Privacy

Privacy Policy

This website is operated by FC Bayern Basketball GmbH (“FCBB” or “we”). In this statement, you will find information about how we handle your personal data when you visit the FC Bayern Basketball website.

 

1. Controller and Data Protection Officer

Responsible for the processing of personal data on this website is:

FC Bayern München Basketball GmbH, Siegenburger Straße 45, D-81373 München

Phone: +49 89 2005-7000

Fax: +49 89 2005-25-7029

Email: basketball@fcbayern.com

For questions regarding data protection, you can also contact our Data Protection Officer at any time at datenschutz@fcb.de.

 

1. Collection and Use of Non-Personal Data When Using the Website

When you use this website without otherwise (e.g., by registration) submitting data to us, we only collect technically necessary data automatically transmitted by your browser to our server (e.g., browser type/version, operating system, referrer URL, pages visited, duration of visit, IP address, date and time of request) or required by technically necessary or functional cookies. This is technically necessary to display our website to you.

To the extent that personal data is processed here, we process it on the basis of our legitimate interest in providing you with a functioning, secure website (Art. 6(1)(f) GDPR). These data will not be merged with other data sources unless we expressly describe this elsewhere. We reserve the right to subsequently check these data if we become aware of concrete indications of illegal use.

More information on cookies and similar technologies can be found

.

 

1. Collection and Use of Personal Data

1. Image / Graphic Delivery

As necessary, we process information about your browser, operating system, and the URL you visited previously in order to deliver images and graphics optimally to your end device and to ensure the stability of the website. The legal basis for processing is Art. 6(1)(b) GDPR (contract performance). Images or graphics might not be displayed on your end device otherwise. We process your personal data for this purpose only as long as necessary to deliver the images and graphics to you. Additionally, we store personal data only for the assertion or defense of legal claims or as long as statutory retention obligations exist.

1. Ticket Purchase and Other Contractual Relationships

We process your personal data (e.g., name, delivery and billing address, email, content of an order, price, order processing) in the context of ticket orders, ticket inquiries, or other contractual relationships as far as necessary for the establishment and execution of the respective order or contract.

We process your personal data for the purpose of contract fulfillment, Art. 6(1)(b) GDPR.

We only process your personal data for as long as necessary for contract fulfillment and to fulfill mutual obligations. Additionally, we store this personal data only for the assertion or defense of legal claims or as long as statutory retention obligations exist.

If you order tickets or fan merchandise through your myFCB account, your data will also be processed by FC Bayern München AG. In this case, the privacy policy at www.fcbayern.com applies.

1. Newsletter Service

• Newsletter Subscription

 If you wish, we process your personal data to regularly send you the newsletters and marketing messages you have selected via email, providing information about current events and attractive offers from FCBB. When you subscribe to the newsletter, we process your email address and information for sending the newsletters to you. To document your consent, we also process the following data: the selected newsletter type, the time of registration, technical data for the double opt-in procedure.

Newsletter subscription is only possible with your consent.

The legal basis for processing is Art. 6(1)(a) GDPR. You can unsubscribe from a newsletter at any time via the link at the end of the newsletter or directly through your myFCB user account, effective for the future.

• Newsletter Tracking

The newsletter contains so-called "pixels". This allows us to determine whether you have opened or clicked on the newsletter.

If we notice that you have not opened the newsletter for an extended period, we assume that you are no longer interested in the newsletter and remove you from the distribution list. This way, we do not unnecessarily process your data for a long time and have an up-to-date distribution list.

We process your data for this purpose on the basis of our legitimate interest in using a user-friendly and secure newsletter system that meets user expectations (Art. 6(1)(f) GDPR).

• Newsletter Tracking and Personalization; Data Usage from Other Services

The newsletter contains so-called "pixels". As part of your retrieval of the newsletter, technical information such as browser information and your system, as well as your IP address, the time of newsletter delivery, and your interactions with the newsletter (opening, clicks on content and links) (together: "newsletter usage data") are processed by us. The information provided in our cookie banner applies to the processing of your subsequent behavior on our website or in our app.

Your newsletter usage data is processed to technically improve our newsletter and to recognize the reading habits of our users and adapt the content to you.

If you have given your consent elsewhere (especially in the cookie banner or in myFCB / Online Shop) and have not revoked the consent there, we also use your newsletter usage data for personalizing content and offers in other services of FCBB or FC Bayern München in general and vice versa (e.g., use of website usage data for newsletter personalization).

We process your newsletter usage data as well as your data in connection with other services of ours, as described in this subparagraph, based on your consent, which you give us together with the newsletter registration. The legal basis for processing is Art. 6(1)(a) GDPR. You can revoke your consent to the processing of your newsletter usage data together with the consent to receive the newsletter at any time via the link at the end of the newsletter or directly through your myFCB user account, effective for the future.

• Processing Duration

We process your personal data for the purposes described under Newsletter Service (i) until you revoke your consent for the future or (ii) as long as you demonstrate an interest in our newsletters. Additionally, we store personal data only for the assertion or defense of legal claims or as long as statutory retention obligations exist.

Product Recommendations via Email

• Product Recommendations for Customers

As a customer of our online offerings, you regularly receive product recommendations from us via email. You will receive these product recommendations from us regardless of whether you have subscribed to a newsletter. In this process, we use the email address provided by you during the purchase to advertise our own goods and/or services that are similar to those you have purchased from us due to a previous order.

Processing your personal data for this purpose is based on our legitimate interest in conducting direct advertising to existing customers (Art. 6(1)(f) GDPR). You can object to receiving these product recommendations at any time by written notice to FC Bayern Basketball GmbH, Siegenburger Str. 45, 81373 Munich, using the link provided at the end of the product recommendation email, or by contacting datenschutz@fcbayern.com.

• Identification of Interest in Product Recommendations

Product recommendation emails contain so-called "pixels". This allows us to determine whether you have opened or clicked on the product recommendation.

If we notice that you have not opened the product recommendations for an extended period, we assume that you are no longer interested in the product recommendations and will remove you from the distribution list. This way, we do not unnecessarily process your data for a long time and maintain an up-to-date distribution list.

We process your data for this purpose based on our legitimate interest in using a user-friendly and secure "newsletter system" that meets user expectations (Art. 6(1)(f) GDPR).

We process your personal data for this purpose as long as you demonstrate an interest in our products or until you object to receiving product recommendations. Additionally, we store your personal data only for the assertion or defense of legal claims or as long as statutory retention obligations exist.

Flyers, Catalogs, and All Postal Advertising

We process your name, address data, and your interest in FCBB for marketing purposes (postal advertising) if we believe that we have attractive offers for you.

Processing your personal data for this purpose is based on our legitimate interest in advertising by postal mail (Art. 6(1)(f) GDPR). You can object to receiving such direct advertising at any time by written notice to FC Bayern Basketball GmbH, Siegenburger Str. 45, 81373 Munich, or by email to basketball@fcb.de. Upon receipt of your objection, we will immediately cease further sending of marketing information and will not use the data for marketing purposes to third parties.

We process your personal data for this purpose as long as you demonstrate an interest in our products or until you object to receiving product recommendations. Additionally, we store your personal data only for the assertion or defense of legal claims or as long as statutory retention obligations exist.

Contact Form

You can enter personal data via a contact form on our website. If you use the contact form, we process the data you enter in the input mask (e.g., last name, first name, email address, message) , time of the request, server log data, and our further correspondence.

The legal basis for processing is Art. 6(1)(b) GDPR (contract fulfillment).

We use the data solely to process and respond to your request.

We process this personal data only until we have conclusively answered your request. Additionally, we store this personal data only for the assertion or defense of legal claims or as long as statutory retention obligations exist.

 

Chat functionality

On our website you can use a chatbot to contact us. For this purpose we use a chat functionality (“Ai.Worx chat functionality”). The chat functionality is a customer support service that is based on the use of artificial intelligence (“AI”) and then passes the conversation – depending on the content – ​​to one of our service employees. The chatbot runs on an instance for us, i.e. the data is not shared with unauthorized third parties.

In order to technically provide and trigger the chat functionality, we set a cookie and save the chat history in the local storage of your device. You can find more information about this in our cookie settings.
If you use the chat functionality, we save your communication data (e.g. your email address) and the chat content including all personal data contained in the chats. We process this data for the purpose of providing the chat functionality, analyzing and answering customer inquiries in real time, providing information on frequently asked questions (“FAQs”) and ticketing, as well as advising and supporting ticket purchases and optimizing the chat functionality. We also use the chat content (after removing the personal reference) to analyze and optimize our chat functionality.

The legal basis for the processing is Art. 6 Para. 1 lit. b GDPR (fulfillment of the contract to provide the chat functionality)
We store your personal data for these purposes for three (3) months. In addition, we only store this personal data to fulfill any statutory retention periods or, to the extent necessary and legally permissible, to assert or defend against legal claims.

Apple Business Chat & Telegram Messenger Service

With Apple Business Chat and our Telegram channel, we offer a messenger service that keeps you up to date on topics you have selected. For this purpose, we send messages via our Telegram / Apple Business Chat accounts to the mobile number provided by you.

When you sign up for our messenger service, we process the following personal data about you: name and first name, telephone number (mobile), your and our messages sent in connection with the service, as well as usage data for communication (date, time of messages). We process this personal data for sending messages as part of our messenger service. The legal basis for data processing is your consent (Art. 6(1)(a) GDPR). You give your consent by sending a starting message to our Apple Business Chat number or our Telegram channel as described in more detail at https://fcbayern.com/basketball/de/search/telegram. To use the messenger service via Telegram, you need an existing messaging account with the provider Telegram. Apple Business Chat is only available for users of Apple devices and requires the iMessenger app installed on each Apple device.

The FCBB messenger service is intended for users who are at least 16 years old or whose legal guardians have consented. By registering, you confirm that you meet this requirement.

You can revoke your registration for our messenger service at any time with effect for the future, e.g., by sending a message with the content "STOP" to us. The lawfulness of the messages sent by us via the messenger service before revocation remains unaffected.

To have all information stored by us about your registration and use of our messenger service deleted, please send us a message with the text "DELETE ALL DATA" via Apple Business Chat / Telegram. We will then only store your data if we are legally obliged to do so.

Whistleblower System

For information on how FC Bayern München AG processes personal data in connection with the whistleblower system, which can also be accessed via this website, please refer to the "Privacy Policy" on the whistleblower system page.

1. Cookies and Similar Technologies

1. What are Cookies and Similar Technologies?

Some of our online services require us to use so-called cookies or similar technologies such as pixels (together "Cookies"). Cookies in this sense are small files or other technologies that store information on your device or receive information from it when you browse the website.

 

1. Which Cookies are used on this Website and How to Adjust Them with the Cookie Consent Solution?

A list of the cookies we use, descriptions of the purposes of the cookies, and further information about the respective cookies can be found

in our cookie consent solution.

Upon the first visit to our website and then at any time in our cookie consent solution, you can separately accept or reject individual or all cookies by placing or removing a green checkmark next to the respective cookie and then clicking on "Save Settings".

Your settings made in the cookie consent solution are stored on your computer or mobile device. Therefore, you need to make these settings again if you delete your browsing history or use a different device or internet browser.

 

1. Integration of Social Plugins and Social Embeds

1. Social Plugins

We provide social plugins of the social networks Facebook and Instagram (both operated by Meta Platforms) and X/Twitter on our website. These are offerings from Meta Platforms Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) and Twitter International Company (1 Cumberland St S, Fenian St, Dublin 2, D02 AX07, Ireland; Meta Platforms and Twitter collectively "Network Operators"). The plugins can be identified by the respective logos of Facebook, Instagram, and X/Twitter. You can use these plugins to like, share, or otherwise interact directly on the respective network.

Before clicking on the Facebook or Instagram "Share" and X/Twitter "Tweet" button, our privacy-friendly alternative (Shariff button) ensures that only our server address is transmitted to Meta Platforms or Twitter instead of your IP address and other data. As long as you do not click on the social plugin to share content, you remain invisible to the respective network operator.

We use this privacy-friendly alternative (Shariff button) to prevent social networks from tracking and storing internet behavior without the active contribution of the user. Further information about the solution used can be found at the following link: http://www.heise.de/ct/ausgabe/2014-26-Social-Media-Buttons-datenschutzkonform-nutzen-2463330.html

By clicking on the social plugin, you agree to the collection of your personal data by the network operator. For the data collection and processing subsequently carried out by the network operator, including the use of cookies and similar technologies by them, the respective network operator is responsible. Specifically, information about which of our internet pages you have visited and your IP address will then be transmitted to the network operator, even if you do not have a profile on the respective network or are not currently logged in there. If you are logged in as a member of the social networks, the network operator assigns the information to your personal user account.

Therefore, we recommend that you read the privacy policy for the respective network before clicking on the social plugin:

• For more information about the processing of your personal data by Meta Platforms regarding Facebook, please refer to Meta Platforms' privacy policy for Facebook at: https://de-de.facebook.com/policy.php
• For more information about the processing of your personal data by Meta Platforms regarding Instagram, please refer to Meta Platforms' privacy policy for Instagram at: https://privacycenter.instagram.com/policy
• For more information about the processing of your personal data by Twitter, please refer to Twitter's privacy policy at: https://twitter.com/de/privacy

1. Social Embeds

We provide social embeds from the social networks Facebook, Instagram, X/Twitter, TikTok, YouTube, and LinkedIn on our website. Social embeds are content from social networks that we integrate into our website so that you don't have to leave it. This is called "embedding". It involves the integration of posts, videos, or other content from Meta Platforms Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; however, personal data may also be processed by Meta Platforms Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA), Instagram LLC (1601 Willow Road Menlo Park, CA 94025, USA; however, Meta Platforms is responsible for Instagram in terms of data protection, see above), Twitter International Company (One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland; however, personal data may also be processed by X Corp., 1355 Market Street, Suite 900, San Francisco CA 94103, USA), YouTube LLC (901 Cherry Ave., San Bruno, CA 94066, USA; however, Google Ireland Limited, Gordon House Barrow Street Dublin 4, D04E5W5, Ireland, is responsible for data protection, and personal data may also be processed by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), TikTok Technology Limited (Ireland) (10 Earlsfort Terrace, Dublin, D02 T380, Ireland, and TikTok Information Technologies UK Limited, Kaleidoscope, 4 Lindsey Street, London, EC1A 9HP, United Kingdom; however, personal data may also be processed by TikTok Inc, 10100 Venice Blvd., Culver City, CA 90232, USA), and LinkedIn Ireland Unlimited Company (Wilton Plaza, Gardner House 4,5,6, Dublin, Ireland; however, personal data may also be processed by LinkedIn Corporation, 605 W Maude Ave, Sunnyvale, CA 94085, USA) on our website.

You can recognize the social embeds by the respective logos of the companies or networks next to an image, post, or other externally recognizable content. After activating these social embeds, you can view the content from the respective activated network that we have embedded on our website.

Before clicking on the respective "Show content" button ("Activation button"), our privacy-friendly activation solution prevents your personal data, such as your IP address, from being transmitted to the respective network operator. As long as you do not click on the activation button to view content, you remain invisible to the network operators.

We use this privacy-friendly alternative (activation solution) to prevent network operators from tracking and storing internet behavior without the active contribution of the user.

By clicking the activation button, you consent to the collection of your personal data by the respective network operator. Alternatively, you can also activate the social embeds via our cookie consent solution. For the subsequent data collection and processing by the network operator, including the use of cookies and similar technologies by them, the respective network operator is responsible. At least assume the following: Information about which of our web pages you have visited and your IP address will be transmitted to the network operator, even if you do not have a profile/account on the respective network or are not currently logged in there. If you are logged in as a member of the social networks, the network operator will associate the information with your personal user account. We do not receive any of this information.

Therefore, we recommend that you read the privacy policy for the respective network before clicking the activation button:

• Facebook (operated by Meta Platforms): https://de-de.facebook.com/policy.php
• Instagram (operated by Meta Platforms): https://help.instagram.com/155833707900388
• X/Twitter: https://twitter.com/de/privacy
• YouTube: https://policies.google.com/privacy?hl=de
• TikTok: https://www.tiktok.com/legal/page/eea/privacy-policy/de-DE
• LinkedIn: https://de.linkedin.com/legal/privacy-policy

You can deactivate social embeds altogether or for individual providers for the future via our cookie consent solution.

 

1. Data transfer to processors and transmission to other controllers

In the data processing described in this privacy policy, we cooperate with other companies. These other companies are either processors or other controllers. In addition to the information provided in this privacy policy or in the cookie consent solution for specific cases, the following generally applies:

1. Processors

All personal data that we process as part of this website is processed by us or our service providers, so-called processors. We may pass on your personal data to external service providers, primarily processors, in order to offer you our services (better). Processors are companies that process your personal data strictly according to our instructions for us, such as IT service providers (e.g., hosting and maintenance of the website, cookie providers, and analytics providers) or advertising agencies. We primarily use processors to offer you our services (better). If these processors are located outside the European Economic Area (EEA), section 6.c. below additionally applies. Except for some processors, especially cookie providers (see here), the processors we use are located in Germany or the EU. We have carefully selected these service providers and have concluded data processing agreements with them.

 

1. Other Controllers

In certain cases, we pass on your personal data to other controllers who do not process the personal data according to our instructions but for their own purposes. We only pass on your data to other controllers for specific purposes, which these other controllers must adhere to. These purposes are:

• Contract processing or service provision

To the extent necessary for contract processing or the provision of services to you, we may disclose your personal data to our contractual partners, e.g., to a shipping company for the delivery of paper tickets, to FC Bayern München e.V. in connection with your membership, to cookie providers for the provision of certain marketing services, or to the payment provider you have selected. These other controllers may only use the data received for the purpose for which we transmitted it. If these other controllers are located outside the EEA, section 6.c. below additionally applies.

The transmission of your personal data to these other controllers for these purposes is for the performance of a contract, Art. 6 para. 1 lit. b GDPR, or due to our legitimate interests (Art. 6 para. 1 lit. f GDPR) in making our operations efficient.

• Credit check

In justified cases (e.g., direct debit procedures), we exchange address and creditworthiness data with credit service companies or credit agencies in Germany for credit checks. These companies only receive from us such personal data that is necessary to fulfill the respective activity (e.g., name, address, date of birth). The transmission is based on our legitimate interests (Art. 6 para. 1 lit. f GDPR) in avoiding credit default risks.

Legal obligation or enforcement of legal claims

We only disclose your personal data to other controllers if and to the extent that this is required by law, to enforce legal claims, or to investigate or prevent suspected or actual unlawful activities. In these cases, we will inform you separately about the respective transmission if and to the extent required by law.

1. Transfer to third countries

If we transfer your personal data to processors or other controllers in countries outside the European Economic Area (EEA) (e.g., to the USA), we implement the legally required standards and safeguards. We achieve this, for example, by agreeing to the so-called EU Standard Contractual Clauses. Please contact us as described in section 1 to learn more about the specific security mechanisms we use.

 

1. Secure data transmission

All personal data that you transmit to us during browsing in general, and especially during the ordering process, is encrypted. We establish a so-called SSL connection with each transaction. SSL (Secure Socket Layer) is a method in which your data is encrypted so that it cannot be read by unauthorized persons during transmission over the Internet.

You can recognize the SSL connection by the fact that the internet address changes from http:// to https://. In addition, the secure connection is usually indicated in the status bar of your web browser by a closed padlock icon.

1. Your rights

You have the following legal rights regarding your personal data concerning FC Bayern München Basketball GmbH, provided that the respective conditions are met. You can find further information about your rights and the corresponding conditions on the website of the EU Commission at https://ec.europa.eu/info/law/law-topic/data-protection/reform/rights-citizens_de.

1. Right to information

As a data subject, you have the right to request confirmation as to whether we process personal data concerning you. If this is the case, you have the right to information about this personal data as well as other information, such as the purposes of processing, the recipients, and the planned duration of storage or the criteria for determining the duration.

1. Right to rectification and completion

As a data subject, you have the right to demand the immediate correction of incorrect personal data. Taking into account the purposes of processing, you have the right to request the completion of incomplete personal data.

1. Right to erasure ("right to be forgotten")

As a data subject, you may have the right to erasure. This is the case, for example, if your personal data is no longer necessary for the original purposes, if you have revoked your consent to data processing, or if the personal data has been processed unlawfully.

1. Right to restriction of processing

As a data subject, you have the right to restriction of processing in the cases provided for by law.

1. Right to data portability

In the cases regulated by law, as a data subject, you have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format.

1. Right to object

As a data subject, you have the right to object at any time, for reasons arising from your particular situation, to the processing of certain personal data concerning you.

In the case of direct marketing, as a data subject, you have the right to object at any time to the processing of personal data concerning you for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing.

1. Right to withdraw your data protection consent

You can revoke your consent to the processing of your personal data at any time with effect for the future. However, the lawfulness of the processing carried out until the revocation is not affected by this.

1. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement, if you believe that the processing of personal data concerning you violates the GDPR.

1. Changes

Our privacy policy and also the descriptions in our cookie consent solution may change from time to time. This includes developments due to changes in our business as well as adjustments due to changes in legislation and/or the implementation of new technologies or services on the website. Corresponding updates to the privacy policy will be published by us on this page. In case of significant changes, we will appropriately notify you. If you have any further questions that our privacy policy could not answer, please write an email to the following address: datenschutz@fcb.de

Version: June 2024