This website is operated by FC Bayern München AG (“FCB” or “we”). The protection of your personal data is very important to us. This policy provides information about how we handle your personal data when you visit the FC Bayern München website.
1. Data Controller and Data Protection Officer
The entity responsible for processing personal data on this website is:
FC Bayern München AG, Säbener Straße 51-57, D-81547 Munich
Phone: +49 89 699 31-0
Fax: +49 89 64 41 65
Email: service@fcbayern.com
If you have any questions regarding data protection, you can also contact our Data Protection Officer at datenschutz@fcbayern.com at any time.
2. Collection and Use of Non-Personal Data When Using the Website
If you use this website without otherwise transmitting data to us (e.g., by registering), we only collect technically necessary data that is automatically transmitted by your browser to our server(e.g., browser type/version, operating system used, referrer URL, pages visited, duration of visit, IP address, date and time of the request) or data required by technically necessary or functional cookies.
To the extent that this involves personal data, we process it on the basis of our legitimate interest in providing you with a functional andsecure website (Art. 6(1)(f) GDPR). This data is not combined with other data sources unless we expressly state otherwise elsewhere. We reserve the right to review this data retrospectively if we become aware of specific indications of unlawful use.
You can find more information about cookies and similar technologies
.
3. Collection and Use of Personal Data
a. Registration (myFCBAYERN)
When you register on myFCBAYERN, we process the following personal data: place of residence, language of communication, email address, your login password, and other information you voluntarily provide to us, such as your name, date of birth, information about your favorite player, and newsletter preferences.
When you use myFCBAYERN, we also process the following information that you provide to us in the registered area of myFCBAYERN or that is generated during your use. This includes, for example, information regarding your address, phone numbers, or account and credit card information, license plate numbers (parking authorization), information regarding your memberships with FC Bayern München e.V., the Kids Club, and the Fan Club, as well as information regarding the purchase of tickets or products in the Fan Shop or subscriptions to FC Bayern TV. You can always view and modify the specific data at myFCBAYERN.
We process this data to provide you with the myFCBAYERN area, in particular to offer you exclusive and personalized content, easy participation in contests, and easy access to offers and services (Art. 6(1)(b) GDPR).
We process your personal data until you have deleted your myFCBAYERN account and for as long as necessary to fulfill mutual obligations related to myFCBAYERN. In addition, we store your personal data only to assert or defend against legal claims or for as long as statutory retention obligations exist.
We also process technical information regarding your use of myFCBAYERN for IT security purposes, such as your IP address and the time of your login to myFCBAYERN.
We process this information based on our legitimate interest in providing you with a secure website (Art. 6(1)(f) GDPR). We delete this information 18 months after each login to myFCBAYERN.
b. Ticket/merchandise purchases and other contractual relationships
We process personal data (e.g., name, shipping and billing address, date of birth, email, order details, price) only if you have provided it to us in the context of registering, ordering products and services, or in response to inquiries, and only to the extent necessary for the establishment, performance, or termination of the legal relationship.
We process health data that you provide to us (e.g., your proof of severe disability) exclusively with your explicit consent (Art. 9(2)(a) GDPR) and only for the purposes specified in the respective consent (e.g., providing discounts on ticket purchases). We will provide you with further information when we obtain this consent from you.
To purchase certain tickets (e.g., arena tours), you will be redirected to our partners’ offers. Please also note the corresponding privacy notices on these partner websites.
We process your personal data only for as long as is necessary to fulfill the contract and to meet our mutual obligations. Furthermore, we store personal data only to assert or defend against legal claims or for as long as legal obligations to store such data exist.
c. Sale of Fan Merchandise to Customers Outside the EU/EEA
Without a myFCBAYERN login: If you have added fan merchandise to your shopping cart in our Global Store for delivery to an address outside the European Economic Area (EEA) and wish to complete your order, FCB will redirect you to the checkout page of our e-commerce partner Global-e NL B.V., Krijn Taconiskade 430, 1087 HW Amsterdam, Netherlands. Global-e will then become your contractual partner. FCB transmits data to Global-e regarding the products you wish to order (items in the shopping cart, quantity, price). FCB transmits this data to Global-e on the basis of Art. 6(1)(b) GDPR (necessity for the performance of pre-contractual measures with Global-e). Global-e is the independent controller responsible for processing the personal data you provide for the purpose of placing an order. For further information on the processing of personal data by Global-e, please refer to Global-e’s Privacy Policy, available at https://www.global-e.com/consumer-privacy-policy.
With myFCBAYERN login: If you have added fan merchandise to your shopping cart in our Global Store, wish to complete the order, and are logged into your myFCBAYERN account at the time, FCB will also transmit your name, email address, and billing and shipping addresses—which are stored in your myFCBAYERN account—to Global-e, so that Global-e can pre-fill the order form on the Global-e checkout page with this information. FCB transmits this data to Global-e based on the legitimate interest of simplifying the conclusion of the contract with Global-e (Art. 6(1)(f) GDPR). If you do not wish for FCB to transmit this data to Global-e, you must log out of myFCBAYERN during your purchase and shop as a guest.
After you have completed your order for fan merchandise on the Global-e order page, FCB processes the data related to your order (name, shipping address, email address, phone number, products ordered and quantity, price of the products ordered, order number, and time of order) so that FCB can transfer the ordered products to Global-e and Global-e can deliver the ordered products to you. If you return an item to FCB, we will inform Global-e of the return so that Global-e can refund you. The legal basis for this processing is Article 6(1)(b) of the GDPR (performance of a contract).
We process your personal data only for as long as necessary for the aforementioned purposes. In addition, we store personal data only to assert or defend against legal claims or for as long as statutory retention obligations exist.
d. Display of content on the website
To display the website and its key content—such as videos, images, or social media posts—in your web browser, we use various service providers and technologies. In certain cases, we may process specific personal data for this purpose. We do this to deliver content to your device, to thank you for participating in surveys, or to find hashtags from social media posts by FC Bayern fans on the internet and display the respective posts on the website. The legal basis for the processing is Art. 6(1)(b) GDPR (performance of a contract). In this context, your personal data will be processed only for as long as it is necessary to display the content. Furthermore, we store personal data only to assert or defend against legal claims or for as long as statutory retention obligations exist.
- Image/Graphics Delivery
Where necessary, we process information about your browser, operating system, and the URL you previously visited in order to deliver images and graphics optimally to your device and to ensure the stability of the website. The legal basis for this processing is Article 6(1)(b) of the GDPR (performance of a contract). Otherwise, images or graphics could not be displayed on the website. We process your personal data for this purpose only for as long as it is necessary to deliver the images and graphics to you. Furthermore, we store personal data only to assert or defend against legal claims or for as long as statutory retention obligations exist.
- Social Media Hashtags
We process certain social media posts you have tagged with an “FC Bayern Munich” hashtag (e.g., #fcb) based on our legitimate interest (Art. 6(1)(f) GDPR). Our legitimate interest here is to display posts from fans tagged with an FC Bayern Munich hashtag on our website and share them with other fans.
If people are depicted in your posts, we process the posts only with your prior consent (Art. 6(1)(a) GDPR), which you grant by posting with the corresponding hashtag. You may revoke your consent at any time with future effect by sending a message to us at datenschutz@fcbayern.com . The lawfulness of the data processing carried out by us prior to revocation remains unaffected.
We process your personal data only until the purposes mentioned above have been fulfilled. Furthermore, we store personal data only to assert or defend against legal claims or for as long as statutory retention obligations exist.Further information regarding the processing of your personal data in this context, particularly by social networks, can be found below in Section 5.
- Cookies
Information about the cookies and similar technologies we use on the website can be found below in Section 4 and
e. Email Newsletter Service
- Receiving the email newsletter
If you wish, we will process your personal data to send you regular emails containing the newsletters and marketing messages you have selected, with information on current events and attractive offers from FC Bayern Munich (FC Bayern Munich AG, FC Bayern Munich Global Commerce AG & Co. KG, FC Bayern Munich Service AG & Co. KG, FC Bayern Munich LLC, FC Bayern Munich Shanghai Co. Ltd, FC Bayern Tours GmbH, Allianz Arena München Stadion GmbH, FC Bayern München eV, FC Bayern München Basketball GmbH) and its official partners, which you can find here, (“Email Newsletters”).
When you subscribe to email newsletters, we process your email address and information necessary to send the email newsletters to you, as well as optional details regarding your country, language, title, name, date of birth, and favorite player. To verify your consent, we process the following data: the selected newsletter type, the time of registration, and technical data regarding the double opt-in procedure (“Email Newsletter Registration Data”).
Subscription to the email newsletter is only possible with your consent. The legal basis for processing is Art. 6(1)(a) GDPR. You can unsubscribe from an email newsletter at any time via the link at the end of the newsletter, by emailing feedback-newsletter@fcbayern.com, , or directly through your user account in myFCBAYERN, with future effect.
- Receiving the Business Email Newsletter
If you wish, we will process your personal data to send you regular emails containing information about exclusive insights, business events, and other services offered by FC Bayern München AG (“Business Email Newsletter”).
If you subscribe to the Business Email Newsletter, we process your email address and information necessary to send you the Business Email Newsletter, as well as the time of registration and technical data related to the double-opt-in process. In addition, we process your interactions with the Business Email Newsletter (e.g., opens, clicks on content and links) as well as professional information (e.g., company, position, industry) that you provide to us via FCB’s digital offerings or that we collect from publicly available sources (e.g., company websites, professional online networks). We combine this information to tailor the content of the Business Email Newsletter to your professional interests. In addition, we share relevant information about your professional interests and your email address with current FCB partners so that these partners can also send you messages about relevant business offers and events via email.
Subscription to the Business Email Newsletter, the processing of your interactions and professional information, and the sharing of your data with our partners are only possible with your consent. The legal basis for the processing is Art. 6(1)(a) GDPR. You may revoke your consent at any time via the link in the Business Email Newsletter, by emailing feedback-newsletter@fcbayern.com , or directly through your user account in myFCBAYERN, with future effect.
- Detecting Interest in the Email Newsletter
The email newsletter contains so-called “pixels.” This allows us to determine whether you have opened or clicked on the newsletter or not.
If we determine that you have not opened the email newsletter for an extended period of time, we assume that you are no longer interested in the email newsletter and will remove you from the distribution list. In this way, we do not process your data for an unnecessarily long time and maintain an up-to-date distribution list.
We process your data for this purpose based on our legitimate interest in using a user-friendly and secure newsletter system that meets users’ expectations (Art. 6(1)(f) GDPR).
- Newsletter Tracking
The email newsletter contains so-called “pixels.” When you access the email newsletter, we process technical information—such as details about your browser and system, as well as your IP address, the time the email newsletter was delivered, and your interactions with the email newsletter (opening, clicks on content and links) (collectively: “Email Newsletter Usage Data”). The information described in our cookie banner applies to the processing of your subsequent behavior on our website or in our app.
Your email newsletter usage data is processed to technically improve our email newsletter, to identify our users’ reading habits, and to tailor the content to you.
We process your email newsletter usage data based on the consent you provide to us when you subscribe to the email newsletter. The legal basis for the processing is Art. 6(1)(a) GDPR. You may revoke your consent to the processing of your email newsletter usage data, along with your consent to receive the email newsletter, at any time via the link at the end of the email newsletter, by emailing feedback-newsletter@fcbayern.com , or directly through your user account in myFCBAYERN, with future effect.
- Duration of processing
We process your personal data for these purposes (i) until you revoke your consent with future effect or (ii) as long as you continue to express an interest in our newsletters. In addition, we store personal data only to assert or defend against legal claims or for as long as statutory retention obligations exist.
f. WhatsApp Newsletter Service
If you wish, we will process your personal data to send you regular WhatsApp newsletters and marketing messages containing information about current events and attractive offers from FC Bayern Munich (FC Bayern München AG, FC Bayern München Global Commerce AG & Co. KG, FC Bayern München eV, FC Bayern München Basketball GmbH) and its official partners, which you can find here, (“WhatsApp Newsletter,” together with the email newsletter “Newsletter”).
- WhatsApp Newsletter Registration and Use
If you subscribe to the WhatsApp Newsletter, we process your phone number, your myFCBAYERN user ID (if you link it), the time of registration, and technical data regarding the double opt-in process (“WhatsApp Newsletter Registration Data” together with the email newsletter registration data, “Newsletter Registration Data”). If you have a myFCBAYERN account and link it to the WhatsApp newsletter service, we will also store your phone number in your myFCBAYERN account.
As part of your access to the newsletter, we also process technical information such as the time the newsletter was delivered and your interactions with the newsletter (opening, clicks on content and links, replies) (collectively: “WhatsApp Newsletter Usage Data” together with the email newsletter usage data, “Newsletter Usage Data”). We process your newsletter usage data to technically improve our newsletter, to identify your reading habits, and to tailor the WhatsApp newsletter content to you based on your WhatsApp interactions. If you have consented, we also personalize the WhatsApp newsletter based on information you have provided to us through myFCBAYERN (as described in Section 3.g.).
The data processing described here in connection with the WhatsApp newsletter is only possible with your consent. The legal basis for the processing is Art. 6(1)(a) GDPR. You can unsubscribe from the WhatsApp newsletter at any time by emailing datenschutz@fcbayern.com or directly through the preference center in your user account in myFCBAYERN, with future effect to stop the personalization. Alternatively, you can reply with “Stop” in the WhatsApp chat to withdraw your consent to the above-mentioned processing purposes with future effect. You can also manage your personalization settings with future effect via the preference center in your user account in myFCBAYERN without unsubscribing from the WhatsApp newsletter.
We process your personal data for the stated processing purposes until you revoke your consent with future effect. Furthermore, we store personal data only to assert or defend against legal claims or for as long as legal obligations to store such data exist.
- Detecting Interest in WhatsApp Newsletter Usage
If, based on your newsletter usage data, we determine that you have not interacted with the WhatsApp newsletter for an extended period of time—e.g., have not opened any links—we will assume that you are no longer interested in the WhatsApp newsletter and remove you from the distribution list. This way, we do not process your data for an unnecessarily long time and maintain an up-to-date distribution list.
We process your data for this purpose based on our legitimate interest in using a user-friendly and secure newsletter system that meets user expectations (Art. 6(1)(f) GDPR).
g. Personalization of salutations and content
If you wish to do so, and provided that you have given your consent in the cookie banner (personalization cookie) or when signing up for the newsletter or app, and have not revoked or modified that consent, we will provide you with personalized newsletters or push notifications, as well as personalized content on our website, our apps, and our digital offerings.
- Personalization of messages and content
We personalize messages and content for you based on your interests, your behavior, and your inputs on our website, in newsletters, in the apps, and in other digital offerings of FC Bayern (in particular by FC Bayern München AG and FC Bayern München Basketball GmbH). In doing so, we process, in particular, data stored by personalization cookies when you visit the website or our apps, newsletter usage data, and newsletter subscription data (including your email address), activities on the website or in the app while you’re logged in (e.g., shopping cart, abandoned shopping cart, purchases made, ordered goods and prices, purchase date, returns, tickets, parking tickets), basic and usage data from your myFCBAYERN registration (e.g., user ID, email address, contact details, membership number, preferred payment method, membership status, interests), as well as data from other services, such as Bayern TV Plus subscriptions, the Smart TV app, and/or the FC Bayern apps, in order to understand your interests and address you in a personalized manner.
- Personalized communications from our FC Bayern Munich partners
You will also receive personalized messages from FC Bayern Munich partners (“Partners”). To enable this, we share relevant information about your interests and your email address with our partners. You can find a detailed list of our current partners here.
- Legal basis, withdrawal, modification
The legal basis for personalizing messages and content, as well as for sharing your data with our partners, is your consent (Art. 6(1)(a) GDPR), which you provide to us via the cookie banner and by subscribing to the newsletter. You may revoke or withdraw your consent at any time with future effect via the link in the newsletter, in the Preference Center in myFCBAYERN, or by email. You may also prevent or interrupt the merging of data by logging out of your myFCBAYERN account and/or regularly deleting your personalization cookies. The lawfulness of the data processing carried out by us prior to revocation remains unaffected.
We process your personal data for these purposes until you withdraw your consent with future effect. In addition, we store personal data only to assert or defend against legal claims or for as long as statutory retention obligations exist.
h. Product recommendations via email
- Product recommendations for customers
As a customer of our online service, you will regularly receive product recommendations from us via email. You will receive these product recommendations from us regardless of whether you have subscribed to a newsletter or not. For this purpose, we use the email address you provided during the purchase to promote our own goods and/or services that are similar to those you have purchased from the FCB Shop based on a previous order.
The processing of your personal data for this purpose is based on our legitimate interest in sending direct marketing to existing customers (Art. 6(1)(f) GDPR). You may object to these product recommendations at any time with future effect by sending a written notice to FC Bayern München AG, Säbener Str. 51-57, 81547 Munich, via the link provided at the end of the product recommendation email, or by contacting us at datenschutz@fcbayern.com .or by sending a written notice to FC Bayern München AG, Säbener Str. 51-57, 81547 Munich
- Newsletters and Product Recommendations for Business Partners
As the contact person for our business partners, we regularly inform you via email about contract-related news, new or related offers that may be relevant to your company, and other information that may be important for the conduct of our business relationship. In doing so, we use the email address provided by you or your company within the scope of the commercial business relationship.
The processing of your personal data for this purpose is based on our legitimate interest in keeping the contact persons of business customers informed about contract-related matters and offers (Art. 6(1)(f) GDPR). You may object to receiving this email at any time with future effect by sending a written notice to FC Bayern München AG, Säbener Str. 51-57, 81547 Munich, or via datenschutz@fcbayern.com,. You may also inform us whether you would like us to send this email to a different email address at your company.
- Detecting Interest in Product Recommendations
Product recommendations contain socalled “pixels.” This allows us to determine whether you have opened or clicked on the product recommendation or not.
If we determine that you have not opened the product recommendations for an extended period, we assume that you are no longer interested in the product recommendations and remove you from the distribution list. In this way, we do not process your data for an unnecessarily long time and maintain an up-to-date distribution list.
We process your data for this purpose based on our legitimate interest in using a user-friendly and secure “newsletter system” that meets users’ expectations (Art. 6(1)(f) GDPR).
We process your personal data for this purpose as long as you demonstrate an interest in our products or until you object to receiving product recommendations. Furthermore, we store personal data only to assert or defend against legal claims or as long as long as statutory retention obligations exist.
i. Customer reviews for purchases in our online store
After making a purchase in our online store, you have the option to rate your shopping experience on the Trusted Shops review platform (“eTrusted Platform”) as well as on other review platforms (e.g., Trustpilot, Google Business, hereinafter “third-party platforms”).
- Sending review invitations via Trusted Shops
If you give your consent, we will transmit your email address, transaction number, the time of the order, the purchased product, your name, and, if applicable, your title (“Shop Order Data”), which you provided during your purchase, to Trusted Shops. Trusted Shops will then send you an email with a link to submit a review for the FC Bayern Online Store on the eTrusted platform, as well as a reminder after five days if necessary (collectively “review invitation”). The review invitation may also contain links to third-party platforms. If you do not click on any of these links, your data will not be transmitted to these third-party platforms.
The legal basis for our transfer of your shop order data to Trusted Shops is your consent (Art. 6(1)(a) GDPR). You may revoke your consent at any time with future effect—either via the opt-out link in the review invitation, by email to privacy@trustedshops.com, or to datenschutz@fcbayern.com. The lawfulness of the processing carried out up to the point of revocation remains unaffected. If you wish to delete or revoke your review, you must do so directly with Trusted Shops.
- Contacting You Regarding Reviews
FC Bayern may contact you via the comment function on the eTrusted platform to clarify any questions regarding your review or to improve customer service. For this purpose, your shop order data will be processed.
Processing is carried out on the basis of our legitimate interest (Art. 6(1)(f) GDPR) to improve customer satisfaction and prevent false reviews.
- Joint controllership with Trusted Shops
FC Bayern and Trusted Shops are jointly responsible for sending review invitations, collecting and publishing reviews, and contacting reviewers on the eTrusted platform. We have entered into a joint controller agreement with Trusted Shops SE, Subbelrather Str. 15c, 50823 Cologne, in accordance with Art. 26 GDPR. Please contact our Data Protection Officer to exercise your rights as a data subject in connection with the responsibilities of FCB mentioned here. You can find the contact details of our Data Protection Officer in Section 1 of this Privacy Policy. Further information on data protection and your rights as a data subject vis-à-vis Trusted Shops can be found at www.trustedshops.de/impressum-datenschutz/ .
j. Interactive Content, Such as Surveys and Contests
On our website, we offer surveys, mini-games, quizzes, pop-ups, sweepstakes, or other interactive content (collectively “Interactive Content”).
- Surveys, mini-games, and similar content
When you use this Interactive Content and fill out the corresponding form, we process the data you enter into the form fields (e.g., title, gender, first name, last name, address, email address, phone number, date of birth, preferred language of communication), your answers provided in the Interactive Content, survey results, game scores, or digital content you request (such as trading cards), as well as necessary technical data (e.g., IP address, type of device) (“Survey Data”).
We process the Survey Data to send you relevant and personalized content via the communication channels you have selected (email, phone, SMS) or to make it available in your myFCBAYERN account, and to keep your user data stored with us up to date.
If you have given your consent to the use of your survey data, the legal basis for processing your survey data is your consent (Art. 6(1)(a) GDPR). You may revoke your consent at any time with future effect by sending us a message at datenschutz@fcbayern.com .
In all other cases, the legal basis for processing your survey data is the performance of the legal relationship established between you and us through your participation in the Interactive Content, Art. 6(1)(b) GDPR.
We process your survey data for these purposes until you revoke your consent with future effect or for as long as this is necessary for the performance of the contract and the fulfillment of mutual obligations. Furthermore, we store your survey data only to assert or defend against legal claims or for as long as statutory retention obligations apply.
- Contests
Unless specific privacy notices in the terms and conditions of participation apply in individual cases, the following privacy notices apply. If you participate in a sweepstakes via the Interactive Content, we process your personal data (title, first name, last name, address, email address, phone number, date of birth, and sweepstakes responses) (“Sweepstakes Data”).
We process the contest data for the purpose of conducting the contest, notifying the winners, and verifying contact information.
This processing of your contest data is strictly necessary for participation in the contest.
The legal basis for processing your contest data for contests is the performance of a contract under Article 6(1)(b) of the GDPR (contest agreement).
We process your contest data for this purpose until the contest has been completed. Beyond that, we store your contest data only to fulfill any statutory retention obligations or, to the extent necessary and legally permissible, to assert or defend against legal claims.
k. Flyers, catalogs, and all mail-delivered advertising
We process your name, address data, and your interest in FC Bayern for marketing purposes if we believe we have attractive offers for you.
The processing of your personal data for this purpose is based on our legitimate interest in advertising by mail (Art. 6(1)(f) GDPR). You may object to receiving such direct marketing at any time by sending a written notice to FC Bayern München AG, Säbener Str. 51-57, 81547 Munich, or by email to , service@fcbayern.com,. Upon receipt of your objection, we will immediately cease sending you further marketing information and will not disclose your data to third parties for marketing purposes.
We process your personal data for this purpose as long as you express an interest in our products or until you object to receiving product recommendations. Furthermore, we store personal data only to assert or defend against legal claims or as long as legal obligations to store such data exist.
l. Contact
- Contact Form
You can enter your personal data on our website via a contact form. When you use the contact form, we process the data you enter into the input fields (e.g., last name, first name, street, house number, city, ZIP code, email address, message, time of the request, and server log data).
The legal basis for processing is Art. 6(1)(b) GDPR (performance of a contract).
We use the data exclusively to process and respond to your inquiry.
We process the personal data you provide when contacting us only until we have fully responded to your inquiry. Beyond that, we store personal data only to assert or defend against legal claims or for as long as statutory retention obligations exist
- Chat Functionality
In addition, you can use a chatbot on our website to contact us (“chat functionality”). The chat functionality is a customer support service that initially relies on artificial intelligence (“AI”) and then—depending on the content—transfers the conversation to one of our service representatives. The chatbot runs on a dedicated instance for us, meaning the data is not shared with third parties.
To provide the chat functionality technically, we store a chat ID, a random user ID, a session ID, and the chat history in your device’s local storage. You can find more information about this in our cookie settings.
When you use the chat feature, we process the chat history (e.g., last name, first name, address, email address, and other data that you or the service representative enter into the chat) as well as technically necessary connection data and background information (e.g., URL, random user ID, session ID, user language). We process this data for the purpose of providing the chat functionality. We also use the chat content (after removing any personal references) to analyze and optimize our chat functionality.
The legal basis for processing is Art. 6(1)(b) GDPR (performance of the contract for the provision of the chat functionality).
We process your connection data and background information until we have fully responded to your chat request. We store chat content for up to 30 days. Beyond that, we store personal data only to assert or defend against legal claims or for as long as statutory retention obligations exist
m. Special Promotions with Partners
From time to time, we conduct special promotions in collaboration with certain business partners, through which you can also take advantage of attractive offers from our partners (“Special Promotions”). To carry out these special promotions, it may be necessary for us to process your personal data and share it with our partner. We will inform you of the details, including the identity of the respective partner and the personal data being processed (e.g., name, address, email address), in connection with your participation in the special promotion.
The processing of your personal data, including the transfer of your personal data to the respective partner, takes place only with your consent. The legal basis for the processing is then under our own responsibility. Please therefore also note the corresponding privacy notices of our partners.
We process the personal data you provide for special promotions only for as long as necessary to enable your participation in the special promotion. Furthermore, we store personal data only to assert or defend against legal claims or for as long as statutory retention obligations exist.
n. Accreditations
We process personal data in connection with the creation and use of access passes (“accreditations”) for specially authorized visitors to FCB events (e.g., matches at the Allianz Arena) or events where they have a specific work assignment (“accredited persons”). The Accredited Person may register for an accreditation themselves or have someone else do so on their behalf (e.g., their employer). Our data processing in connection with accreditations also includes verifying the lawful use of the accreditation in accordance with the applicable terms and conditions and any supplementary guidelines, handling loss reports, and checking accreditations in and out.
For the purposes mentioned, we process the following data as necessary: last name, first name, photo, company, position/title, department, address, license plate number, registration data such as email address and password, event type/date and time, barcode on the accreditation, check-in and check-out times, information regarding lost accreditations (location, time, circumstances), and violations of the applicable Terms and Conditions and related guidelines. If accredited individuals are authorized to bring additional persons, we process the following information regarding those individuals: full name, address, event type/date, and date.
The legal basis for processing is Article 6(1)(b) of the GDPR (performance of a contract).
We process the personal data received from you or authorized third parties for accreditation purposes only for as long as necessary for the accreditation. Furthermore, we store personal data only to assert or defend against legal claims or for as long as statutory retention obligations exist
FCB reserves the right to conduct a background check through the relevant authorities as part of the accreditation process, provided there are concrete indications that such a check is necessary (e.g., relevant misconduct in the past). Such a procedure and the corresponding transfer of data are based on our legitimate interests in ensuring the smooth and secure conduct of our events (Art. 6(1)(f) GDPR). Should we be subject to a legal obligation (Art. 6(1)(c) GDPR) to conduct such background checks in individual cases, we will inform you in advance of the legal obligation, unless we are prohibited from doing so by law.
The following privacy policies also apply to further data processing in connection with your stadium visit:
- the FCB’s privacy policy regarding general ticket purchases and stadium visits, in particular for data processing related to video surveillance and image recording in the stadium as well as stadium bans; and
- (if you use the Allianz Arena app) the privacy policy for the Allianz Arena app, which you can find in the app’s menu under “Privacy”.
o. Whistleblower System
Information on how FCB processes personal data in connection with the whistleblower system, which is also accessible via this website, can be found here.
4. Cookies and Similar Technologies
a. What are cookies and similar technologies?
Some of our online services require us to use so-called cookies or similar technologies, such as pixels (collectively: “cookies”). Cookies in this context are small files or other technologies that store information on your device or receive it from your device when you browse the website.
b. Which cookies are used on this website, and how can you manage them using the cookie consent solution?
A list of the cookies we use, descriptions of the purposes of the cookies, and further information about the respective cookies can be found
in our cookie consent solution.
You can accept or reject individual or all cookies separately during your first visit to our website and at any time thereafter in our cookie consent solution by placing or removing a green checkmark next to the respective cookie and then clicking “Save Settings.”
The settings you make in the cookie consent solution are stored on your computer or mobile device. You must therefore make these settings again if you clear your browser history or use a different device or internet browser.
The descriptions of cookies in this Section 4 also apply to other FC Bayern websites where FC Bayern München AG is identified as the controller in the cookie banner, e.g., https://fcbayern.com/basketball .
5. Integration of Social Plugins and Social Embeds
a. Social Plugins
We provide social plugins for the social networks Facebook (operated by Meta Platforms) and X on our website. These are services offered by Meta Platforms Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) and Twitter International Unlimited Company (1 Cumberland St S, Fenian St, Dublin 2, D02 AX07, Ireland (“Twitter”); Meta Platforms and Twitter together “network operators”). You can recognize the plugins by the respective Facebook and X logos. You can use these plugins to like, share, or otherwise interact directly on the respective network.
Before clicking the Facebook “Share” and X “Tweet” buttons, our server address—rather than your IP address or other data—is transmitted to Meta Platforms or Twitter using the privacy-friendly alternative (Shariff button). As long as you do not click the social plugin to share content, you remain invisible to the respective network operator.
We use this privacy-friendly alternative (Shariff button) to prevent social networks from tracking and storing internet behavior without the user’s active participation. For more information about the solution used, please visit the following link: http://www.heise.de/ct/ausgabe/2014-26-Social-Media-Buttons-datenschutzkonform-nutzen-2463330.html
By using the social plugin, you consent to the collection of your personal data by the network operator. The respective network operator is responsible for the subsequent collection and processing of data , including the use of cookies and similar technologies. Specifically, information about which of our web pages you have visited and your IP address will be transmitted to the network operator, even if you do not have a profile on the respective network or are not currently logged in there. If you are logged in as a member of the social networks, the network operator will associate the information with your personal user account.
We therefore recommend that you read the privacy policy for the respective network before using the social plugin:
- For more information on the processing of your personal data by Meta Platforms, please refer to the Meta Platforms Privacy Policy for Facebook at: https://de-de.facebook.com/policy.php
- For more information on the processing of your personal data by Twitter, please refer to the X Privacy Policy at: https://x.com/de/privacy
b. Social Embeds
We provide social embeds from the social networks Facebook, Instagram, X, YouTube, and LinkedIn on our website. Social embeds are content from social networks that we integrate into our website in a way that you do not have to leave the site. This is called “embedding.” It involves the integration of posts, videos, or other content from the companies Meta Platforms Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; however, personal data may also be processed by Meta Platforms Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA), Instagram LLC (1601 Willow Road, Menlo Park, CA 94025, USA; however, Meta Platforms is responsible for Instagram under data protection law, see above), Twitter International Unlimited Company (One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland; however, personal data may also be processed by X Corp, 865 FM 1209, Building 2, Bastrop, TX 78602, , USA), YouTube LLC (901 Cherry Ave., San Bruno, CA 94066, USA; however, Google Ireland Limited, Gordon House Barrow Street Dublin 4, D04E5W5, Ireland, is responsible under data protection law, and personal data may also be processed by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) and LinkedIn Ireland Unlimited Company (Wilton Plaza, Gardner House 4,5,6, Dublin, Ireland; however, personal data may also be processed by LinkedIn Corporation, 605 W Maude Ave, Sunnyvale, CA 94085, USA) on our website.
You can recognize the social embeds by the respective logos of the companies or networks next to an image, post, or other externally recognizable content. After activating these social embeds, you can view the content from the respective activated network that we have integrated into our website.
Before clicking the respective “Show content” button (“activation button”), our privacy-friendly activation solution prevents your personal data, such as your IP address, from being transmitted to the respective network operator. As long as you do not click the activation button to view content, you remain invisible to the network operators.
We use this privacy-friendly alternative (activation solution) to prevent network operators from tracking and storing internet behavior without the user’s active consent.
By clicking the activation button, you consent to the collection of your personal data by the respective network operator. Alternatively, you can also activate the social embeds via our cookie consent solution. The respective network operator is responsible for the subsequent data collection and processing by the network operator, including the use of cookies and similar technologies by the network operator. Please assume at least the following: Information about which of our web pages you have visited and your IP address will be transmitted to the network operator, even if you do not have a profile or account with the respective network or are not currently logged in there. If you are logged in as a member of the social networks, the network operator will associate the information with your personal user account. We do not receive any of this information.
We therefore recommend that you read the privacy policy for the respective network before clicking the activation button:
- Facebook (operated by Meta Platforms): https://de-de.facebook.com/policy.php
- Instagram (operated by Meta Platforms): https://help.instagram.com/155833707900388
- X: https://x.com/de/privacy
- YouTube: https://policies.google.com/privacy?hl=de
- LinkedIn: https://de.linkedin.com/legal/privacy-policy
About our
,you can disable social embeds entirely or for individual providers for the future.
6. Data Disclosure to Processors and Transfer to Other Controllers
In connection with the data processing described in this Privacy Policy, we sometimes collaborate with other companies. These other companies are either data processors or other data controllers. In addition to the information regarding data recipients provided in specific cases throughout this Privacy Policy or in the cookie consent solution, the following applies:
a. Data processors
All personal data that we process in connection with this website is processed either by us or by so-called data processors. Data processors are companies that process your personal data strictly in accordance with our instructions, such as IT service providers (e.g., website hosting and maintenance, cookie providers, and analytics providers) or advertising agencies. We primarily use data processors so that we can offer you our services more effectively. If these data processors are located outside the European Economic Area (EEA), Section 6. c. below also applies. We have carefully selected these service providers and entered into data processing agreements with them.
b. Other Data Controllers
In certain cases, we share your personal data with other data controllers who process the personal data not on our instructions, but for their own purposes. We only share your data for specific purposes, which these other data controllers must adhere to. These purposes are:
Contract fulfillment or service provision
To the extent necessary for contract fulfillment or the provision of services to you, we share your personal data with our contractual partners, e.g., with a shipping company for the delivery of ordered goods, with distribution partner companies when purchasing fan merchandise in the Global Store for delivery to an address outside the European Economic Area (EEA), with FC Bayern München e.V. in connection with your membership, to FC Bayern München Basketball GmbH in connection with purchases in the online shop, logging in to the app, and for the personalization of communications and content from FC Bayern München Basketball GmbH, to cookie providers for the provision of certain marketing services, or to the payment provider you have selected.
The transfer of your personal data to these other data controllers for these purposes is carried out for the performance of a contract (Art. 6(1)(b) GDPR) or based on our legitimate interest (Art. 6(1)(f) GDPR) in organizing our operations efficiently.
The transfer of data to FC Bayern München Basketball GmbH takes place in connection with myFCBAYERN (ticketing, online shop, and app login) for the purpose of contract performance (Art. 6(1)(b) GDPR) or based on your consent, Art. 6(1)(a) GDPR, which you have given to FC Bayern München Basketball GmbH (newsletter) or to us (browsing behavior in the cookie banner on https://fcbayern.com/basketball). In the absence of consent—e.g., when transmitting cookie data that may be collected without consent—we transmit only aggregated data to FC Bayern München Basketball GmbH, from which your identifiers have been removed, based on our legitimate interest (Art. 6(1)(f) GDPR; our interest and that of FC Bayern München Basketball GmbH in providing a functional website).
If you wish, we will transfer your contact information (your email address and/or phone number) to shipping companies so that they can inform you about details regarding the shipment of your order (e.g., package notifications). The transfer of your personal data to shipping companies for this purpose is based on your consent (Art. 6(1)(a) GDPR). You may revoke your consent at any time with future effect by sending a message to datenschutz@fcbayern.com .
These other controllers may use the data received in this manner exclusively for the purpose for which we have transferred it. If these other controllers are located outside the EEA, Section 6. d. below also applies.
Credit Check
For credit checks, we exchange address and creditworthiness data with credit service providers or credit bureaus in Germany in justified cases (e.g., direct debit procedures). We provide these companies only with the personal data necessary to perform the respective activity (e.g., name, address, date of birth). The transfer is based on our legitimate interest (Art. 6(1)(f) GDPR) in avoiding credit default risk.
Legal Obligation or Enforcement of Legal Claims
Otherwise, we only transfer your personal data to other controllers if and to the extent that it is required by law, to enforce legal claims, or to investigate or prevent suspected or actual illegal activities. In these cases, we will inform you separately about the respective transfer if and to the extent that it is legally required.
c. Joint controllership with other FC Bayern companies
In connection with myFCBAYERN (see Section 3. a.), our newsletter service (see Section 3. e.), and the personalization of communications and content (Section 3. f.), your personal data is processed jointly by us, FC Bayern München Basketball GmbH (“FCBB”), and FC Bayern München e.V. (“FCB e.V.”). In this context, we are responsible for the operation of myFCBAYERN, the registration and administration of users (website and app), the distribution of newsletters (unless these relate exclusively to FCBB—in particular the FCBB newsletter with an exclusive FCBB focus without the user’s consent to the personalization of communications and content—or to FCB eV), the sale of soccer tickets and merchandise in the online shop, the personalization of communications and content, processing related to the Kids Club, and the creation of blacklists (these include users who have violated our terms and conditions, such as those regarding ticket resales).
Within the framework of joint controllership, FCB eV is responsible for the processing of personal data in connection with the administration of the data subjects’ club membership.
Within the framework of joint controllership, FCBB is responsible for the processing of personal data in connection with (i) the administration of, personalization data, marketing preferences, the sending of marketing communications, and the personalization of basketball-related content, as well as (ii) transactions via the Digital Platform in the area of basketball ticketing (e.g., purchases via the online shop), in each case if and to the extent that this relates to FC Bayern Basketball.
For joint controllership with FCBB and FCB eV, we have entered into a joint controllership agreement pursuant to Art. 26 GDPR. Please contact our Data Protection Officer to exercise data subject rights in connection with the FCB’s responsibilities mentioned here. You can find the contact details of our Data Protection Officer in Section 1 of this Privacy Policy. d. Transfer to third countries.
d. Transfer to third countries
If we transfer your personal data to processors or other controllers in countries outside the European Economic Area (EEA) (for example, to the U.S.), we implement the legally required standards and safeguards. We achieve this, for example, through transfers under an adequacy decision pursuant to Article 45 of the GDPR or by entering into so-called EU Standard Contractual Clauses. Please contact us as described in Section 1 to learn more about the specific security mechanisms we use.
7. Secure Data Transmission
All personal data that you transmit to us while browsing our website in general, and specifically during the ordering process, is transmitted in encrypted form. We establish a so-called SSL connection for every transaction. SSL (Secure Sockets Layer) is a protocol that encrypts your data so that it cannot be read by unauthorized parties during transmission over the Internet.
You can recognize the SSL connection by the fact that the web address has changed from http:// to https://. Additionally, the secure connection is usually indicated by a closed padlock in the status bar of your web browser.
8. Your Rights
You have the following legal rights regarding your personal data vis-à-vis FC Bayern München AG, provided the respective conditions are met. You can find further information about your rights and the corresponding conditions on the European Commission’s website at https://ec.europa.eu/info/law/law-topic/data-protection/reform/rights-citizens_de .
a. Right of Access
As a data subject, you have the right to request confirmation as to whether we process personal data concerning you. If this is the case, you have the right to access this personal data as well as to further information, e.g., the purposes of processing, the recipients, and the planned duration of storage or the criteria for determining the duration.
b. Right to Rectification and Completion
As a data subject, you have the right to request the immediate rectification of inaccurate personal data. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data.
c. Right to erasure (“right to be forgotten”)
As a data subject, you may have the right to have your personal data erased. This is the case, for example, if your personal data is no longer necessary for the original purposes, you have withdrawn your consent under data protection law, or the personal data has been processed unlawfully.
d. Right to restriction of processing
As a data subject, you have the right to restrict processing in the cases prescribed by law.
e. Right to data portability
As a data subject, you have the right, in the cases prescribed by law, to receive the personal data concerning you in a structured, commonly used, and machine-readable format.
f. Right to object
As a data subject, you have the right to object at any time, on grounds relating to your particular situation, to the processing of certain personal data concerning you.
In the case of direct marketing, as a data subject, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing; this also applies to profiling to the extent that it is related to such direct marketing.
g. Right to withdraw your consent under data protection law
You may withdraw your consent to the processing of your personal data at any time with future effect. However, this does not affect the lawfulness of the processing carried out prior to the withdrawal.
h. Right to lodge a complaint with a data protection authority
You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement, if you believe that the processing of your personal data violates the GDPR.
The competent supervisory authority for FC Bayern München AG is the Bavarian State Office for Data Protection (https://www.lda.bayern.de/de/kontakt.html).
9. Changes
Our Privacy Policy and the descriptions in our cookie consent solution may change from time to time. This includes updates resulting from changes to our business, as well as adjustments due to changes in the legal landscape and/or the implementation of new technologies or services on the website. We will publish any updates to the Privacy Policy on this page. In the event of significant changes, we will provide appropriate notice. If you have any further questions that our Privacy Policy has not answered, please send an email to the following address: datenschutz@fcbayern.com
Version: May 2026