We are delighted that you are a member of the sports club with the largest number of members in the world. In this Privacy Policy you will find information about how we handle your personal data and what rights you have.
- Responsible body and data protection officer
FC Bayern München eV (referred to as "we" in this Privacy Policy), Säbener Straße 51-57, 81547 Munich, Germany, is responsible for the processing of your personal data in connection with your membership with us. You can reach us by e-mail at mitglieder@fcbayern.com or by phone at +49(0)89/69931-555.
If you have any questions about data protection, you can also contact our data protection officer directly at FC Bayern München eV, Säbener Straße 51-57, 81547 Munich, Germany, datenschutz@fcbayern.com at any time.
- Definitions
"Personal data" is information that relates to you or another person and that can be used to identify you or other persons – either directly or indirectly. This includes, for example, your name, your address, your date of birth or your e-mail address, but also your bank and credit card details or your membership and customer number. When we refer to "data" in this Privacy Policy, we mean personal data.
"Processing" means any handling of personal data, e.g. collecting, arranging, storing, modifying, copying, using or deleting.
- Collection and Use of personal data
Below you will find information on how we process your personal data:
a) For active and passive members
We process your personal data if you are an active or passive member of us (we collectively refer to them as "Association Members" in this Privacy Policy) for the following purposes:
i) Managing Your Membership
In order to manage and carry out your active or passive membership as a member of our association, we process the following data from you: Salutation (Ms., Mr. diverse, not specification), title (e.g., Prof., Dr.), first name, surname, address, date of birth, e-mail address, telephone/mobile number, bank details for SEPA direct debit or credit card details, membership and customer number, date of joining and, if applicable, leaving membership, information on the membership fee (e.g. contribution group), department and function in the association, membership status (active/passive), newsletter and communication preferences and also, if applicable, information on severely disabled status.
If you have provided us with information about your severely disabled status or send us a copy of your severely disabled pass, we will use this information for your membership so that you can receive a discount on your fee or discounted admission tickets. If you would like to receive discounted tickets due to your severely disabled status, we will pass this data on to FC Bayern München AG.
So that you can view your membership data online in myFCB and keep it up to date, we pass on your data listed above to FC Bayern München AG. FC Bayern München AG operates myFCB.
For underage members of the association, we also process the first and surname, address, telephone number, e-mail address and date of birth of the legal guardians.
We process your personal data in order to be able to fulfil the membership contract with you (Art. 6 para. 1 lit. b GDPR). We process the personal data of legal guardians on the basis of our legitimate interest in carrying out the child's membership (Art. 6 para. 1 lit. f GDPR). Without this information, we cannot execute the membership contract with you.
If you provide us with information about your severely disabled status, we will only process this with your prior explicit consent (Art. 9 para. 2 lit. a GDPR). You can revoke your consent at any time for the future. However, you will then no longer be able to purchase discounted tickets for the severely disabled.
We process the personal data for the administration of your membership as long as you are a member with us or have not revoked your consent to the processing of your severely disabled status. After that, we will only process your Personal Data if we need it to assert legal claims or defend ourselves against such claims, or as long as we have legal obligations to store it.
ii) Paying the membership fee for others
If you are entered in the membership application as a fee payer and pay the membership fee for another person, we process the following data from you: first name, surname, title, gender, address, date of birth, e-mail address, telephone number, name of the association member for whom the membership fee is paid, previous payments and type of payment, bank details for SEPA direct debit or credit card details. We pass on the required payment data to our bank or credit card service provider.
We process your personal data for the execution of the payment contract (Art. 6 para. 1 lit. b GDPR). Without this information, we cannot execute the membership contract with the club member for whom you are paying.
We process the personal data as long as the membership exists and is paid for by you as the payer, or until the direct debit authorization is withdrawn. After that, we will only process your personal data if we need it to assert legal claims or defend ourselves against such claims, or as long as we have legal obligations to store it.
iii) Your Use of Membership Services and Benefits
So that you can to take advantage of the benefits of active and passive membership, in particular, for example, discounts in the store, participation in the ticket raffle, access to the secondary ticket market, discounted tickets for home games and for the FC Bayern Erlebniswelt, and in order to send you your membership card, the club magazine and a personalized fan scarf as a welcome gift, we process the following data from you: first name, surname, title, gender, address, date of birth, email address, telephone number, entitlement to benefits, membership and customer number. If you use the desired services or benefits at other FC Bayern Munich companies, we will inform them that you are a member of our company.
If you wish to make use of services and benefits as a member of the KIDS CLUB, in particular to take part in events, we process the following data about you: first name, surname, title, gender, address, date of birth, e-mail address, telephone number, membership and customer number, first name and surname, address, telephone number, e-mail address and date of birth of your legal guardians. We forward this data to FC Bayern München AG and process some of it under joint responsibility. You can find more detailed information on the processing of personal data as part of the KIDS CLUB here
We process your personal data in order to be able to fulfil the membership contract with you (Art. 6 para. 1 lit. b GDPR). Without this information, we cannot grant you the benefits of active and passive membership.
We process the personal data for this purpose as long as you are a member of us. After that, we will only process your personal data if we need it to assert legal claims or defend ourselves against such claims, or as long as we have legal obligations to store it.
iv) Congratulations on birthdays and anniversaries
As a club member, we wish you a happy birthday by e-mail or by post. We will congratulate you on your milestone birthdays (from your 50th birthday) and, if you agree, on membership anniversaries in our club magazine. So that we can congratulate you, we process the following data from you: first name, surname, title, gender, date of birth, address, e-mail address, date of joining, function in the club.
When we congratulate you on birthdays and anniversaries by post or e-mail, we process your personal data on the basis of our legitimate interest in maintaining the relationship with our club members (Art. 6 para. 1 lit. f GDPR). You can object to the congratulations directly in your membership application or otherwise at any time directly via your user profile in myFCB or under the contact information given in section 1 of this privacy policy.
We will only congratulate you on birthdays and anniversaries in our club magazine if you have given your prior consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time for the future. However, congratulations already printed in the club magazine on the basis of your consent can no longer be revoked.
We process your personal data in connection with congratulations as long as you have not objected to the sending of congratulations or have not withdrawn your consent, or as long as you are a member with us. After that, we will only process your personal data if we need it to assert legal claims or defend ourselves against such claims, or as long as we have legal obligations to store it.
v) Sending newsletters
If you order information about FC Bayern München e.V., offers and promotions from us and FC Bayern by e-mail or other marketing communication ("newsletter"), we process the following data from you: first name, title, e-mail address, address, date of birth. We also process information for sending the newsletter to you (time of dispatch and content).
We require your consent to subscribe to the newsletter and send it to you (Art. 6 para. 1 lit. a GDPR). You can unsubscribe from the newsletter at any time via the link at the end of the newsletter or directly via your user profile in myFCB and thus revoke your consent.
The newsletter contains so-called "pixels". This allows us to determine whether or not you have opened or clicked on the newsletter. If we notice that you have not opened the newsletter for a longer period of time, we assume that you are no longer interested in the newsletter and delete yourself from the mailing list. In this way, we do not process your data for an unnecessarily long time and always have an up-to-date mailing list.
We process your data to recognize your interest on the basis of our legitimate interest in using a user-friendly and secure newsletter system that meets the expectations of subscribers (Art. 6 para. 1 lit. f) GDPR).
We process personal data for newsletters as long as (i) you do not revoke your consent or (ii) you show an interest in our newsletter. After that, we will only process your personal data if we need it to assert legal claims or defend ourselves against such claims, or as long as we have legal obligations to store it.
vi) Responding to your contact requests
When you contact us, we process the data you provide to us when you contact us in order to respond your request. As a rule, this is the following data: first name, surname, e-mail address, content of your request, time of your request, any other contact details such as address or telephone number, your membership number if applicable.
We process your personal data to fulfill the contract (Art. 6 (1) (b) GDPR).
We will only process your personal data until we have finally answered your request. In addition, we only process your personal data for the assertion of or defense against legal claims or as long as there are legal obligations to store it.
b) For active members
If you are active in one of our sports departments, we also process the following personal data about you for the purposes described:
i) Training, Games, Organization
We mainly process the following data from you in order to organize sports activities, training and games and to promote active athletes: first name, surname, title, gender, address, date of birth, e-mail address, telephone number, membership number, nationality, marital status, sport practiced, coach, information on sporting performance (in particular training, tournaments and match days), information on the content and execution of player contracts (for contract players), pictures and videos of matches and training sessions (not for publication), travel data and documents, information on training camps, matches, training notes.
For certain professional athletes, we also process the following personal data: dietary habits, player relationship data (career to date, injuries, permits and player licenses, doping test results, and for contracted players, other information that arises in the day-to-day performance of the player's contract).
We transfer the personal data listed in this section to FC Bayern München AG (if you are a footballer) and FC Bayern München Basketball GmbH (if you are a basketball player) if and to the extent necessary for your sporting activities.
We process your personal data to fulfill your player contract (for contract players) or your membership (in each case Art. 6 para. 1 lit. b GDPR).
We process this personal data for the described sporting purposes for as long as you are a member of our club or as long as your contract is valid. After that, we will only process your personal data if we need it to assert legal claims or defend ourselves against such claims, or as long as we have legal obligations to store it.
ii) Contact in the context of sports activities
In order to facilitate contact between coaches, support staff and players and (in the case of minors) their parents, we process the following personal data of you as an active member: first name, surname, telephone number, e-mail address, date of birth, information on training sessions, information on the organization of training sessions, matches and tournaments, training schedules, content of communications (messages and, if applicable, transcripts of telephone calls) with our coaches / support staff.
We process your personal data for the execution of your membership contract (Art. 6 para. 1 lit. b GDPR). We process the personal data of legal guardians on the basis of our legitimate interest in carrying out the child's membership (Art. 6 para. 1 lit. f GDPR). Without this information, we cannot execute the membership contract with you as an active member.
We process this personal data for the described sporting purposes, for as long as you are a member of our club or as long as your contract is valid. After that, we will only process your personal data if we need it to assert legal claims or defend ourselves against such claims, or as long as we have legal obligations to store it.
iii) Assessing your health
In order to assess your current state of health in connection with your fitness for sport and ability to participate in training and games, and also to carry out or support injury therapies, if necessary, we process the following data about you as an active club member: first name, surname, date of birth, health data. Health data is in particular information about your current state of health (e.g. results of medical checks and doping tests), fitness for sports, existing secondary illnesses, previous illnesses and injuries or other conditions that are important for you as a player and for us as a club for health and therapy.
If you are a contracted player with an employment contract with us, we process your personal data to fulfill your player employment contract (§ 26 para. 3 BDSG). Without this data, we cannot execute the player employment contract with you. If you are not a contracted player with an employment contract or do not have a player contract with us, we process your personal data with your express consent (Art. 9 para. 2 lit. a GDPR). You can revoke your consent at any time for the future.
We will process this personal data until you no longer train or play at our club, or you have withdrawn your consent. After that, we will only process your personal data if we need it to assert legal claims or defend ourselves against such claims, or as long as we have legal obligations to store it.
iv) Creating and Publishing Recordings
Recordings of public events
We take photos and videos of public sporting and club events (in particular photos of competitions and other public sporting events) in which you may be depicted as an active member and publish these in our club media (print and online) to inform and report on the public sporting events.
We process your personal data for this purpose on the basis of our legitimate interest in reporting on the activities of our association (Art. 6 para. 1 lit. f GDPR).
We process this personal data (i.e. the recordings and, if applicable, your name and information about the event) until the publication has taken place and as long as it exists. After that, we will only process your personal data if we need it to assert legal claims or defend ourselves against such claims, or as long as we have legal obligations to store it.
Recordings from other events
We take photos and videos of other sports activities (e.g. reports on individual players, training sessions, team outings or team photos), in which you may be depicted as an active member and publish these in our club media (print and online) in order to inform and report on the respective activities.
We take these photos and videos of other sports activities on the basis of our legitimate interest in reporting on the activities of our club (Art. 6 para. 1 lit. f GDPR).
We will only publish these recordings (together with your name and information about the event, if applicable) with your consent (Art. 6 (1) (a) GDPR). You can revoke your consent at any time for the future. We may not be able to undo the publication of the photographs based on your consent that took place before you withdrew your consent (e.g. if the photograph was printed). However, if several people can be seen in a picture, consent cannot be withdrawn unless your interests outweigh ours in relation to the picture in question.
We process your personal data – in the case of publication – until you withdraw your consent and otherwise until the publication has taken place and for as long as it exists. After that, we will only process your personal data if we need it to assert legal claims or defend ourselves against such claims, or as long as we have legal obligations to store it.
v) Notifications to sports federations
In order to register for participation in competitions, to report results, for membership registrations or to obtain insurance cover or funding, we pass on the following personal data from you to sports associations and other clubs: first name, surname, title, gender, date of birth, address, type of sport, profile photo if applicable, information on membership of FC Bayern München e.V., department of FC Bayern München e.V., Information on sports achievements, information on participation in competitions and results lists. The receiving sports associations are, in particular, the Bavarian State Sports Association and the state professional associations.
We process this personal data from you to fulfill your membership contract (Art. 6 para. 1 lit. b GDPR).
We process this personal data as long as you are a member of us. After that, we will only process your personal data if we need it to assert legal claims or defend ourselves against such claims, or as long as we have legal obligations to store it.
4) Disclosure of data to processors and other controllers
We have already informed you in this privacy policy for the purposes described if we pass on your data to other data controllers (e.g. associations, clubs or FC Bayern München AG). We only pass on your data to these other controllers for the purposes described and they may only process your data for these purposes described. In addition, we may pass on your data in the following cases:
a) Processor
We use service providers who support us in fulfilling the membership relationship with you on the basis of instructions from us. Such service providers, who may only process your data for us on instructions, are called processors. These are, in particular, IT service providers such as FC Bayern München Digital & Media Lab AG & Co. KG and companies that we commission to produce your membership card, your personalized fan scarf or to print the club magazine. We have carefully selected these service providers and concluded so-called order processing agreements with them. These processors do not process your data outside the European Economic Area and in most cases directly in Germany.
b) Medical and therapeutic staff
The personal data that we process from you as an active member as described in Section 3.b.iii. to assess your state of health may be passed on to external trainers, physiotherapists and doctors and similar therapeutic personnel responsible for you. This personal data will only be passed on with your separate express consent (Art. 9 para. 2 lit. a GDPR).
c) Joint Controllership
If your club membership is relevant in the context of myFCB (e.g. administration of your membership, see section 3. a) (i); application of member conditions when purchasing fan merchandise or tickets for football / basketball, see section 3. a) (ii); your use of services and benefits of your membership, see section 3. a) (iii)), your personal data will be processed by FC Bayern München AG and FC Bayern München Basketball GmbH in joint controllership with us. For this purpose, we have concluded a joint controllership agreement pursuant to Art. 26 GDPR. Please contact our data protection officer if you wish to assert data subject rights in connection with the relevant processing mentioned in this section. You will find the contact details of our data protection officer in section 1 of this privacy policy.
d) Other Controllers / Legal Obligations to Pass on / Enforce Legal Claims
Otherwise, we will only pass on your personal data to other controllers if we are legally obliged to do so or if we are permitted to do so without your consent (e.g. to consultants). We may also pass on your data if this is necessary to enforce legal claims or to investigate or prevent suspected or actual unlawful circumstances. In these cases, we will inform you separately about the respective disclosure if and to the extent that this is required by law.
5) Data Protection Rights
You have the following legal rights vis-à-vis FC Bayern München e.V. with regard to the personal data concerning you if the respective requirements are met. You can find further information on your rights and the relevant requirements on the EU Commission's website at https://ec.europa.eu/info/law/law-topic/data-protection/reform/rights-citizens_de .
a) Right to information
As the data subject (i.e. the person whose personal data is concerned), you have the right to request confirmation as to whether we are processing personal data concerning you. If this is the case, you have the right to information about this personal data and to further information, e.g. the processing purposes, the recipients and the planned duration of storage or the criteria for determining the duration.
b) Right to rectification and completion
As a data subject, you have the right to immediately request the rectification of inaccurate personal data. You also have the right to request the completion of incomplete personal data if this is possible due to the purposes of the processing.
c) Right to erasure
As a data subject, you may have the right to erasure. This is the case, for example, if your personal data is no longer necessary for the original purposes, if you have withdrawn your consent to data processing or if the personal data has been processed unlawfully.
d) Right to restriction of processing
As a data subject, you have the right to restrict processing if the law provides for this (e.g. if you dispute that your data is correct, but we still need to check this). We may then only process your data to a limited extent.
e) Right to data portability
As a data subject, you have the right to receive the personal data in a structured, commonly used and machine-readable format.
f) Right to object
As a data subject, you have the right to object to the processing of certain personal data concerning you at any time for reasons arising from your particular situation (e.g. because processing would have disadvantageous for you personally, but which would not exist for other persons and therefore we cannot know you without further ado).
In the case of direct marketing (i.e. advertising with which we address you directly, such as advertising by e-mail), you as the data subject have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising.
g) Right to withdraw your consent to data processing
You can withdraw your consent to the processing of your personal data at any time with effect for the future. We may process the data until you withdraw your consent.
h) Right to lodge a complaint with a data protection supervisory authority
You have the right to complain to a data protection supervisory authority, in particular in the EU country in which you reside, in which you work or in which the alleged infringement took place, if you believe that the processing of your personal data concerning you violates the GDPR. The competent supervisory authority for FC Bayern München e.V. is the Bavarian State Supervisory Authority for Data Protection (https://www.lda.bayern.de/de/kontakt.html).
6) Changes
We may change our Privacy Policy from time to time. This can happen, for example, if new processing purposes are added or the laws change. We will publish such adjustments to the privacy policy on this page. We will draw particular attention to any significant changes. If you have any further questions that our privacy policy could not answer, please send us an e-mail to the following address: datenschutz@fcbayern.com
Last update: January 2024