FC Bayern München AG
The following information about data processing on our page on www.instagram.com or in the Instagram app ("Instagram Page") explains the data processing by
- us, FC Bayern München AG, Säbener Straße 51-57, D-81547 München, Deutschland („FC Bayern München“ or „We“), as operator of this Instagram Page, and
- Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Irland, („Meta“) as operator of the Instagram platform in the EU area („Instagram“).
We and Meta are each responsible for certain parts of the processing of your data when you use the Instagram Site. The main focus of the data processing lies with Meta. Below we explain how this works and what rights you have:
- I. Processing of personal Data by FC Bayern München
- Statistical evaluations
If you visit our Instagram Page and do not take any other active actions, we do not receive any personal data from you.
We use statistical evaluations of the use of our Instagram Page, which are provided to us by Meta via "Instagram Insights" in anonymized form. The evaluations include the following data in particular:
- Number of „likes“ on our posts
- Number of comments on our posts
- Number of people who have seen a post
- Number of times a post was shared
- Number of times a post was reported as spam
- Number of times it was clicked, that the user no longer likes the Instagram Page
This informations transmitted to us by Meta are anonymized. We cannot associate it with your person. However, this does not necessarily mean that the data collection and data processing by Meta itself is also anonymized. Please read the further information on data processing by Meta: https://de-de.facebook.com/help/instagram/155833707900388 and further down.
- Data categories
We only receive personal data from you when you actively click on something, e.g. when you like, post, share, comment or make other active contributions. We also receive your personal data when you use certain hashtags or when we share your Instagram posts.
Personal data we process is only the data that you publicly post on Instagram for us and other users to see ("Action Data") - e.g., your (user) name and the content published on your profile, if you have set this in your privacy settings on Instagram. We do not receive any Background Usage Data (such as your IP address or device number or any information you do not make public) or other "hidden" data either from you or from Meta.
Please do not share any special categories of personal information with us through Instagram, including, but not limited to, information about your health, religious beliefs, or sex life.
- Processing purposes
We process the Action Data solely for the purposes pursued by you and us on Instagram:
- Displaying you on our Instagram Page and operating our Instagram Page, as well as
- Responding to your private messages addressed to us (“Direct Message”) and your public messages, responses or posts addressed to us on Instagram or our Instagram Page.
In particular, we do not profile you or mix the Action Data with any other data we have about you - unless you specifically request it.
- Legal base
We process the Action Data on the basis of our legitimate interest in providing relevant content to our users and subscribers on Instagram and enabling you to use our Instagram Page and its functionalities (Art. 6 para. 1 lit. f DSGVO). When responding to your messages, replies or posts, the fulfillment of your request is the legal basis of our data processing (Art. 6 para. 1 lit. b DSGVO).
In individual cases, we may need your consent to process your Action Data, e.g. if a post we make includes a picture of you or if you order a newsletter via our Instagram Page. We will then explain further details about this data processing in connection with obtaining your consent.
- Storage duration
We process your Action Data for the described purposes only as long as this is necessary, i.e. generally as long as we operate our Instagram Page or as long as your active action on our Instagram Page is online or until we have conclusively answered your Direct Message. Beyond that, we only store the Action Data to fulfill any legal retention obligations.
- Data recipients
a. Processor. We may transfer your Action Data in connection with the purposes described here to external service providers, such as IT and service providers or advertising agencies. We have carefully selected these service providers and concluded data processing agreements with them.
b. Partner. In individual cases, we pass on your Action Data to other responsible parties who process the personal data for your own purposes, insofar as this is necessary for the execution of the contract or the provision of services, e.g. in the context of raffles. Our contractual partners may use the data thus transmitted exclusively for the purpose for which we transmitted it. The transmission of your Action Data for these purposes is carried out for the fulfillment of the contract (Art. 6 para. 1 lit. b DSGVO) or due to our legitimate interest (Art. 6 para. 1 lit. f DSGVO) to design our operation efficiently.
c. Other recipients. We will only transfer your action data to other recipients in individual cases if and to the extent this is required or permitted by law or in order to enforce legal claims or to investigate or prevent suspected or actual illegal activities. In these cases, we will inform you separately about the respective transfer, if and to the extent this is legally required.
d. Other Instagram-users. In addition, since Instagram is a public platform, potentially anyone can see your posts on Instagram.
- II. Data processing by Meta
- Usage data and posts
When you visit our Instagram Page, Meta also collects and processes your personal data, including your Action Data. We have no influence on what data Meta processes, to what extent and how, or whether and how Meta passes this data on to third parties, in particular to countries outside the European Union. It is your responsibility to familiarize yourself with this and decide whether you agree with it.
Essentially, to the best of our knowledge, Meta processes the following personal data about you when you use our Instagram Page or Instagram:
- Registration data, such as username, password, email address;
- Profile information, such as first and last name, phone number, picture;
- Log file information and usage data, such as web request, IP address, browser type, landing pages, pages viewed (even if you are not logged in - as far as technically possible); and
- Device ID, metadata such as hashtags, geotags, comments
Meta offers you the option to restrict the processing of your personal data by Meta in the privacy settings of your Instagram profile. You can find information about the privacy settings here (with further references): https://help.instagram.com/196883487377501/?helpref=hc_fnav&bc=368390626577968&bc=1757120787856285
- Data collection via cookies und app-interfaces
In addition, advertisers or other partners of Instagram or Meta may set cookies or similar technologies on your device. We have no control over this data processing.
You can find more information about cookies on Instagram here: https://help.instagram.com/155833707900388.
- III. Your data protection rights
- At FC Bayern München
You have the following legal rights with respect to the Action Data in relation to FC Bayern München AG, provided that the respective requirements are met. You can find more information about your rights and the relevant requirements on the website of the EU Commission at https://ec.europa.eu/info/law/law-topic/data-protection/reform/rights-citizens_de .
- Right of information
As a data subject, you have the right to request confirmation as to whether we are processing personal data relating to you. If this is the case, you have the right to obtain information about this personal data as well as further information, e.g. the processing purposes, the recipients and the planned duration of storage or the criteria for determining the duration.
- Right of rectification and completion
As a data subject, you have the right to request the rectification of inaccurate personal data without undue delay. Considering the purposes of the processing, you have the right to request the completion of incomplete personal data..
- Right of deletion („Right to be forgotten“)
As a data subject, you may have the right to have your personal data deleted. This is the case, for example, if your personal data is no longer necessary for the original purposes, you have revoke your declaration of consent under data protection law or the personal data was processed unlawfully.
- Right to restrict processing
As a data subject, you have the right to restrict processing in the cases prescribed by law.
- Right of data portability
As a data subject, in the cases prescribed by law you have the right to receive personal data concerning you you in a structured, common and machine-readable format.
- Right to object
As a data subject, you have the right to object the processing of certain personal data concerning you at any time on grounds relating to your particular situation.
In the event of direct marketing, you as the data subject have the right to object at any time to processing of personal data concerning you for the purposes of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.
- Right to revoke your data protection consent
You can revoke your consent to the processing of your personal data at any time with effect for the future. However, the lawfulness of the processing carried out until the revocation is not affected by this.
- Right to complain to a data protection authority
You have the right to lodge a formal complaint to a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR. Competent supervisory authority for the FC Bayern München AG is the Bavarian Data Protection Authority (https://www.lda.bayern.de/de/kontakt.html).
- At Meta