We are happy to have you as a member in the biggest sports club in the world by membership. This privacy policy sets out how we handle your personal information if you are one of our members.
1. Responsible organisation and Data Protection Officer
The organisation responsible for processing your personal information is FC Bayern München eV, Säbener Straße 51-57, 81547 München, Email: mitglieder@fcbayern.com, Tel.: +49 (0)89 69931 555.
For questions on data protection please contact our Data Protection Officer at FC Bayern München eV, Säbener Straße 51-57, 81547 München, datenschutz@fcbayern.com. You are also welcome to use the postal service for confidential enquiries.
2. Personal data
Personal data is information that affects your personal and other circumstances that can be used to identify you or other people. This includes your name, your address, your date of birth and your email address as well as your bank and credit card details or your membership and customer number.
3. Collection and use of personal data
Below you will find detailed information on how we use your personal data
a. For active and passive members
We use the following personal data of active and passive members (hereinafter club members) for the following purposes:
i. Administration of your membership
For club members, we use the following personal data to administer and manage our active and passive membership: Form of address, title, gender, name, address, date of birth, nationality, email address, telephone number, bank details for SEPA direct debit mandates or credit card details, membership and customer number, date of joining and date of leaving, data on membership card, information on contribution administration (e.g. contribution group), department, position, status (active/passive), newsletter and contact preferences as well as information on disability status.
If you submit details of your disability status or send us a copy of your disabled person's pass, we are entitled to use that information exclusively for membership purposes (reduced contributions).
To enable you to keep your membership details up-to-date online at myFCB, we share them with FC Bayern München AG.
With junior club members we also collect the name, address, telephone number, email address and date of birth of the parent/guardian.
We use your personal data for the fulfilment of contracts (Section 6 Sub. 1 lit b GDPR). Your membership is the relevant contract. The personal data of parents/guardians are used based on our justified interests (Section 6 Sub. 1 lit. b GDPR). Our interest here is the administration of your child's membership.
We will only process information that you provide on your disability status with your prior permission (Section 6 Sub. 1 lit. a GDPR).
We process personal data for this purpose for the duration of the membership. In addition, we store your personal data for the assertion of, or defence against, legal claims or as long as there are legal obligations on storage.
ii. Payment of membership fees
If you are named as the contributor in the membership application and pay the membership fees for another person, we will process the following personal data: name, title, gender, address, date of birth, email address, telephone number, club member for whom the membership fees are paid, payment history, bank details for SEPA direct debit payments or credit cards. This is used to transfer the relevant payment to our bank or our credit card provider. We process your personal data to fulfil the contract (Section 6 Sub. 1 lit. b GDPR). The payment contract is the relevant contract.
We process the personal data for the duration of the membership or until the direct debit authorisation is withdrawn. In addition, we only store your personal data for the assertion of, or defence against, legal claims or as long as there are legal obligations on storage.
iii. Provision of services and benefits of your membership
We process the following personal data to provide the benefits of active and passive membership, in particular to enable you to benefit from your discount in the fan shop, participation in match ticket draws, access to the ticket resale market, reduced price tickets for home games and for the FC Bayern Erlebniswelt; also for sending out your membership card, the club magazine plus a personalised scarf as a welcome gift: name, title, gender, address, date of birth, email address, telephone number, entitlement to benefits, membership and customer number. If you want to use the services or benefits with other FC Bayern München companies, we will inform them that you are a member with us.
We process your personal data to fulfil the contract (Section 6 Sub. 1 lit. b GDPR). Your membership is the relevant contract.
We process the personal data for the duration of the membership. In addition, we only store your personal data for the assertion of, or defence against, legal claims or as long as there are legal obligations on storage.
iv. Congratulations on birthdays and anniversaries
We congratulate members on their birthdays via email or by post. On milestone birthdays (from the 50th birthday) and with membership anniversaries we also congratulate you in our club magazine. We use the following personal data: name, title, gender, date of birth, address, email address, start date, role in club.
When we congratulate you on your birthday or anniversaries by post or via email, we use personal data based on our legitimate interest (Section 6 Sub. 1 lit. a GDPR). Our interest here is management of the membership.
We only congratulate you on birthdays and anniversaries in our club magazine with your prior approval (Section 6 Sub. 1. a GDPR).
You can opt out of congratulations in our membership application or otherwise at any time directly via your user profile in myFCB or via the contact information contained in point 1.
We process your personal data until you have opted out of issuing congratulations or for the duration of membership. In addition, we only store your personal data for the assertion of, or defence against, legal claims or as long as there are legal obligations on storage.
v. Newsletter distribution
If you desire, we will process the following personal data to send you information on FC Bayern München eV, on offers and special offers via email: name, gender, email address, customer and membership number.
Subscription to the newsletter is only possible with your permission (Section 6 Sub. 1 lit. a GDPR). You can cancel the newsletter at any time via the link at the end of the newsletter or directly on your user profile on my FCB.
We process your personal data until you have withdrawn your consent. In addition, we only store your personal data for the assertion of, or defence against, legal claims or as long as there are legal obligations on storage.
vi. Answering your contact requests
We use the following personal data to answer your contact requests: name, email address, content of your message.
We process your personal data to fulfil the contract (Section 6 Sub. 1 lit. b GDPR).
We only process your personal data for as long as we need to answer your request. In addition, we only store your personal data for the assertion of, or defence against, legal claims or as long as there are legal obligations on storage.
b. For active members
If you are actively involved in sports in our departments then we will also process your personal data for the following purposes:
i. Training, games, organisation
We process the following personal data in particular to organise sporting activities, training and games and support active sportsmen and women: name, title, gender, address, date of birth, email address, telephone number, membership number, nationality, marital status, type of sport practised, coaches, information on sporting events (in particular training, tournaments and match days), information on content and delivery of player contracts (with contracted players), image and video material of games and training sessions (not for broadcast), travel data and documents, information on training camps, games, training notices.
With certain competitive sportsmen and women, we also process the following personal data: nutritional habits, data on players (previous career, injuries, permissions and player licences, doping test results as well as with contracted players other information arising from the day-to-day fulfilment of the player contract).
If and when required as part of your sporting activity, we will transfer the above-mentioned personal data to FC Bayern München AG (if you are a footballer) and FC Bayern München Basketball GmbH (if you are a basketball player).
We process your personal data to fulfil the contract (Section 6 Sub. 1 lit. b GDPR). The player contract (with contracted players) or your membership is the relevant contract.
We process the personal data for the duration of the membership. In addition, we only store your personal data for the assertion of, or defence against, legal claims or as long as there are legal obligations on storage.
ii. Communication within the scope of sporting activity
We process the following personal data of active club members to enable communication between coaches, support staff and players as well as (with juniors) their parents: name, telephone number, email address, information on and organisation of training sessions, matches and tournaments, training plans, content of communications.
We process your personal data to fulfil the contract (Section 6 Sub. 1 lit. b GDPR). Your membership is the relevant contract. We process the personal data of guardians/parents based on our own legitimate interest (Section 6 Sub. 1 lit. a GDPR). Our interest here is management of your child’s membership.
We process your personal data for the duration of membership. In addition, we only store your personal data for the assertion of, or defence against, legal claims or as long as there are legal obligations on storage.
iii. Assessment of your physical condition
We process the following personal data of active club members to assess your current physical condition in relation to your fitness and ability to take part in training and matches and, if necessary, carry out courses of treatment or support them: name, date of birth, health data. Health data particularly focus on your current physical condition (e.g. results of medical checks and doping tests), fitness, existing conditions, pre-existing illness or conditions, or other important health/therapeutic events that are important to you as a player and to us as a club.
If you are with us as a contracted player, we process your personal data to fulfil the contract (Section 6 Sub.. 1 lit. b GDPR). Your player contract is the relevant contract. If you are not a contracted player, we process your personal data with your consent (Section 6 Sub.. 1 lit. a GDPR) that we obtain from you separately.
We process the personal data until you finally no longer train with or play for the club or you have withdrawn your consent. In addition, we only store your personal data for the assertion of, or defence against, legal claims or as long as there are legal obligations on storage.
iv. Production and publication of images
Images of public events
We produce photographic and video recordings of public sport and club events (in particular photos from competitions and other public sporting events) that show our active members and we publish these in our club media (print and online) to inform and report on public sporting events.
We process your personal data for this purpose based on our legitimate interest on reporting the activities of our club (Section 6 Sub.. 1 lit. f GDPR).
We process personal data to fulfil this purpose. In addition, we only store your personal data for the assertion of, or defence against, legal claims or as long as there are legal obligations on storage.
Images from other events
We produce photographic and video recordings of other sporting activities (e.g. reports on individual players, training sessions, team trips or team photographs) that show our active members and we publish these in our club media (print and online) to inform and report on the particular activities.
We produce these photographic and video recordings of other sporting activities based on our legitimate interest of reporting on the activities of our club (Section 6 Sub.. 1 lit. f GDPR).
These images will only be published with your consent (Section 6 Sub.. 1 lit. a GDPR). You may withdraw your consent at any time. Publication of images based on consent before withdrawal remain legitimate. However, consent with multi-person images is irrevocable unless the weighting of interests is not in your favour.
We process your personal data – an event of publication – until withdrawal of your consent and otherwise up to the completion of the purpose pursued. In addition, we only store your personal data for the assertion of, or defence against, legal claims or as long as there are legal obligations on storage.
v. Registration with sporting associations
We process the following personal data in order to register club members, where required, with sporting associations to enable participation in competitions, to obtain insurance cover or funding and for managing announcements as well as carrying out annual announcements to our members: name, title, gender, date of birth, address, bank details, type of sport, and if required passport photo, membership of FC Bayern München eV, information on sporting performances, participation in competitions plus results lists. We impart this personal data for this purpose to the relevant associations, in particular the Bavarian State Sports Association as well as, if necessary, to the state associations and other participating clubs if required.
We process your personal data to fulfil the contract (Section 6 Sub. 1 lit. b GDPR). The relevant contract is your membership.
We process the personal data for the duration of membership. In addition, we only store your personal data for the assertion of, or defence against, legal claims or as long as there are legal obligations on storage.
4. Data sharing and transfer
We share your personal data in the specific cases named above under the individual data processing procedures. We also share your data in rare and subsequently described cases to third parties:
a. Data processor
As part of your membership your personal data is possibly shared with service providers who we work with on a daily basis and for the fulfilment of the membership relationship (e.g. IT providers (particularly FC Bayern München Digital & Media Lab AG & Co. KG), to produce the membership card or personalised scarf or for printing the club magazine). We have carefully selected the service providers and agreed data processing arrangements where legally required.
b. Medical and therapeutic staff
Personal data that we process from active members for the assessment of physical condition is shared where necessary externally with coaches, physiotherapists and doctors as well as similar therapeutic personnel responsible for you. Sharing your personal data will only happen with your specific consent (Section 6 Sub. 1 lit. a GDPR).
c. Other data receivers
We share your personal data otherwise only with third parties if and when this is legally prescribed or permitted (e.g. with agents) or to enforce legal claims or to investigate or prevent suspected or actually illegal activities. In these cases we will inform you of the relevant conveyance separately if and when this is legally required.
5. Your rights
You have the following legal rights relating to the personal data on you with FC Bayern München eV providing the relevant conditions apply. You can find out further information on your rights and the appropriate conditions on the website of the European Commission at https://ec.europa.eu/info/law/law-topic/data-protection/reform/rights-citizens_en.
a. Access to information
As the data subject you have the right to demand confirmation of whether we hold personal data that affects you. If that is the case, you have the right to be informed of this personal data as well as other information, e.g. the purpose of data processing, the recipients and the planned duration of storage or the criteria for setting that duration.
b. Right of correction and completion
As the data subject you have the right to immediately demand the correction of incorrect personal data. Taking into account the purposes of the data processing you have the right to demand completion of incomplete data.
c. Right of deletion
As the data subject you have the right of deletion. For example, this is the case if your personal data are no longer required for the original purpose, you have withdrawn your data protection consent or the personal data has been processed unlawfully.
d. Right to restriction of use
As the data subject you have the right to restriction of use in legally prescribed cases.
e. Right to data transferability
As the data subject you have the right to receive personal data relating to you in a structured, accessible and machine-readable format.
f. Right of objection
As the data subject you have the right at any time for reasons arising from your particular situation to object to the processing of certain personal data relating to you.
In the event of direct advertising, you have the right as the data subject to object at any time to the processing of your personal data for the purpose of third-party advertising.
g. Right to withdraw your data protection consent
You can withdraw your consent to processing your personal data at any time with immediate effect. Data processed before withdrawal is still valid.
h. Right to complain to a data protection authority
You have the right to complain to a data protection authority, in particular in the member state of your place of residence, your workplace or the location of a suspected breach if you are of the opinion that the processing of the personal data relating to you breaches the GDPR. The data protection authority covering FC Bayern München eV is the Bavarian State Office for Data Protection, Postfach 606, 91511 Ansbach. You can also submit your complaint to any other data protection authority.
6. Contact
If you have any questions on data protection, you can contact us or our Data Protection Officer. Contact information can be found under point 1.
As at: May 2019