Template A1
Consent and data governance statement
Tells athletes in plain language what you collect, why, who sees it, how long you keep it and how to withdraw, with a consent block to sign.
Please note: This is a starting point. Have it reviewed against your national law before you use it.
How to use it
- Describe what your club really does today, not what it intends to do.
- Have the text reviewed locally before you adopt it.
- Brief athletes, and guardians of athletes under 16, before any device is switched on.
- Collect the signatures and keep them with your club records.
- Read the statement again at the end of each season. Policies drift as staff and platforms change.
What we tell the athlete
Write each answer in plain language, adapted to the athlete's age.
Each kind of data and the device or form it comes from. Collect only what you need. Example: Session RPE after each training session, on paper. Heart rate during training, from chest straps. Position data in selected sessions, from one shared GPS pod.
The coaching question the data helps to answer. Example: To see how hard each week was for each player, so that we can avoid sudden jumps in training load.
Name roles, not people. Scouts, agents and sponsors are not on the list. Example: Coaches only.
Only as long as the purpose needs. Example: Until the player leaves the club, plus 24 months. Then it is deleted.
Who to tell and what happens next. Saying no must not cost the athlete their place. Example: Tell the head coach. We stop collecting, and you can ask us to delete what we hold. It changes nothing about selection.
One named role and how to reach them.
Your rights
You can ask to see your data and to have mistakes corrected. You can ask to have your data deleted, within the limits the law sets. You can withdraw your consent.
Consent
Check the age threshold in your country.
For the club's records
Not part of what the athlete signs. It shows that the statement rests on a decision.
For wearable data, consent is usually the cleanest basis. Example: Consent, Article 6(1)(a).
Example: Explicit consent, Article 9(2)(a).
Certain breaches must be reported to the supervisory authority within 72 hours. A lost laptop counts.
The example answers are those of a grassroots youth academy, as in case 4.5.5 of Module 4 and the toolkit's sample plan.
Delete what you entered here?
