Information letter on the collection of personal data in relation to the use of the FC Bayern Munich recruiting platform and an application process in accordance with Art. 13 GDPR
1. Identity of the controller:
FC Bayern München AG
Säbener Straße 51-57
81547 Munich, Germany
Phone: +49 89 69931-0
legally represented by the Executive Board: Jan-Christian Dreesen, Dr. Michael Diederich, Max Eberl
2. Contact details of the data protection officer:
E-mail: datenschutz@fcbayern.com
Phone: +49 89 69931-0
3. Purposes for which personal data will be processed
We process and use your personal data in our career portal to ensure the effective and correct handling of the application process for the job offers advertised there. The data you provide will be stored in your application profile, which you can access at any time using your access data.
4. Legal basis of data processing
We process your personal data primarily to decide on the establishment of an employment relationship or to initiate or execute contractual relationships.
4.1 Contract
The legal basis for the processing of your personal data by the controller in the context of the decision on the establishment of an employment relationship is § 26 BDSG in conjunction with Art. 6 sec. 1 sentence 1 lit. b) GDPR for the initiation or implementation of employment relationships.
4.2 Legitimate interest
We may process your personal data if this is necessary to defend against legal claims asserted against us and your rights do not outweigh this. The legal basis for this is Art. 6 sec. 1 sentence 1 it. f) GDPR. An example of this would be a burden of proof in proceedings under the General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz).
4.3 Consent
The inclusion of your applicant profile in our talent pool takes place in accordance with Art. 6 sec. 1 sentence 1 lit. a) GDPR only with your express consent, which you can revoke at any time with effect for the future by sending an informal message to the above-mentioned controller. The talent pool is a database in which your data is stored in order to be able to consider you for future job advertisements.
In detail, this concerns the following data:
- Data required for the implementation of an application process (e.g. title, first and last name, address, e-mail address, telephone number)
- Letter of motivation, CV, certificates and other data on professional circumstances (e.g. termination period)
- Login data in the recruiting portal (e-mail address, password)
5. Recipients / Categories of recipients
The data, required for registration in the recruiting portal are received by FC Bayern München AG and SAP Deutschland SE & Co KG. Insofar as it is necessary for the application process, the required data will be forwarded to employees of FC Bayern München AG, to companies affiliated with it pursuant to §§ 15 et seq. German Stock Corporation Act (AktG) as well as to FC Bayern München e.V. and FC Bayern Basketball GmbH.
6. Transfer to a third country
An active transfer to a third country only takes place in cases where a job advertisement relates to a subsidiary abroad. Legally compliant transmission is ensured by the following measures:
- existing adequacy decision (Art. 45) or
- Binding Corporate Rules (Art. 46 sec. 2 lit. b) or
- EU standard data protection clauses (Art. 46 sec. 2 lit. c)
7. Duration of storage
In order to carry out the application process, we process and store your personal data for as long as is necessary to complete the process. Your personal data will generally be deleted 6 months after completion of the application process. You can also delete your user profile at any time with effect for the future. Your data will then no longer be available and any ongoing applications will be terminated. However, in individual cases, data may continue to be stored beyond this period if FC Bayern München AG has a legitimate interest in processing the data or if the person concerned has consented to his/her application documents being stored in the Talent Pool. Furthermore, data will not be erased in respect of data for which statutory provisions or official decisions require longer storage.
If the same data is collected on the basis of different legal bases, it will be deleted once the last legal basis no longer applies.
8. Rights of the data subject
As a data subject, you have the following rights under the GDPR:
- Information (Art. 15)
- Correction (Art. 16)
- Deletion (Art. 17)
- Restriction of processing (Art. 18)
- Object to processing (Art. 21)
- Data transferability (Art. 20)
- If applicable, revocation of consent (Art. 7 sec. 3)
9. Right to revoke consent
You can revoke your consent to inclusion in the talent pool at any time with effect for the future. The admissibility of the data processing carried out lawfully until the revocation is not affected by the revocation. Please address the revocation to the above-mentioned controller or data protection officer. The revocation has the effect described in Figure 7.
10. Right to complain to a data protection authority
You can also file a complaint with a data protection supervisory authority, for example if you believe that the data processing is not in compliance with data protection regulations. The address of the competent supervisory authority is
Bayerisches Landesamt für Datenschutzaufsicht
Postfach 1349
91504 Ansbach, Germany
11. Provision of the personal data mandatory or required
The provision of your personal data is necessary to carry out the application process. An application without data processing is not possible.