the processing of your personally identifiable data by WhatsApp, please refer to WhatsApp's Privacy policy at: https://www.whatsapp.com/legal/?eea=1#privacy-policy

6. Videos

Some of the videos on our website are embedded on YouTube (part of Google Inc., based in San Bruno, California, USA) and Vimeo (Vimeo LLC, based in New York City, USA). This means that the video will be played directly on YouTube.com or on vimeo.com, but will be displayed on our site.

Vimeo: Cookies are set by Vimeo which are used to transmit your personally identifiable data to Vimeo when you log in to Vimeo via your PC. This is necessary to allow you to save the videos in your "Watch later" playlist in order to watch them at a later time. You can prevent such data transmission by logging out of Vimeo. The cookies are used on the basis of your consent (Art. 6(1)(a) GDPR).

For more information about the processing of your personally identifiable data by Vimeo, please refer to Vimeo's privacy policy at: https://vimeo.com/privacy.

YouTube: We have integrated the YouTube videos via the YouTube "nocookie" solution. This causes a connection to the YouTube servers to be established only when you click on a video. Only then will your personally identifiable data be transmitted to YouTube. You can prevent transmission to YouTube by logging out of your YouTube account.

For more information about the processing of your personally identifiable data by YouTube, please refer to YouTube's privacy policy at: https://policies.google.com/privacy?hl=de&gl=de.

7. Data transfer

Insofar as we pass on your personal data specifically within the framework of the data processing described above, we have described this accordingly at the respective point in this data protection declaration. In addition, we pass on your personal data in general as follows:

a) Processors

All personally identifiable data that we process within the framework of this website is processed by us or our service providers. If necessary, we transmit your personally identifiable data to external service providers, such as IT and website optimisation service providers, advertising agencies or analysis providers, in order to be able to offer you our services. We have carefully selected these service providers and concluded order processing agreements with them.

b) Third parties (so-called transfer recipients)

Contractual partners

We pass on your personally identifiable data to other controllers who process the personally identifiable data for their own purposes, insofar as this is necessary for the execution of the contract or the provision of services, e.g. within the scope of the order to the forwarding agent or the parcel delivery service or in connection with your membership in FC Bayern München e.V. or in connection with ticket purchases for FC Bayern München Basketball GmbH. Our contractual partners may use the data transmitted in this way exclusively for the purpose for which we transmitted it.

The transmission of your personally identifiable data for these purposes takes place for the fulfilment of the contract (Art. 6(1)(b) GDPR), or on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in making our business efficient.

Credit assessment

In justified cases (e.g. direct debit procedures), we exchange address and creditworthiness data with credit service companies for the purpose of a credit assessment. The service providers only receive access to such personally identifiable data as necessary for the performance of the respective activity. The legal basis is Art. 6(1)(f) GDPR (legitimate interest).

Legal obligation or enforcement of legal claims

Otherwise, we will only disclose your personal information to third parties if and to the extent required or permitted by law, to enforce legal rights, or to investigate or prevent suspected or actual illegal activity. In these cases, we will inform you separately about the respective transmission if and to the extent legally required.

Website service provider

Some functionalities on our website require the service providers to process your personally identifiable data on their own responsibility (e.g. for social media interactions; see also the information on social plug-ins under section 5 and for some website optimisation services under section 2). Our contractual partners may only use the data thus transmitted for the purpose for which we have transmitted it.

The transmission of your personally identifiable data for these purposes takes place on the basis of your consent or our legitimate interest in providing you with the respective functionality.

Transfer to third countries

If we transfer your personally identifiable data to countries outside the European Economic Area (EEA) or commission processors in such countries (for example in the USA), we implement the standards and security mechanisms required by law. We achieve this, for example, by using service providers that are Privacy Shield-certified or by agreeing the so-called EU standard contracts. Please contact us as described in section 1 to learn more about the specific security mechanisms we use.

8. Secure data transfer

All personally identifiable data that you transmit to us during the surfing process in general and during the ordering process in particular are transmitted in encrypted form. We establish a so-called SSL connection for each transaction. SSL (Secure Socket Layer) is a procedure in which your data is encrypted in such a way that it cannot be read by unauthorised persons during transmission on the Internet.

You can recognise the SSL connection by the fact that the Internet address has changed from http:// to https://. In addition, the secure connection is usually indicated by a closed padlock in the status bar of your web browser.

9. Your rights

You have the following legal rights against FC Bayern München AG with regard to your personally identifiable data, provided that the respective requirements are met. You can find further information on your rights and the relevant requirements on the EU Commission's website at https://ec.europa.eu/info/law/…reform/rights-citizens_de.

a) Right to information

As a data subject, you have the right to request confirmation as to whether we process personally identifiable data that concerns you. If this is the case, you have the right to information about this personally identifiable data, as well as other information, e.g. the processing purposes, the recipients and the planned duration of storage or the criteria for determining the duration.

b) Right to rectification and completion

As a data subject, you have the right to demand the correction of incorrect personally identifiable data without delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personally identifiable data.

c) Right to erasure ("right to be forgotten")

As the person concerned, you may have the right to the erasure your personally identifiable data. For example, if your personally identifiable data is no longer necessary for its original purpose, you have revoked your privacy statement, or the personally identifiable data has been improperly processed.

d) Right to restriction of processing

As a data subject, you have the right to restrict the processing in the cases prescribed by law.

e) Right to data portability

As a data subject, you have the right, in the cases prescribed by law, to receive the personally identifiable data concerning you in a structured, common and machine-readable format.

f) Right of objection

As a data subject, you have the right to object at any time to the processing of certain personal data concerning you for any reason relating to your particular situation.

In the case of direct marketing, as the data subject, you have the right to object at any time to the processing of personally identifiable data concerning you for the purpose of such advertising, including profiling insofar as it is linked to such direct marketing.

g) Right to revoke your consent under data protection law

You may revoke your consent to the processing of your personal data at any time with effect for the future. However, the lawfulness of the processing carried out before the revocation is not affected.

h) Right of appeal to a data protection authority

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State in which you reside, your place of work or the place where the alleged infringement was committed, if you believe that the processing of your personally identifiable data violates the GDPR.

The responsible supervisory authority for FC Bayern München AG is the Bayerische Landesaufsicht für Datenschutz ( https://www.lda.bayern.de/de/kontakt.html).

10. Changes

Our privacy policy may change from time to time. This also includes further developments due to changes in our business and adjustments due to a changed legal situation and/or due to the implementation of new web analysis and/or retargeting technology. Any updates to the privacy policy will be published by us on this page. In the event of significant changes, we will point this out accordingly. If you have any further questions that our privacy policy could not answer, please send an email to the following address: datenschutz@fcbayern.com

Version: May 2019