Information on the use of cookies

Cookie Policy

DFL Deutsche Fußball Liga GmbH, Guiolletstraße 44-46, D-60325 Frankfurt am Main („DFL“) uses different cookies on the following Websites:

 

Website

Language

Shorthand symbol

bundesliga.com

German

DE

English

EN

Spanish

ES

Japanese

JP

Official Fantasy Bundesliga (fantasy.bundesliga.de)

German

FM_DE

Offizieller Fantasy Bundesliga (fantasy.bundesliga.com)

English

FM_EN

 fan.bundesliga.com

English

CIM

   
   

 

(individually referred to as the 'Website' and collectively as the 'Websites”)

 

Cookies are small text files that are stored on the User’s end device and allow to recognize this end device. The Users have the option to adjust their browser's settings to prevent it from accepting the storage of cookies. Please note that in that case that certain parts of the respective Website may not work.

 

The following sections describes which categories of cookies are used on the Websites and which cookies belong to each category.

 

  1. 1. Strictly Necessary Cookies

Strictly necessary cookies are necessary for the respective Website to function and cannot be switched off by the Users. The legal basis for the use of these cookies are the legitimate interests of DFL pursuant to Art. 6 para. 1 sentence 1 f) GDPR. The legitimate interest of DFL results from the fact that DFL wants to ensure a secure and most efficient operation of the respective Website.

 

DFL uses the following strictly necessary cookies on the Websites:

 

Name

Domain(s)

First Party / Third Party

Lifespan

Description

Website(s)

AWSALB

www.origins.bundesliga.com

First Party

Session

This cookie from Amazon Web Services (AWS) is related to the operation of the Website via AWS. The cookie enables AWS to direct requests from a specific session to the same server whenever possible (so-called sticky session). This is mainly used to ensure that a session is not lost as a result of requests for a session being routed to different servers.

DE, EN, ES, JP, FM_DE, FM_EN

OptanonAlertBoxClosed

Domain der betreffenden Website

First Party

1 year

This cookie is set by us regarding the use of the cookie law compliance solution from OneTrust. It is set after Users have seen a cookie information notice and in some cases only when they actively close the notice down. It enables us not to show the message more than once to a user.

DE, EN, ES, JP, FM_DE, FM_EN

OptanonConsent

Domain der betreffenden Website

First Party

1 year

Dieses Cookie wird von uns im Rahmen der Verwendung der Cookie-Compliance-Lösung von OneTrust gesetzt. Es speichert Informationen über die verwendeten Kategorien von Cookies und darüber, ob Nutzer ihre Zustimmung zur Verwendung der einzelnen Kategorien gegeben oder zurückgezogen haben. Dadurch können wir verhindern, dass Cookies im Browser des Nutzers gesetzt werden, wenn keine Zustimmung erteilt wird.

DE, EN, ES, JP, FM_DE, FM_EN

 

  1. 2. Performance Cookies

These cookies enable DFL to analyse the use of the respective Website and to optimize the respective Website based on the User behaviour. DFL does not share information obtained from these cookies with third parties and does not use it for individual advertising. The legal basis for the use of these cookies are the legitimate interests of DFL pursuant to Art. 6 para. 1 sentence 1 f) GDPR. The legitimate interest of DFL results from the fact that DFL wants to analyse the use of the respective Website in order to make it as pleasant as possible for users.

 

DFL uses the following performance cookies on the Websites:

 

Name

Domain

First Party / Third Party

Lifespan

Description

Website(s)

__cfduid

highcharts.com

Third Party

30 days

This cookie from the content network Cloudfare is set by Highsoft, a company based in Norway that provides a data visualisation/charting service that we have embedded in the Website. The cookie is used by the content network Cloudfare in order to identify trusted web traffic.

DE, EN, ES, JP

__cfduid

instana.io

First Party

30 days

This cookie from the content network Cloudfare is used by our processor Instana Inc. (USA) as part of its performance analysis service in order to identity trusted web traffic.

DE, EN, ES, JP

_pk_id*

bundesliga.com

First Party

13 months

This cookie from Matomo (formerly: Piwik) provided by InnoCraft Ltd. (New Zealand) is used to help us track user behaviour and measure site performance. The cookie is used to store a few details about the User such as the unique visitor ID to distinguish unique returning Users and merge the data from previous visits. The cookie records statistics about User visits to the Website, such as the number of visits, average time spent on the Website and which pages were read. We do not share any information generated by this cookie with Matomo or any other third party.

DE, EN, ES, JP, FM_DE, FM_EN

_pk_ses*

bundesliga.com

First Party

30 minutes

This cookie from Matomo (formerly: Piwik) provided by InnoCraft Ltd. (New Zealand) is used to help us track User behaviour and to track page requests of the User during the session. The cookie is used to temporarily store data for the visit. We do not share any information generated by this cookie with Matomo or any other third party.

DE, EN, ES, JP, FM_DE, FM_EN

_pk_testcookie.2.09d7

mt.bundesliga.com

First Party

Session

This cookie from Matomo (formerly: Piwik) provided by InnoCraft Ltd. (New Zealand) is used to check if the User’s browser supports party cookies. 

DE, EN, ES, JP, FM_DE, FM_EN

AWSALB

mt.bundesliga.com

First Party

7 days

This cookie from Amazon Web Services (AWS) is related to the integration of Matomo via AWS on the Website. The cookie enables AWS to direct requests from a specific session to the same server whenever possible (so-called sticky session). This is mainly used to ensure that a session is not lost as a result of requests for a session being routed to different servers.

DE, EN, ES, JP, FM_DE, FM_EN

AWSALBCORS

mt.bundesliga.com

First Party

7 days

This cookie from Amazon Web Services (AWS) is related to the integration of Matomo via AWS on the Website. The cookie enables AWS to direct requests from a specific session to the same server whenever possible (so-called sticky session). This is mainly used to ensure that a session is not lost as a result of requests for a session being routed to different servers.

DE, EN, ES, JP, FM_DE, FM_EN

cf_ob_info

eum-eu-west-1.instana.io

First Party

4006 days (ca. 10 years)

This cookie from the content network Cloudfare is used by our processor Instana Inc. (USA) as part of its performance analysis service in order to identify trusted web traffic.

DE, EN, ES, JP

cf_use_ob

eum-eu-west-1.instana.io

First Party

4006 days (ca. 10 years)

This cookie from the content network Cloudfare is used by our processor Instana Inc. (USA) as part of its performance analysis service in order to identity trusted web traffic.

DE, EN, ES, JP

MATOMO_SESSID

mt.bundesliga.com

First Party

Session

This cookie from Matomo (formerly: Piwik) provided by InnoCraft Ltd. (New Zealand) if the User has used the opt-out feature regarding Performance Cookies or Matomo (formerly: Piwik). The cookie helps preventing cross site request forgery (CSRF) security issues.

DE, EN, ES, JP, FM_DE, FM_EN

test

Bundesliga.com

First Party

Session

This cookie from Matomo (formerly: Piwik) provided by InnoCraft Ltd. (New Zealand) is used to check if the User’s browser supports party cookies. 

DE, EN, ES, JP, FM_DE, FM_EN

 

  1. 3. Functional Cookies

These cookies enable DFL to provide enhanced functionality and personalisation on the respective Website. These cookies can be set by DFL or its processors whose services we have added to the respective Website.  If the User does not allow these cookies, then some or all of these services may not function properly. The legal basis for the use of these cookies are the legitimate interests of DFL pursuant to Art. 6 para. 1 sentence 1 f) GDPR. The legitimate interest of DFL results from the fact that DFL wants to offer a Website with as many functions and interesting content as possible.

 

DFL uses the following performance cookies on the Websites:

 

Name

Domain

First Party / Third Party

Lifespan

Description

Website(s)

 

 

 

 

 

 

 

 

 

 

  

 

 

 

_session_id

fantasy.bundesliga.com

fantasy.bundesliga.de

First Party

1 day

This cookie creates an interim session ID used as an in-session user ID. It ensures that the User is not logged out while playing the Official Fantasy Manager.

FM_DE, FM_EN

access_token

fantasy.bundesliga.com

fantasy.bundesliga.de

First Party

1 year

This cookie is used to identify guest players of the Official Fantasy Manager and enable them to continue to play with their team without registering.

FM_DE, FM_EN

     

 

dfl_predictor_refreshToken

predictor.bundesliga.com

First Party

14 days

The cookie is associated with the Official Bundesliga Predictor (available until June 30, 2021) and its internal user identity management to retain user sessions as a user browses within and performs game activities. In particular, the cookie is used to refresh user token. If declined, Predictor would not be able to identify a logged-in user and would default to anonymous mode instead.

 

dfl_predictor_accessToken

predictor.bundesliga.com

First Party

7 days

The cookie is associated with the Official Bundesliga Predictor (available until June 30, 2021) and its internal user identity management to retain user sessions as a user browses within and performs game activities. In particular, the cookie is used to detect Official Bundesliga Predictor users. If declined, the Official Bundesliga Predictor would not be able to identify a logged-in user and would default to anonymous mode instead.

 

DT

bundesliga.com

webview.bundesliga.com

fan.bundesliga.com

fantasy.bundesliga.com

fantasy.bundesliga.de

First Party

2 years

This cookie is associated with our customer identity management used for the registration of a Bundesliga Account and the subscription for the corresponding services (e.g. newsletter, official Fantasy Bundesliga) and login. Such customer identity management is provided by our processor Okta, Inc. (USA). This cookie stores the device identifier that is used for Multifactor Authentication (MFA) flows.

DE, EN, ES, JP, FM_DE, FM_EN, CIM

 

enduser_version

fan.bundesliga.com

 

First Party

Session

This cookie is associated with our customer identity management used for the registration of a Bundesliga Account and the subscription for the corresponding services (e.g. newsletter, official Fantasy Bundesliga) and login. Such customer identity management is provided by our processor Okta, Inc. (USA). This cookie determines which version of the end-user dashboard should be presented to the User.

CIM

 

     

 

     

 

     

 

     

 

     

 

     

 

     

 

     

 

JSESSIONID

bundesliga.com

webview.bundesliga.com

fan.bundesliga.com

fantasy.bundesliga.com

 

First Party

Session

This cookie is associated with our customer identity management used for the registration of a Bundesliga Account and the subscription for the corresponding services (e.g. newsletter, official Fantasy Bundesliga) and login. Such customer identity management is provided by our processor Okta, Inc. (USA). This cookie is used in conjunction with included JAVA components.

DE, EN, ES, JP, FM_DE, FM_EN

 

     

 

okta-oauth-nonce

bundesliga.com

webview.bundesliga.com

fan.bundesliga.com

fantasy.bundesliga.com

 

First Party

Session

This cookie is associated with our customer identity management used for the registration of a Bundesliga Account and the subscription for the corresponding services (e.g. newsletter, official Fantasy Bundesliga) and login. Such customer identity management is provided by our processor Okta, Inc. (USA). This cookie stores a number for identification that is only used once to maintain the User’s authentication state.

DE, EN, ES, JP, FM_DE, FM_EN

 

okta-oauth-redirect-params

bundesliga.com

webview.bundesliga.com

fan.bundesliga.com

fantasy.bundesliga.com

 

First Party

Session

This cookie is associated with our customer identity management used for the registration of a Bundesliga Account and the subscription for the corresponding services (e.g. newsletter, official Fantasy Bundesliga) and login. Such customer identity management is provided by our processor Okta, Inc. (USA). This cookie stores information that is used to maintain the User’s authentication state.

DE, EN, ES, JP, FM_DE, FM_EN

 

okta-oauth-state

bundesliga.com

webview.bundesliga.com

fan.bundesliga.com

fantasy.bundesliga.com

 

First Party

Session

This cookie is associated with our customer identity management used for the registration of a Bundesliga Account and the subscription for the corresponding services (e.g. newsletter, official Fantasy Bundesliga) and login. Such customer identity management is provided by our processor Okta, Inc. (USA). This cookie stores the User’s authentication state.

DE, EN, ES, JP, FM_DE, FM_EN

 

oktaStateToken

bundesliga.com

webview.bundesliga.com

fan.bundesliga.com

fantasy.bundesliga.com

 

First Party

1 hour

This cookie is associated with our customer identity management used for the registration of a Bundesliga Account and the subscription for the corresponding services (e.g. newsletter, official Fantasy Bundesliga) and login. Such customer identity management is provided by our processor Okta, Inc. (USA). This cookie stores the User’s authentication state and is used by Okta for the primary authentication flow.

DE, EN, ES, JP, FM_DE, FM_EN

 

SID

bundesliga.com

webview.bundesliga.com

fan.bundesliga.com

fantasy.bundesliga.com

 

First Party

Session

This cookie is associated with our customer identity management used for the registration of a Bundesliga Account and the subscription for the corresponding services (e.g. newsletter, official Fantasy Bundesliga) and login. Such customer identity management is provided by our processor Okta, Inc. (USA). This cookie stores the session identifier to maintain Users logged in during the session.

DE, EN, ES, JP, FM_DE, FM_EN

 

srfresh

bundesliga.com

webview.bundesliga.com

fan.bundesliga.com

fantasy.bundesliga.com

 

First Party

Session

This cookie is associated with our customer identity management used for the registration of a Bundesliga Account and the subscription for the corresponding services (e.g. newsletter, official Fantasy Bundesliga) and login. Such customer identity management is provided by our processor Okta, Inc. (USA). This cookie keeps track of when the User made the last action, so that Okta, Inc. knows when to show the “Keep me logged in” dialog to allow Users to keep their session alive during inactivity periods. Further details about the “Keep me logged in” function can be found in the privacv statement.

DE, EN, ES, JP, FM_DE, FM_EN

 

t

bundesliga.com

webview.bundesliga.com

fan.bundesliga.com

fantasy.bundesliga.com

 

First Party

Session

This cookie is associated with our customer identity management used for the registration of a Bundesliga Account and the subscription for the corresponding services (e.g. newsletter, official Fantasy Bundesliga) and login. Such customer identity management is provided by our processor Okta, Inc. (USA). This cookie stores the colour scheme used by the interface.

DE, EN, ES, JP, FM_DE, FM_EN

 

usersession

apester.com

First Party

91 days

This cookie is used by our processor Apester Ltd. (Israel) to display pop-up online quizzes, questionnaires and other interactive content on the Website.

DE, EN, ES, JP

 

 

  1. 4. Marketing and Analysis Cookies

These cookies enable DFL and their advertisement and analysis partners to create a profile of the Users’ interests and display relevant advertisements on the respective Website and other Websites. The personal data generated by these cookies is also collected and used by third parties (specified in the respective cookie description). Marketing and analysis cookies will only be used upon the User’s consent to the respective processing and use of the cookies. The legal basis for the use of these cookies is Art. 6 para. 1 sentence 1 a) GDPR. Users can withdraw their consent at any time with effect to the future by changing their cookie settings.

 

DFL uses the following marketing and analysis cookie on the Websites:

 

Name

Domain

First Party / Third Party

Lifespan

Description

Website(s)

__gads

bundesliga.com

Third Party

2 years

This cookie is associated with the Google Ad Manager service (formerly: DoubleClick for Publishers) from Google LLC (USA). Its purpose is to measure interactives with adverts on the Website and to prevent that adverts are repeated too often. The personal data collected by the cookie is also used by Google for its own purposes; more information can be found here.

DE, EN, ES, JP, FM_DE, FM_EN

_ga

 

bundesliga.com, bundesliga.de

Third Party

2 years

This cookie from Google Analytics provided by Google LCC (USA) is used to distinguish unique returning Users and merge the data from previous visits by assigning a randomly generated number as a user identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the Website analytics reports. The Website analytics reports help us to get a better understanding of how users are using our Website. The personal data collected by the cookie is also used by Google LLC (USA) for its own purposes; more information can be found here.

DE, EN, ES, JP, FM_DE, FM_EN

_gat_UA-55860599-1, _gat_UA-55860599-19

 

bundesliga.com, bundesliga.de

Third Party

1 minute

This is a _gat cookie from Google Analytics provided by Google LLC (USA) extended by a property ID. This cookie is used to throttle the rate of requests regarding Google Analytics. As long as it is set, certain data transfers to Google Analytics are prevented. The cookie ensures a trouble-free use of Google Analytics. The personal data collected by the cookie is also used by Google LLC (USA) for its own purposes; more information can be found here.

DE, EN, ES, JP, FM_DE, FM_EN

_gid

 

bundesliga.com, bundesliga.de

Third Party

1 day

This cookie from Google Analytics provided by Google LLC (USA) is used to distinguish unique returning Users and merge the data from previous visits by assigning a randomly generated number as a user identifier. It is included in each page request in the Website and used to calculate visitor, session and campaign data for the Website analytics reports. The sites analytics reports help us to get a better understanding of how Users are using our Website. The personal data collected by the cookie is also used by Google LLC (USA) for its own purposes; more information can be found here.

DE, EN, ES, JP, FM_DE, FM_EN

adtrc

adform.net

Third Party

7 days

This cookie is associated with AdForm and identifies if browser information was gathered.

DE, EN, ES, JP, FM_DE, FM_EN

C

track.adform.net

Third Party

31 days

This cookie is associated with AdForm and checks if the User’s browser accept cookies.

DE, EN, ES, JP, FM_DE, FM_EN

cid

track.adform.net

Third Party

60 days

This cookie is associated with AdForm and is used to store a few details about the User such as the unique visitor ID to distinguish unique returning Users.

DE, EN, ES, JP, FM_DE, FM_EN

GoogleAdServingTest

 

 

 

 

 

 

 

 

 

 

 

 

securepubads.g.doubleclick.net, www.origins.bundesliga.com, adservice.google.com, www.bundesliga.com, www.googletagservices.com

Third Party

Session

This cookie is associated with the Google Ad Manager service (formerly: DoubleClick for Publishers) from Google LLC (USA) and is used to determine what ads have been shown to the User. The personal data collected by the cookie is also used by Google (USA) for its own purposes; more information can be found here.

DE, EN, ES, JP, FM_DE, FM_EN

IDE

doubleclick.net

Third Party

390 days

This cookie is associated with the Google Ad Manager service (formerly: DoubleClick for Publishers) from Google LLC (USA). It is used to register and report the actions of the User on the Website after displaying or clicking on one of the advertisements of the provider, with the purpose of measuring the effectiveness of advertising and displaying targeted advertising for the User. The personal data collected by the cookie is also used by Google LLC for its own purposes; more information can be found here.

DE, EN, ES, JP, FM_DE, FM_EN

test_cookie

doubleclick.net

Third Party

1 day

This cookie is used by Google AdManager (formerly: DoubleClick for Publishers) provided by Google LLC (USA) to check if the User’s browser supports 3rd party cookies. More information can be found here.

DE, EN, ES, JP, FM_DE, FM_EN

TPC

adform.net

Third Party

7 days

This cookie is used by AdForm to check if the User’s browser supports 3rd party cookies. 

DE, EN, ES, JP, FM_DE, FM_EN

uid

adform.net

Third Party

60 days

This cookie is a unique identifier used by AdForm.

DE, EN, ES, JP, FM_DE, FM_EN

 

  1. 5. Social Media Cookies

These cookies are used by social media providers whose content DFL embeds into the respective Website. Among other things, they enable Users to distribute our content on social media. These cookies can track the Users’ browser across other sites and building up a profile of their interests. This may affect content and messages that Users see on other websites. So these cookies also serve marketing purposes.

 

Social media cookies will only be used upon the User’s consent to the respective processing and use of the cookies. The legal basis for the use of these cookies is Art. 6 para. 1 sentence 1 a) GDPR. Users can withdraw their consent at any time with effect to the future by changing their cookie settings.

 

DFL uses the following social media cookies on the Websites:

 

Name

Domain

First Party / Third Party

Lifespan

Description

Website(s)

csrftoken

.instagram.com

Third Party

1 year

This cookie from Instagram (an offer by Facebook) is used upon embedding an Instagram plugin into our Website. It used for IT security reasons and shall prevent Cross-Site Request Forgery attacks. More information can be found here.

DE, EN, ES, JP

datr

.facebook.com

Third Party

2 years

The purpose of this cookie is to identify the browser being used to connect to Facebook independent of the logged in User. It prevents the creation of fake and spam accounts, lowers the risk of accounts being taken over by other people, protects Facebook content and prevents DDoS attacks. More information can be found here

DE, EN, ES, JP

fbsr_#

www.bundesliga.com, www.origins.bundesliga.com

Third Party

2,914,618 days (ca. 7,985 years)

The cookie is set by Facebook when the User logs in via the social plugin on the Website. More information can be found here.

DE, EN, ES, JP, FM_DE, FM_EN

fr

.facebook.com

Third Party

91 days

This is an ad statistics cookie from Facebook that is set when a Facebook plugin is embedded on the Website. More information can be found here.

DE, EN, ES, JP, FM_DE, FM_EN

ig_cb

www.instagram.com

Third Party

36,524 days (ca. 100 years)

This cookie is set by Instagram (a service of Facebook) and is related to accepting the cookie banner from Instagram. More information can be found here.

DE, EN, ES, JP

ig_did

.instagram.com

Third Party

3,652 days (ca. 10 years)

This cookie is set by Instagram (a service of Facebook). More information can be found here.

DE, EN, ES, JP

lang

cdn.syndication.twimg.com

Third Party

Session

This cookie is set by Twitter and stores the language version of a website selected by the User to display the social media content accordingly. More information can be found here.

DE, EN, ES, JP

mid

.instagram.com

Third Party

3,652 days (ca. 10 years)

This cookie is set by Instagram (a service of Facebook). More information can be found here.

DE, EN, ES, JP

rur

.instagram.com

Third Party

Session

This cookie from Instagram (an offer by Facebook) is used upon embedding an Instagram plugin into our Website. It enables the correct functionality of these Instagram plugins such as embedded Instagram posts. Further information can be found here.

DE, EN, ES, JP

sb

.facebook.com

Third Party

2 years

This cookie from Facebook identifies the browser for login authentication purposes. More information can be found here

DE, EN, ES, JP, FM_DE, FM_EN