Information on the use of cookies

DFL Deutsche Fußball Liga GmbH, Guiolletstraße 44-46, D-60325 Frankfurt am Main („DFL“) uses different cookies on the following Websites:

 

Website

Language

Shorthand symbol

bundesliga.com

German

DE

English

EN

Spanish

ES

Japanese

JP

Official Fantasy Bundesliga (fantasy.bundesliga.de)

German

FM_DE

Offizieller Fantasy Bundesliga (fantasy.bundesliga.com)

English

FM_ES

Offizielles Bundesliga Predictor (tippspiel.bundesliga.de)

German

PR_DE

Offiziell Bundesliga Predictor (predictor.bundesliga.com)

English

PR_EN

 

(individually referred to as the Website and collectively as the Websites”)

 

Cookies are small text files that are stored on the User’s end device and allow to recognize this end device. The Users have the option to adjust their browser's settings to prevent it from accepting the storage of cookies. Please note that in that case that certain parts of the respective Website may not work.

 

The following sections describes which categories of cookies are used on the Websites and which cookies belong to each category

 

9.1 Strictly Necessary Cookies

Strictly necessary cookies are necessary for the respective Website to function and cannot be switched off by the Users. The legal basis for the use of these cookies are the legitimate interests of DFL pursuant to Art. 6 para. 1 sentence 1 f) GDPR. The legitimate interest of DFL results from the fact that DFL wants to ensure a secure and most efficient operation of the respective Website.

 

DFL uses the following strictly necessary cookies on the Websites:

 

Name

Domain(s)

First Party / Third Party

Lifespan

Description

Website(s)

AWSALB

www.origins.bundesliga.com

First Party

Session

This cookie from Amazon Web Services (AWS) is related to the operation of the Website via AWS. The cookie enables AWS to direct requests from a specific session to the same server whenever possible (so-called sticky session). This is mainly used to ensure that a session is not lost as a result of requests for a session being routed to different servers.

 

OptanonAlertBoxClosed

Domain der betreffenden Website

First Party

1 year

This cookie is set by us regarding the use of the cookie law compliance solution from OneTrust. It is set after Users have seen a cookie information notice and in some cases only when they actively close the notice down. It enables us not to show the message more than once to a user.

DE, EN, ES, JP, FM_DE, FM_EN, PR_DE, PR_EN

OptanonConsent

Domain der betreffenden Website

First Party

1 year

Dieses Cookie wird von uns im Rahmen der Verwendung der Cookie-Compliance-Lösung von OneTrust gesetzt. Es speichert Informationen über die verwendeten Kategorien von Cookies und darüber, ob Nutzer ihre Zustimmung zur Verwendung der einzelnen Kategorien gegeben oder zurückgezogen haben. Dadurch können wir verhindern, dass Cookies im Browser des Nutzers gesetzt werden, wenn keine Zustimmung erteilt wird.

DE, EN, ES, JP, FM_DE, FM_EN, PR_DE, PR_EN

 

9.2 Performance Cookies

These cookies enable DFL to analyse the use of the respective Website and to optimize the respective Website based on the User behaviour. DFL does not share information obtained from these cookies with third parties and does not use it for individual advertising. The legal basis for the use of these cookies are the legitimate interests of DFL pursuant to Art. 6 para. 1 sentence 1 f) GDPR. The legitimate interest of DFL results from the fact that DFL wants to analyse the use of the respective Website in order to make it as pleasant as possible for users.

 

DFL uses the following performance cookies on the Websites:

 

Name

Domain

First Party / Third Party

Lifespan

Description

Website(s)

__cfduid

highcharts.com

Third Party

30 days

This cookie from the content network Cloudfare is set by Highsoft, a company based in Norway that provides a data visualisation/charting service that we have embedded in the Website. The cookie is used by the content network Cloudfare in order to identify trusted web traffic.

 

__cfduid

instana.io

First Party

30 days

This cookie from the content network Cloudfare is used by our processor Instana Inc. (USA) as part of its performance analysis service in order to identity trusted web traffic.

 

_pk_id*

bundesliga.com

First Party

13 months

This cookie from Matomo (formerly: Piwik) provided by InnoCraft Ltd. (New Zealand) is used to help us track user behaviour and measure site performance. The cookie is used to store a few details about the User such as the unique visitor ID to distinguish unique returning Users and merge the data from previous visits. The cookie records statistics about User visits to the Website, such as the number of visits, average time spent on the Website and which pages were read. We do not share any information generated by this cookie with Matomo or any other third party.

 

_pk_ses*

bundesliga.com

First Party

30 minutes

This cookie from Matomo (formerly: Piwik) provided by InnoCraft Ltd. (New Zealand) is used to help us track User behaviour and to track page requests of the User during the session. The cookie is used to temporarily store data for the visit. We do not share any information generated by this cookie with Matomo or any other third party.

 

_pk_testcookie.2.09d7

mt.bundesliga.com

First Party

Session

This cookie from Matomo (formerly: Piwik) provided by InnoCraft Ltd. (New Zealand) is used to check if the User’s browser supports party cookies. 

 

AWSALB

mt.bundesliga.com

First Party

7 days

This cookie from Amazon Web Services (AWS) is related to the integration of Matomo via AWS on the Website. The cookie enables AWS to direct requests from a specific session to the same server whenever possible (so-called sticky session). This is mainly used to ensure that a session is not lost as a result of requests for a session being routed to different servers.

 

AWSALBCORS

mt.bundesliga.com

First Party

7 days

This cookie from Amazon Web Services (AWS) is related to the integration of Matomo via AWS on the Website. The cookie enables AWS to direct requests from a specific session to the same server whenever possible (so-called sticky session). This is mainly used to ensure that a session is not lost as a result of requests for a session being routed to different servers.

 

cf_ob_info

eum-eu-west-1.instana.io

First Party

4006 days

This cookie from the content network Cloudfare is used by our processor Instana Inc. (USA) as part of its performance analysis service in order to identify trusted web traffic.

 

cf_use_ob

eum-eu-west-1.instana.io

First Party

4006 days

This cookie from the content network Cloudfare is used by our processor Instana Inc. (USA) as part of its performance analysis service in order to identity trusted web traffic.

 

MATOMO_SESSID

mt.bundesliga.com

First Party

Session

This cookie from Matomo (formerly: Piwik) provided by InnoCraft Ltd. (New Zealand) if the User has used the opt-out feature regarding Performance Cookies or Matomo (formerly: Piwik). The cookie helps preventing cross site request forgery (CSRF) security issues.

 

test

Bundesliga.com

First Party

Session

This cookie from Matomo (formerly: Piwik) provided by InnoCraft Ltd. (New Zealand) is used to check if the User’s browser supports party cookies. 

 

 

9.3 Functional Cookies

These cookies enable DFL to provide enhanced functionality and personalisation on the respective Website. These cookies can be set by DFL or its processors whose services we have added to the respective Website.  If the User does not allow these cookies, then some or all of these services may not function properly. The legal basis for the use of these cookies are the legitimate interests of DFL pursuant to Art. 6 para. 1 sentence 1 f) GDPR. The legitimate interest of DFL results from the fact that DFL wants to offer a Website with as many functions and interesting content as possible.

 

DFL uses the following performance cookies on the Websites:

 

Name

Domain

First Party / Third Party

Lifespan

Description

Website(s)

_gig_lt / glt_<APIKey>

cdns.gigya.com

www.origins.bundesliga.com

bundesliga.com

www.bundesliga.com

fantasy.bundesliga.de

bundesliga.de

fantasy.bundesliga.com

predictor.bundesliga.com

 

First Party

1 year

This cookie which is extended by an API key is associated with our customer identity management used for the registration for our website services (e.g. newsletter, official Fantasy Bundesliga and official Bundesliga Predictor) and login. Such customer identity management is provided by our processor SAP America, Inc. (USA). This cookie serves as a login token for authentication. If declined, the login will fail.

 

 

_session_id

fantasy.bundesliga.com

fantasy.bundesliga.de

First Party

1 day

This cookie creates an interim session ID used as an in-session user ID. It ensures that the User is not logged out while playing the Official Fantasy Manager.

 

access_token

fantasy.bundesliga.com

fantasy.bundesliga.de

First Party

1 year

Dieses Cookie wird verwendet, um Gastspieler des Offiziellen Fantasy Managers zu erkennen, so dass sie mit ihrem Team weiterspielen können, ohne sich auf der Website registrieren zu müssen.

 

apiDomain_<apiKey>

cdns.eu1.gigya.com

First Party

1 year

This cookie is associated with our customer identity management used for the registration for our website services ((e.g. newsletter, official Fantasy Bundesliga and official Bundesliga Predictor) and login. Such customer identity management is provided by our processor SAP America, Inc. The cookie ensures that the shared domain Application Programming Interface (“API”) calls for all sites in a group should be sent to the same address. Without this cookie, single sign on will not work.

 

dfl_predictor_refreshToken

predictor.bundesliga.com

First Party

14 days

The cookie is associated with the Official Bundesliga Predictor and its internal user identity management to retain user sessions as a user browses within and performs game activities. In particular, the cookie is used to refresh user token. If declined, Predictor would not be able to identify a logged-in user and would default to anonymous mode instead.

 

dfl_predictor_accessToken

predictor.bundesliga.com

First Party

7 days

The cookie is associated with the Official Bundesliga Predictor and its internal user identity management to retain user sessions as a user browses within and performs game activities. In particular, the cookie is used to detect Official Bundesliga Predictor users. If declined, the Official Bundesliga Predictor would not be able to identify a logged-in user and would default to anonymous mode instead.

 

gig_bootstrap_<apiKey>

bundesliga.de

bundesliga.com

First Party

1 year

This cookie which is extended by an API key is associated with our customer identity management used for the registration for our website services (e.g. newsletter, official Fantasy Bundesliga and official Bundesliga Predictor) and login. Such customer identity management is provided by our processor SAP America, Inc. (USA) and this cookie is an internal one for the Web SDK. If declined, the User may be intermittently logged out.

 

gig_canary

cdns.eu1.gigya.com

bundesliga.com

First Party

1 year

This cookie is associated with our customer identity management used for the registration for our website services ((e.g. newsletter, official Fantasy Bundesliga and official Bundesliga Predictor) and login. Such customer identity management is provided by our processor SAP America, Inc. (USA). This cookie indicates whether the client is using the canary version of the WebSDK. If declined, the WebSDK canary version will not load. The regular version will load instead.

 

gig_canary_ver

www.bundesliga.com

First Party

1 year

This cookie is associated with our customer identity management used for the registration for our website services (e.g. newsletter, official Fantasy Bundesliga and official Bundesliga Predictor) and login. Such customer identity management is provided by our processor SAP America, Inc. (USA). This cookie refers to the version name of the WebSDK's canary version. Without the cookie, the WebSDK canary version will not load. The regular version will load instead.

 

gig_toggles

  

1 year

This cookie is associated with our customer identity management used for the registration for our website services (e.g. newsletter, official Fantasy Bundesliga and official Bundesliga Predictor) and login. Such customer identity management is provided by our processor SAP America, Inc. (USA). This cookie is used by the WebSDK to store what features are enabled in the WebSDK configuration.

 

gig3pctest

cdns.eu1.gigya.com

First Party

1 second

This cookie is associated with our customer identity management used for the registration for our website services (e.g. newsletter, official Fantasy Bundesliga and official Bundesliga Predictor) and login. Such customer identity management is provided by our processor SAP America, Inc. (USA) This is a temp cookie used to check if 3rd party cookies are blocked. 

 

gltexp_<apikey>

bundesliga.com

www.bundesliga.com

www.bundesliga.com

bundesliga.com

predictor.bundesliga.com

bundesliga.com

cdns.eu1.gigya.com

fantasy.bundesliga.de

fantasy.bundesliga.de

www.origins.bundesliga.com

bundesliga.com

www.bundesliga.com

fantasy.bundesliga.com

bundesliga.com

cdns.gigya.com

fantasy.bundesliga.de

First Party

1 year

This cookie which is extended by an API key is associated with our customer identity management used for the registration for our website services (e.g. newsletter, official Fantasy Bundesliga and official Bundesliga Predictor) and login. Such customer identity management is provided by our processor SAP America, Inc. (USA). This cookie is necessary for a proper login token expiration. If declined, session expiration will not function and the User will be considered 'Unauthorized'..

 

gmid

gigya.com

First Party

1 year

This cookie is associated with our customer identity management used for the registration for our website services (e.g. newsletter, official Fantasy Bundesliga and official Bundesliga Predictor) and login. Such customer identity management is provided by our processor SAP America, Inc. (USA). This cookie is used to identify the logged in User. If declined, the User cannot login.

 

hasGmid

gigya.com

First Party

13 months

This cookie is associated with our customer identity management used for the registration for our website services (e.g. newsletter, official Fantasy Bundesliga and official Bundesliga Predictor) and login. Such customer identity management is provided by our processor SAP America, Inc. (USA). This cookie is an internal one for the Web SDK. If declined, the User may be intermittently logged out.

 

ucid

gigya.com

First Party

13 months

This cookie is associated with our customer identity management used for the registration for our website services (e.g. newsletter, official Fantasy Bundesliga and official Bundesliga Predictor) and login. Such customer identity management is provided by our processor SAP America, Inc. (USA). Such cookie is a unique computer identifier used for generating reports, and used by the Web SDK to get saved response. If declined, in certain the login may not function.

 

usersession

apester.com

First Party

91 days

This cookie is used by our processor Apester Ltd. (Israel) to display pop-up online quizzes, questionnaires and other interactive content on the Website.

 

 

9.4 Marketing and Analysis Cookies

These cookies enable DFL and their advertisement and analysis partners to create a profile of the Users’ interests and display relevant advertisements on the respective Website and other Websites. The personal data generated by these cookies is also collected and used by third parties (specified in the respective cookie description). Marketing and analysis cookies will only be used upon the User’s consent to the respective processing and use of the cookies. The legal basis for the use of these cookies is Art. 6 para. 1 sentence 1 a) GDPR. Users can withdraw their consent at any time with effect to the future by changing their cookie settings.

 

DFL uses the following marketing and analysis cookie on the Websites:

Name

Domain

First Party / Third Party

Lifespan

Description

Website(s)

__gads

bundesliga.com

Third Party

2 years

This cookie is associated with the Google Ad Manager service (formerly: DoubleClick for Publishers) from Google LLC (USA). Its purpose is to measure interactives with adverts on the Website and to prevent that adverts are repeated too often. The personal data collected by the cookie is also used by Google for its own purposes; more information can be found here.

 

_ga

 

bundesliga.com, bundesliga.de

Third Party

2 years

This cookie from Google Analytics provided by Google LCC (USA) is used to distinguish unique returning Users and merge the data from previous visits by assigning a randomly generated number as a user identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the Website analytics reports. The Website analytics reports help us to get a better understanding of how users are using our Website. The personal data collected by the cookie is also used by Google LLC (USA) for its own purposes; more information can be found here.

 

_gat_UA-55860599-1, _gat_UA-55860599-19

 

bundesliga.com, bundesliga.de

Third Party

1 minute

This is a _gat cookie from Google Analytics provided by Google LLC (USA) extended by a property ID. This cookie is used to throttle the rate of requests regarding Google Analytics. As long as it is set, certain data transfers to Google Analytics are prevented. The cookie ensures a trouble-free use of Google Analytics. The personal data collected by the cookie is also used by Google LLC (USA) for its own purposes; more information can be found here.

 

_gid

 

bundesliga.com, bundesliga.de

Third Party

1 day

This cookie from Google Analytics provided by Google LLC (USA) is used to distinguish unique returning Users and merge the data from previous visits by assigning a randomly generated number as a user identifier. It is included in each page request in the Website and used to calculate visitor, session and campaign data for the Website analytics reports. The sites analytics reports help us to get a better understanding of how Users are using our Website. The personal data collected by the cookie is also used by Google LLC (USA) for its own purposes; more information can be found here.

 

adtrc

adform.net

Third Party

7 days

This cookie is associated with AdForm and identifies if browser information was gathered.

 

C

track.adform.net

Third Party

31 days

This cookie is associated with AdForm and checks if the User’s browser accept cookies.

 

cid

track.adform.net

Third Party

60 days

This cookie is associated with AdForm and is used to store a few details about the User such as the unique visitor ID to distinguish unique returning Users.

 

GoogleAdServingTest

 

 

 

 

 

 

 

 

 

 

 

 

securepubads.g.doubleclick.net, www.origins.bundesliga.com, adservice.google.com, www.bundesliga.com, www.googletagservices.com

Third Party

Session

This cookie is associated with the Google Ad Manager service (formerly: DoubleClick for Publishers) from Google LLC (USA) and is used to determine what ads have been shown to the User. The personal data collected by the cookie is also used by Google (USA) for its own purposes; more information can be found here.

 

IDE

doubleclick.net

Third Party

390 days

This cookie is associated with the Google Ad Manager service (formerly: DoubleClick for Publishers) from Google LLC (USA). It is used to register and report the actions of the User on the Website after displaying or clicking on one of the advertisements of the provider, with the purpose of measuring the effectiveness of advertising and displaying targeted advertising for the User. The personal data collected by the cookie is also used by Google LLC for its own purposes; more information can be found here.

 

test_cookie

doubleclick.net

Third Party

1 day

This cookie is used by Google AdManager (formerly: DoubleClick for Publishers) provided by Google LLC (USA) to check if the User’s browser supports 3rd party cookies. More information can be found here.

 

TPC

adform.net

Third Party

7 days

This cookie is used by AdForm to check if the User’s browser supports 3rd party cookies. 

 

uid

adform.net

Third Party

60 days

This cookie is a unique identifier used by AdForm.

 

 

9.5 Social Media Cookies

These cookies are used by social media providers whose content DFL embeds into the respective Website. Among other things, they enable Users to distribute our content on social media. These cookies can track the Users’ browser across other sites and building up a profile of their interests. This may affect content and messages that Users see on other websites. So these cookies also serve marketing purposes.

 

Social media cookies will only be used upon the User’s consent to the respective processing and use of the cookies. The legal basis for the use of these cookies is Art. 6 para. 1 sentence 1 a) GDPR. Users can withdraw their consent at any time with effect to the future by changing their cookie settings.

 

DFL uses the following social media cookies on the Websites:

 

Name

Domain

First Party / Third Party

Lifespan

Description

Website(s)

csrftoken

.instagram.com

Third Party

1 year

This cookie from Instagram (an offer by Facebook) is used upon embedding an Instagram plugin into our Website. It used for IT security reasons and shall prevent Cross-Site Request Forgery attacks. More information can be found here.

 

datr

.facebook.com

Third Party

2 years

The purpose of this cookie is to identify the browser being used to connect to Facebook independent of the logged in User. It prevents the creation of fake and spam accounts, lowers the risk of accounts being taken over by other people, protects Facebook content and prevents DDoS attacks. More information can be found here

 

fbsr_#

www.bundesliga.com, www.origins.bundesliga.com

Third Party

2914618 days

The cookie is set by Facebook when the User logs in via the social plugin on the Website. More information can be found here.

 

fr

.facebook.com

Third Party

91 days

This is an ad statistics cookie from Facebook that is set when a Facebook plugin is embedded on the Website. More information can be found here.

 

ig_cb

www.instagram.com

Third Party

36524 days

This cookie is set by Instagram (a service of Facebook) and is related to accepting the cookie banner from Instagram. More information can be found here.

 

ig_did

.instagram.com

Third Party

3652 days

This cookie is set by Instagram (a service of Facebook). More information can be found here.

 

lang

cdn.syndication.twimg.com

Third Party

Session

This cookie is set by Twitter and stores the language version of a website selected by the User to display the social media content accordingly. More information can be found here.

 

mid

.instagram.com

Third Party

3652 days

This cookie is set by Instagram (a service of Facebook). More information can be found here.

 

rur

.instagram.com

Third Party

Session

This cookie from Instagram (an offer by Facebook) is used upon embedding an Instagram plugin into our Website. It enables the correct functionality of these Instagram plugins such as embedded Instagram posts. Further information can be found here.

 

sb

.facebook.com

Third Party

2 years

This cookie from Facebook identifies the browser for login authentication purposes. More information can be found here.