GPS tracking in training: access, retention and contract clauses for performance data

GPS tracking can make routes, positions, speed and calculated performance values visible during training. For a club, this is not merely a technical training tool: the data can be linked to an individual player and can influence how that player is assessed. The purpose, access and limited retention period therefore matter.

A contract clause should not simply refer to “performance data”. It should explain which data are collected, who may see them, how they are evaluated and when they are deleted or anonymised. A GPS signal is not automatically health data. Additional questions arise if it is used to assess physical load or a state of health.

A GPS system initially records position and time data. Depending on the device and software, it may also produce distance, speed, acceleration, changes of direction, load zones or similar metrics. Even where a report displays only one number, the underlying information may be linked to an individual player. It should therefore be treated as personal information.

Before using the system, the club should define what the tracking is meant to achieve. A limited purpose might be planning training sessions, managing an individual workload or documenting an agreed training service. This is different from a later use for squad selection, contract talks, bonuses or disciplinary measures. Those purposes should not be inferred silently from the technical capability of the system.

The purpose belongs in the information provided to the player and in the contract documents. “Performance optimisation” alone is too open-ended. A clearer description states which sessions are recorded, which metrics are created and which decision the processing is intended to support.

The General Data Protection Regulation requires a legal basis for every processing activity and compliance with the principles in Article 5 GDPR. Article 6(1)(b) GDPR may be relevant where processing is genuinely necessary to perform the player contract. If tracking goes beyond that need, a legitimate-interest assessment under Article 6(1)(f) GDPR may have to be considered. Consent is not automatically the right solution in a contractual relationship.

The clause does not replace that assessment. It should nevertheless be specific enough for player and club to understand the intended processing. It should address purpose, data types, system, responsibility, recipients, evaluation, retention and the rights of the affected person. The Austrian Data Protection Act supplements the EU framework, including the fundamental right to data protection under section 1 DSG.

The club and player-contract page provides further orientation on responsibilities and contract records. For the financial effects of bonuses or benefits, the page on contract, remuneration and bonuses is a useful related resource.

Not every person at a club needs the same view. A coach may need selected aggregated values for training planning. Medical staff may need different information. The board, sporting management, scouting, data analysts or an external software provider should not automatically have access to every position point and time series.

A practical arrangement distinguishes raw data, automatically generated metrics and reports. A reduced report may be sufficient for daily training management. A complete track should be available only for a clearly described task. Access should be logged and adjusted when responsibilities change.

A disclosure to a service provider is a separate issue. The club needs to know where the data are processed, which instructions apply and whether the provider pursues its own purposes. If results are sent to scouts, other clubs or associations, there must be a traceable purpose and an appropriate legal basis.

GPS raw data are not health data merely because they come from training. The assessment may change if the club derives information about injuries, rehabilitation, physical capacity or a state of health and uses the information for that purpose. Article 9 GDPR then has to be considered. A contract clause should not hide this distinction behind a general label.

In daily practice, medical care should therefore be separated from sporting evaluation. A coach does not need every medical detail merely because training data are available. Conversely, a medical decision may require more information than a general workload overview. Role, purpose and necessary data volume must fit together.

Automated assessments require particular care. A load value is an evaluation, not a diagnosis. It should not be treated without further review as proof of fitness, unwillingness to perform or a contractual breach. The limits of the measurement belong in internal instructions and, for material uses, in the information provided to players.

Article 5(1)(e) GDPR requires personal data to be kept no longer than necessary for the purposes. GPS tracking therefore normally requires separate consideration of raw data, weekly or monthly reports and anonymised comparison values. What is needed to discuss one session does not have to remain identifiable for the entire contract or beyond it.

The clause should not use an open period such as “permanently” or “for sporting purposes”. It should state when raw data are deleted or anonymised, how long aggregated reports are needed and how backups are handled. After a club move or the end of the contract, ask whether a specific purpose still exists or whether the identifiable version must be removed.

Deletion must be practical. Responsibility, deadlines, backups and exports should be covered by a short deletion concept. The club must also be able to explain what data it processes. The right of access under Article 15 GDPR is not answered merely by saying that the data are stored in a training platform.

Agreeing only on “performance data”: That label does not show which GPS and evaluation data are processed. The data fields should be described specifically.

Giving every coach and official access: Access should follow the task and the necessary data volume. Club membership alone is not enough.

Keeping raw data indefinitely: Training archives need a purpose and a traceable deletion rule. A general permanent access rule is not adequate documentation.

Turning GPS figures into health conclusions: A load metric is not a medical diagnosis. Further use requires a separate assessment.

Using tracking for new purposes: Use for bonuses, selection or contract termination should not be derived later from an original training-planning purpose.

The player contract and amendments, privacy information, technical system description and internal access roles should be reviewed together. Sample reports, the metrics used, service-provider agreements and any bonus or selection rules are also useful.

If tracking is already in use, follow one concrete data flow: device, app, server, report, recipient and deletion. Also record whether some players are treated differently, whether health or injury information is added and whether data are sent to another organisation.

For the contract side, the club section and the privacy notice are relevant. The page on sporting regulations provides additional orientation where federation rules affect the process.

May a club collect GPS data during training?
It may be possible where purpose, legal basis, scope, information, access and retention fit together. The technical possibility alone is not enough.

Are GPS data automatically health data?
No. GPS raw data are not automatically special-category health data. This may change if they are processed to assess health or injury.

How long may the data be kept?
There is no single general period. The period must reflect the specific purpose and should be set separately for raw data, reports and anonymised values.

May the coach see all data?
Not automatically. Access should be limited to what is needed for the role. Raw data and aggregated reports may require different protections.

Must GPS tracking be written into the player contract?
The legal basis and information duties apply independently. A clear clause can nevertheless explain purpose, scope, access and deletion in an understandable way.

Start by organising purpose, data fields, technical platform and recipients. Separate raw data from reports and sporting from medical use. This makes the assessment of legal basis, access and retention more concrete.

A sound clause describes not only the tracking but also its limits. It should state which people receive which view, when data are deleted and whether a club move or contract end justifies further retention.

If you would like to receive new legal guidance on player contracts and sports law, you can subscribe to BRANDaktuelle Legal News.

Contact the firm
If you want a GPS clause in a player contract, existing training evaluations or data sharing with coaches and service providers reviewed, prepare the contract, privacy information and a sample report. Mag. Bernhard Brandauer, Rechtsanwalt, will clarify the next sensible steps with you.