Video surveillance at SAP Garden

Datenschutzinformationen Videoüberwachung an Spieltagen des FC Bayern München Basketball
Privacy Information Video Surveillance on match days of FC Bayern München Basketball
This information applies only to FC Bayern München Basketball match days
On all other days, Red Bull Stadion München GmbH and/or others are responsible for video surveillance.
1. Background information on video surveillance on the grounds of the SAP Garden
The video surveillance on the grounds of the SAP Garden comprises the indoor area of the "SAP Garden" arena on the property with the postal address Toni-Merkens-Weg 4, 80809 München, Germany, including the entrances and the rooftop terrasse (altogether: "Grounds"). The site is equipped with appropriate signs indicating video surveillance.
Video surveillance is carried out exclusively to protect your security, the security of the SAP Garden and to protect and enforce your and our rights.
Video surveillance takes place without sound. Different types of cameras are used for video surveillance. Video surveillance cameras differ in how they work, i.e. whether and when they record (by switching command, permanently or after triggering motion sensors). The videos are monitored by our employees or service providers. There are only live images. There is no recording.
The video recordings may contain personal data in the form of recordings of natural persons. Special categories of people, such as minors or disabled people, can also be the subject of the video recordings.
At the same time, the police is using the same cameras to carry out their own video surveillance with recording. Please note the corresponding data protection information by the police.
2. Name and contact details of the controller; shared responsibility of FC Bayern München Basketball GmbH and Red Bull Stadion München GmbH:
FC Bayern München Basketball GmbH, Siegenburger Straße 45, 81373 Munich, Germany ("FCBB" or "We") and the Red Bull Station München GmbH (“RBSM”) are the controllers for video surveillance on the grounds. RBSM is responsible for video surveillance covering general areas of SAP Garden that are not related to game days of FCBB (welcome desk, goods delivery, ice rink; see RBSM's privacy policy linked on the video information signs). FCBB is responsible for other video surveillance on the premises.
FCBB and RBSM have entered into an agreement on joint responsibility and accountability pursuant to Art. 26 GDPR. Please contact our data protection officer to assert data subject rights in connection with the video surveillance mentioned here. You will find the contact details of our data protection officer in Section 3 of this privacy information.
3. Contact details of the Data Protection Officer
If you have any questions about our processing of your personal data, you can contact our Data Protection Officer at datenschutz@fcbayern.comor by post at the above address.
4. Data, purposes and legal basis of data processing
The video recordings of the video surveillance cameras are moving images. With these video recordings, it cannot be ruled out that specific persons can be identified. Special categories of people, such as minors or persons with disability, can also be the subject of the video recordings. This is especially the case if the images are enlarged during the recording by zooming.
The operation of the video cameras and the processing of video recordings with video surveillance cameras serves the following purposes:
•
Protection of property
•
Protection of the life, health, or freedom of persons on the premises
•
Prevention of criminal or administrative offenses or violations of league or association rules
•
Ensuring stadium safety
•
Management of visitor flows
•
Coordination of security personal in emergency
•
Preservation of evidence for the prosecution of legal violations, and
•
Enforcement of house rules and stadium bans
The legal basis for the recording and processing of the video recordings is the safeguarding of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR or § 4 para. 1 German Federal Data Protection Act (BDSG). We pursue the following interests in this regard: prosecution of criminal offenses and administrative offenses, enforcement and defence of civil law claims, compliance with basketball league regulations.
5. No Storage, duration of related processing
On match days, the video surveillance cameras are in some cases operated continuously, i.e. 24 hours a day. The videos are not stored.
After the live-video surveillance, FCBB only processes information in connection with incidents at SAP Garden and related personal data for the purpose of asserting or defending against legal claims, for the fulfilment of legal obligations, or for as long as legal obligations to store them exist.
6. Disclosure of your personal data
We will only share the video recordings, including your personal data, as follows:
a) Third-party service providers (processors)
We use service providers (including IT service providers) to assist us in the operation and maintenance of the video surveillance cameras and in the processing of the video recordings. We have carefully selected these service providers and entered into data processing agreements with them that meet the GDPR standard.
b) Other controllers (recipients of transmission)
Otherwise, we will only share your personal data with other controllers (i.e. those entities that process the personal data for their own purposes) if this is necessary and permitted by applicable data protection law.
This disclosure is justified either by our legitimate interest under Art. 6 para. 1 lit. f GDPR (e.g. to investigate or prevent suspected or actual illegal activity or to take action against infringers) or based on our legal obligations under Art. 6 para. 1 lit. c GDPR (e.g. disclosure to law enforcement authorities in criminal proceedings).
c) Recipients in third countries
If we transfer your personal data to processors or other controllers in countries outside the European Economic Area (EEA) (for example, in the USA), we implement the standards and security mechanisms required by law. We achieve this, for example, by agreeing on the so-called EU standard contract clauses. Please contact us as described in section 1 to learn more about the specific security mechanisms we use.
7. What are your legal rights?
You have the following legal rights vis-à-vis FCBB regarding personal data concerning you, provided that the respective requirements are met. You can find more information about your rights and the corresponding requirements on the EU Commission's website under https://ec.europa.eu/info/law/law-topic/data-protection/reform/rights-citizens_de.
You have the right to request confirmation from us as to whether personal data concerning you is being processed; if this is the case, you have the right to access about this personal data and to the information listed in detail in Art. 15 GDPR.
You have the right to request that we rectify incorrect personal data concerning you and, if necessary, complete incomplete personal data (Art. 16 GDPR).
You have the right to request that we delete personal data concerning you if one of the reasons listed in detail in Art. 17 GDPR applies, e.g. if the data is no longer needed for the purposes pursued (right to erasure).
You have the right to demand that we restrict the processing if one of the conditions listed in Art. 18 GDPR is met, e.g. if you have objected to the processing, for the duration of the review by the controller.
You have the right to object at any time to the processing of personal data concerning you on grounds relating to your particular situation. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims (Art. 21 GDPR).
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data concerning you violates the GDPR (Art. 77 GDPR). You can exercise this right with a supervisory authority in the Member State of your residence, place of work or place of the alleged infringement. In Bavaria, the competent supervisory authority is: Bavarian State Office for Data Protection Supervision (www.lda.bayern.de) Promenade 18, 91522 Ansbach, Phone: +49 (0) 981 180093-0, Fax: +49 (0) 981 180093-800.
8. Do you have any questions?
If you have any questions about this privacy information, please contact us using the contact details provided above.
We wish you a pleasant stay at the SAP Garden!
Version: October 2025