Cookie Policy
DFL Deutsche Fußball Liga GmbH, Guiollettstraße 44-46, D-60325 Frankfurt am Main (“DFL“) uses different cookies on the following Websites:
Website | Language | Shorthand symbol |
bundesliga.com | German | DE |
English | EN | |
Spanish | ES | |
French | FR | |
Japanese | JP | |
Portuguese | PT | |
Arabic | AR | |
Official Fantasy Bundesliga (fantasy.bundesliga.de) | German | FM_DE |
Offizieller Fantasy Bundesliga (fantasy.bundesliga.com) | English | FM_EN |
fan.bundesliga.com | English | CIM |
(individually referred to as the 'Website' and collectively as the 'Websites”)
Cookies are small text files that are stored on the User’s end device and allow to recognize this end device. The Users have the option to adjust their browser's settings to prevent it from accepting the storage of cookies. Please note that in that case that certain parts of the respective Website may not work.
The following sections describes which categories of cookies are used on the Websites and which cookies belong to each category.
- 1. Strictly Necessary Cookies
Strictly necessary cookies are necessary for the respective Website to function and cannot be switched off by the Users. The legal basis for the use of these cookies are the legitimate interests of DFL pursuant to Art. 6 para. 1 sentence 1 f) GDPR. The legitimate interest of DFL results from the fact that DFL wants to ensure a secure and most efficient operation of the respective Website.
DFL uses the following strictly necessary cookies on the Websites:
Name | Domain(s) | First Party / Third Party | Lifespan | Description | Website(s) |
AWSALB | www.origins.bundesliga.com | First Party | Session | This cookie from Amazon Web Services (AWS) is related to the operation of the Website via AWS. The cookie enables AWS to direct requests from a specific session to the same server whenever possible (so-called sticky session). This is mainly used to ensure that a session is not lost as a result of requests for a session being routed to different servers. | DE, EN, ES, FR, JP, PT, AR, FM_DE, FM_EN |
OptanonAlertBoxClosed | Domain of the respective Website | First Party | 1 year | This cookie is set by us regarding the use of the cookie law compliance solution from OneTrust. It is set after Users have seen a cookie information notice and in some cases only when they actively close the notice down. It enables us not to show the message more than once to a user. | DE, EN, ES, FR, JP, PT, AR, FM_DE, FM_EN |
OptanonConsent | Domain of the respective Website | First Party | 1 year | This cookie is set by us as part of the use of the cookie compliance solution from OneTrust. It stores information about the categories of cookies used and whether Users have given or withdrawn their consent to the use of the individual categories. This allows us to prevent cookies from being set in the user’s browser if consent is not given. | DE, EN, ES, FR, JP, PT, AR, FM_DE, FM_EN |
2. Performance Cookies
These cookies enable DFL to analyse the use of the respective Website and to optimize the respective Website based on the User behaviour. DFL does not share information obtained from these cookies with third parties and does not use it for individual advertising.
Performance cookies will only be used upon the User’s consent to the respective processing and use of the cookies. The legal basis for the use of these cookies is Art. 6 para. 1 sentence 1 a) GDPR. Users can withdraw their consent at any time with effect to the future by changing their cookie settings.
DFL uses the following performance cookies on the Websites:
Name | Domain | First Party / Third Party | Lifespan | Description | Website(s) |
_pk_id* | bundesliga.com | First Party | 13 months | This cookie from Matomo provided by InnoCraft Ltd. (New Zealand) is used to help us track user behaviour and measure site performance. The cookie is used to store a few details about the User such as the unique visitor ID to distinguish unique returning Users and merge the data from previous visits. The cookie records statistics about User visits to the Website, such as the number of visits, average time spent on the Website and which pages were read. We do not share any information generated by this cookie with Matomo or any other third party. | DE, EN, ES, FR, JP, PT, AR, FM_DE, FM_EN |
_pk_ses* | bundesliga.com | First Party | 30 minutes | This cookie from Matomo provided by InnoCraft Ltd. (New Zealand) is used to help us track User behaviour and to track page requests of the User during the session. The cookie is used to temporarily store data for the visit. We do not share any information generated by this cookie with Matomo or any other third party. | DE, EN, ES, FR, JP, PT, AR, FM_DE, FM_EN |
_pk_testcookie.2.09d7 | mt.bundesliga.com | First Party | Session | This cookie from Matomo provided by InnoCraft Ltd. (New Zealand) is used to check if the User’s browser supports party cookies. | DE, EN, ES, FR, JP, PT, AR, FM_DE, FM_EN |
AWSALB | mt.bundesliga.com | First Party | 7 days | This cookie from Amazon Web Services (AWS) is related to the integration of Matomo via AWS on the Website. The cookie enables AWS to direct requests from a specific session to the same server whenever possible (so-called sticky session). This is mainly used to ensure that a session is not lost as a result of requests for a session being routed to different servers. | DE, EN, ES, FR, JP, PT, AR, FM_DE, FM_EN |
AWSALBCORS | mt.bundesliga.com | First Party | 7 days | This cookie from Amazon Web Services (AWS) is related to the integration of Matomo via AWS on the Website. The cookie enables AWS to direct requests from a specific session to the same server whenever possible (so-called sticky session). This is mainly used to ensure that a session is not lost as a result of requests for a session being routed to different servers. | DE, EN, ES, FR, JP, PT, AR, FM_DE, FM_EN |
test | Bundesliga.com | First Party | Session | This cookie from Matomo provided by InnoCraft Ltd. (New Zealand) is used to check if the User’s browser supports party cookies. | DE, EN, ES, FR, JP, PT, AR, FM_DE, FM_EN |
3. Functional Cookies
These cookies enable DFL to provide enhanced functionality and personalisation on the respective Website. These cookies can be set by DFL or its processors whose services we have added to the respective Website. If the User does not allow these cookies, then some or all of these services may not function properly. The legal basis for the use of these cookies are the legitimate interests of DFL pursuant to Art. 6 para. 1 sentence 1 f) GDPR. The legitimate interest of DFL results from the fact that DFL wants to offer a Website with as many functions and interesting content as possible.
DFL uses the following performance cookies on the Websites:
Name | Domain | First Party / Third Party | Lifespan | Description | Website(s) |
__cfduid | highcharts.com | Third Party | 30 days | This cookie from the content network Cloudfare is set by Highsoft, a company based in Norway that provides a data visualisation/charting service that we have embedded in the Website. The cookie is used by the content network Cloudfare in order to identify trusted web traffic. | DE, EN, ES, JP |
__cfduid | instana.io | First Party | 30 days | This cookie from the content network Cloudfare is used by our processor Instana Inc. (USA) as part of its performance analysis service in order to identity trusted web traffic. | DE, EN, ES, JP |
_session_id | fantasy.bundesliga.com fantasy.bundesliga.de | First Party | 1 day | This cookie creates an interim session ID used as an in-session user ID. It ensures that the User is not logged out while playing the Official Fantasy Manager. | FM_DE, FM_EN |
access_token | fantasy.bundesliga.com fantasy.bundesliga.de | First Party | 1 year | This cookie is used to identify guest players of the Official Fantasy Manager and enable them to continue to play with their team without registering. | FM_DE, FM_EN |
cf_ob_info | eum-eu-west-1.instana.io | First Party | 4006 days (ca. 10 years) | This cookie from the content network Cloudfare is used by our processor Instana Inc. (USA) as part of its performance analysis service in order to identify trusted web traffic. | DE, EN, ES, JP |
cf_use_ob | eum-eu-west-1.instana.io | First Party | 4006 days (ca. 10 years) | This cookie from the content network Cloudfare is used by our processor Instana Inc. (USA) as part of its performance analysis service in order to identity trusted web traffic. | DE, EN, ES, JP |
dfl_predictor_refreshToken | predictor.bundesliga.com | First Party | 14 days | The cookie is associated with the Official Bundesliga Predictor (available until June 30, 2021) and its internal user identity management to retain user sessions as a user browses within and performs game activities. In particular, the cookie is used to refresh user token. If declined, Predictor would not be able to identify a logged-in user and would default to anonymous mode instead. | |
dfl_predictor_accessToken | predictor.bundesliga.com | First Party | 7 days | The cookie is associated with the Official Bundesliga Predictor (available until June 30, 2021) and its internal user identity management to retain user sessions as a user browses within and performs game activities. In particular, the cookie is used to detect Official Bundesliga Predictor users. If declined, the Official Bundesliga Predictor would not be able to identify a logged-in user and would default to anonymous mode instead. | |
DT | bundesliga.com webview.bundesliga.com fan.bundesliga.com fantasy.bundesliga.com fantasy.bundesliga.de | First Party | 2 years | This cookie is associated with our customer identity management used for the registration of a Bundesliga Account and the subscription for the corresponding services (e.g. newsletter, official Fantasy Bundesliga) and login. Such customer identity management is provided by our processor Okta, Inc. (USA). This cookie stores the device identifier that is used for Multifactor Authentication (MFA) flows. | DE, EN, ES, FR, JP, PT, AR, FM_DE, FM_EN, CIM |
enduser_version | fan.bundesliga.com | First Party | Session | This cookie is associated with our customer identity management used for the registration of a Bundesliga Account and the subscription for the corresponding services (e.g. newsletter, official Fantasy Bundesliga) and login. Such customer identity management is provided by our processor Okta, Inc. (USA). This cookie determines which version of the end-user dashboard should be presented to the User. | CIM |
JSESSIONID | bundesliga.com webview.bundesliga.com fan.bundesliga.com fantasy.bundesliga.com | First Party | Session | This cookie is associated with our customer identity management used for the registration of a Bundesliga Account and the subscription for the corresponding services (e.g. newsletter, official Fantasy Bundesliga) and login. Such customer identity management is provided by our processor Okta, Inc. (USA). This cookie is used in conjunction with included JAVA components. | DE, EN, ES, FR, JP, PT, AR, FM_DE, FM_EN |
matomo_ignore | mt.bundesliga.com | First Party | 30 years | This cookie from Matomo provided by InnoCraft Ltd. (New Zealand) is set if the User has used the opt-out (see Clause 3.1.2 of the privacy statement). Its purpose is to prevent Matomo from storing incoming scripts from the Website. | DE, EN, ES, FR, JP, PT, AR, FM_DE, FM_EN |
matomo_sessid | mt.bundesliga.com | First Party | Session | This cookie from Matomo provided by InnoCraft Ltd. (New Zealand) is created when a sub-page of the Website for which the opt-out option (see Clause 3.1.2 of the privacy statement) has been implemented is accessed. This takes place during the loading of an iframe for the opt-out when this sub-page is accessed. This cookie checks whether the opt-out has already been activated. | DE, EN, ES, FR, JP, PT, AR, FM_DE, FM_EN |
mtm_consent_removed | mt.bundesliga.com | First Party | 30 years | This cookie from Matomo provided by InnoCraft Ltd. (New Zealand) is installed if the User uses the opt-out (see Clause 3.1.2 of the privacy statement). Its purpose is to signal to our system that the User’s data should not be processed or analysed. | DE, EN, ES, FR, JP, PT, AR, FM_DE, FM_EN |
okta-oauth-nonce | bundesliga.com webview.bundesliga.com fan.bundesliga.com fantasy.bundesliga.com | First Party | Session | This cookie is associated with our customer identity management used for the registration of a Bundesliga Account and the subscription for the corresponding services (e.g. newsletter, official Fantasy Bundesliga) and login. Such customer identity management is provided by our processor Okta, Inc. (USA). This cookie stores a number for identification that is only used once to maintain the User’s authentication state. | DE, EN, ES, FR, JP, PT, AR, FM_DE, FM_EN |
okta-oauth-redirect-params | bundesliga.com webview.bundesliga.com fan.bundesliga.com fantasy.bundesliga.com | First Party | Session | This cookie is associated with our customer identity management used for the registration of a Bundesliga Account and the subscription for the corresponding services (e.g. newsletter, official Fantasy Bundesliga) and login. Such customer identity management is provided by our processor Okta, Inc. (USA). This cookie stores information that is used to maintain the User’s authentication state. | DE, EN, ES, FR, JP, PT, AR, FM_DE, FM_EN |
okta-oauth-state | bundesliga.com webview.bundesliga.com fan.bundesliga.com fantasy.bundesliga.com | First Party | Session | This cookie is associated with our customer identity management used for the registration of a Bundesliga Account and the subscription for the corresponding services (e.g. newsletter, official Fantasy Bundesliga) and login. Such customer identity management is provided by our processor Okta, Inc. (USA). This cookie stores the User’s authentication state. | DE, EN, ES, FR, JP, PT, AR, FM_DE, FM_EN |
oktaStateToken | bundesliga.com webview.bundesliga.com fan.bundesliga.com fantasy.bundesliga.com | First Party | 1 hour | This cookie is associated with our customer identity management used for the registration of a Bundesliga Account and the subscription for the corresponding services (e.g. newsletter, official Fantasy Bundesliga) and login. Such customer identity management is provided by our processor Okta, Inc. (USA). This cookie stores the User’s authentication state and is used by Okta for the primary authentication flow. | DE, EN, ES, FR, JP, PT, AR, FM_DE, FM_EN |
SID | bundesliga.com webview.bundesliga.com fan.bundesliga.com fantasy.bundesliga.com | First Party | Session | This cookie is associated with our customer identity management used for the registration of a Bundesliga Account and the subscription for the corresponding services (e.g. newsletter, official Fantasy Bundesliga) and login. Such customer identity management is provided by our processor Okta, Inc. (USA). This cookie stores the session identifier to maintain Users logged in during the session. | DE, EN, ES, FR, JP, PT, AR, FM_DE, FM_EN |
srfresh | bundesliga.com webview.bundesliga.com fan.bundesliga.com fantasy.bundesliga.com | First Party | Session | This cookie is associated with our customer identity management used for the registration of a Bundesliga Account and the subscription for the corresponding services (e.g. newsletter, official Fantasy Bundesliga) and login. Such customer identity management is provided by our processor Okta, Inc. (USA). This cookie keeps track of when the User made the last action, so that Okta, Inc. knows when to show the “Keep me logged in” dialog to allow Users to keep their session alive during inactivity periods. Further details about the “Keep me logged in” function can be found in the privacv statement. | DE, EN, ES, FR, JP, PT, AR, FM_DE, FM_EN |
t | bundesliga.com webview.bundesliga.com fan.bundesliga.com fantasy.bundesliga.com | First Party | Session | This cookie is associated with our customer identity management used for the registration of a Bundesliga Account and the subscription for the corresponding services (e.g. newsletter, official Fantasy Bundesliga) and login. Such customer identity management is provided by our processor Okta, Inc. (USA). This cookie stores the colour scheme used by the interface. | DE, EN, ES, FR, JP, PT, AR, FM_DE, FM_EN |
usersession | apester.com | First Party | 91 days | This cookie is used by our processor Apester Ltd. (Israel) to display pop-up online quizzes, questionnaires and other interactive content on the Website. | DE, EN, ES, JP |
4. Marketing and Analysis Cookies
These cookies enable DFL and their advertisement and analysis partners to create a profile of the Users’ interests and display relevant advertisements on the respective Website and other Websites. The personal data generated by these cookies is also collected and used by third parties (specified in the respective cookie description). Marketing and analysis cookies will only be used upon the User’s consent to the respective processing and use of the cookies. The legal basis for the use of these cookies is Art. 6 para. 1 sentence 1 a) GDPR. Users can withdraw their consent at any time with effect to the future by changing their cookie settings.
DFL uses the following marketing and analysis cookie on the Websites:
Name | Domain | First Party / Third Party | Lifespan | Description | Website(s) |
__gads | bundesliga.com | Third Party | 2 years | This cookie is associated with the Google Ad Manager service (formerly: DoubleClick for Publishers) from Google LLC (USA). Its purpose is to measure interactives with adverts on the Website and to prevent that adverts are repeated too often. The personal data collected by the cookie is also used by Google for its own purposes; more information can be found here. | DE, EN, ES, FR, JP, PT, AR, FM_DE, FM_EN |
adtrc | adform.net | Third Party | 7 days | This cookie is associated with AdForm and identifies if browser information was gathered. | DE, EN, ES, FR, JP, PT, AR, FM_DE, FM_EN |
AMP | bundesliga.com, bundesliga.de | First Party | 1 year | This cookie from Amplitude by Amplitude Inc. (USA) is used to calculate visitor and session data for the Website’s analytics reports. The analysis reports help us to gain a better understanding of how Users use our Website. Further information on data processing by Amplitude Inc. (USA) can be found here. | DE, EN, ES, FR, JP, PT, AR, FM_DE, FM_EN |
AMP_MKTG | bundesliga.com, bundesliga.de | First Party | 1 year | This cookie from Amplitude by Amplitude Inc. (USA) is used to calculate campaign data for our Website’s analysis reports. The analysis reports help us to gain a better understanding of how Users use our Website. Further information on data processing by Amplitude Inc. (USA) can be found here. | DE, EN, ES, FR, JP, PT, AR, FM_DE, FM_EN |
C | track.adform.net | Third Party | 31 days | This cookie is associated with AdForm and checks if the User’s browser accept cookies. | DE, EN, ES, FR, JP, PT, AR, FM_DE, FM_EN |
cid | track.adform.net | Third Party | 60 days | This cookie is associated with AdForm and is used to store a few details about the User such as the unique visitor ID to distinguish unique returning Users. | DE, EN, ES, FR, JP, PT, AR, FM_DE, FM_EN |
GoogleAdServingTest | securepubads.g.doubleclick.net, www.origins.bundesliga.com, adservice.google.com, www.bundesliga.com, www.googletagservices.com | Third Party | Session | This cookie is associated with the Google Ad Manager service (formerly: DoubleClick for Publishers) from Google LLC (USA) and is used to determine what ads have been shown to the User. The personal data collected by the cookie is also used by Google (USA) for its own purposes; more information can be found here. | DE, EN, ES, FR, JP, PT, AR, FM_DE, FM_EN |
IDE | doubleclick.net | Third Party | 390 days | This cookie is associated with the Google Ad Manager service (formerly: DoubleClick for Publishers) from Google LLC (USA). It is used to register and report the actions of the User on the Website after displaying or clicking on one of the advertisements of the provider, with the purpose of measuring the effectiveness of advertising and displaying targeted advertising for the User. The personal data collected by the cookie is also used by Google LLC for its own purposes; more information can be found here. | DE, EN, ES, FR, JP, PT, AR, FM_DE, FM_EN |
test_cookie | doubleclick.net | Third Party | 1 day | This cookie is used by Google AdManager (formerly: DoubleClick for Publishers) provided by Google LLC (USA) to check if the User’s browser supports 3rd party cookies. More information can be found here. | DE, EN, ES, FR, JP, PT, AR, FM_DE, FM_EN |
TPC | adform.net | Third Party | 7 days | This cookie is used by AdForm to check if the User’s browser supports 3rd party cookies. | DE, EN, ES, FR, JP, PT, AR, FM_DE, FM_EN |
uid | adform.net | Third Party | 60 days | This cookie is a unique identifier used by AdForm. | DE, EN, ES, FR, JP, PT, AR, FM_DE, FM_EN |
- Social Media Cookies
These cookies are used by social media providers whose content DFL embeds into the respective Website. Among other things, they enable Users to distribute our content on social media. These cookies can track the Users’ browser across other sites and building up a profile of their interests. This may affect content and messages that Users see on other websites. So these cookies also serve marketing purposes.
Social media cookies will only be used upon the User’s consent to the respective processing and use of the cookies. The legal basis for the use of these cookies is Art. 6 para. 1 sentence 1 a) GDPR. Users can withdraw their consent at any time with effect to the future by changing their cookie settings.
DFL uses the following social media cookies on the Websites:
Name | Domain | First Party / Third Party | Lifespan | Description | Website(s) |
csrftoken | .instagram.com | Third Party | 1 year | This cookie from Instagram (an offer by Facebook) is used upon embedding an Instagram plugin into our Website. It used for IT security reasons and shall prevent Cross-Site Request Forgery attacks. More information can be found here. | DE, EN, ES, JP |
datr | .facebook.com | Third Party | 2 years | The purpose of this cookie is to identify the browser being used to connect to Facebook independent of the logged in User. It prevents the creation of fake and spam accounts, lowers the risk of accounts being taken over by other people, protects Facebook content and prevents DDoS attacks. More information can be found here | DE, EN, ES, JP |
fbsr_# | www.bundesliga.com, www.origins.bundesliga.com | Third Party | 2,914,618 days (ca. 7,985 years) | The cookie is set by Facebook when the User logs in via the social plugin on the Website. More information can be found here. | DE, EN, ES, FR, JP, PT, AR, FM_DE, FM_EN |
fr | .facebook.com | Third Party | 91 days | This is an ad statistics cookie from Facebook that is set when a Facebook plugin is embedded on the Website. More information can be found here. | DE, EN, ES, FR, JP, PT, AR, FM_DE, FM_EN |
ig_cb | www.instagram.com | Third Party | 36,524 days (ca. 100 years) | This cookie is set by Instagram (a service of Facebook) and is related to accepting the cookie banner from Instagram. More information can be found here. | DE, EN, ES, JP |
ig_did | .instagram.com | Third Party | 3,652 days (ca. 10 years) | This cookie is set by Instagram (a service of Facebook). More information can be found here. | DE, EN, ES, JP |
lang | cdn.syndication.twimg.com | Third Party | Session | This cookie is set by X and stores the language version of a website selected by the User to display the social media content accordingly. More information can be found here. | DE, EN, ES, JP |
mid | .instagram.com | Third Party | 3,652 days (ca. 10 years) | This cookie is set by Instagram (a service of Facebook). More information can be found here. | DE, EN, ES, JP |
rur | .instagram.com | Third Party | Session | This cookie from Instagram (an offer by Facebook) is used upon embedding an Instagram plugin into our Website. It enables the correct functionality of these Instagram plugins such as embedded Instagram posts. Further information can be found here. | DE, EN, ES, JP |
sb | .facebook.com | Third Party | 2 years | This cookie from Facebook identifies the browser for login authentication purposes. More information can be found here | DE, EN, ES, FR, JP, PT, AR, FM_DE, FM_EN |