Databricks Privacy Notice

This is Databricks' privacy policy, explaining how the company collects your name, email, company details, IP address, device data, and behavioral data when you visit their website, attend events, or use their data platform products. The most important thing to know is that Databricks shares your personal data with advertising partners, analytics providers, and third-party vendors, and California residents have the right to opt out of the 'sale' or 'sharing' of their personal data for cross-context behavioral advertising. You can exercise your rights — including data deletion, access, or opt-out of data sharing — by submitting a request at https://privacyportal.onetrust.com/webform/2b246c03-4c7b-479a-9ac6-a671c05f25b6/draft/e3c5c9cb-5e70-4073-b14e-5da0ae2ef640 or emailing privacy@databricks.com.

This document is Databricks' Privacy Notice governing the collection, use, storage, and sharing of personal data by Databricks, Inc. in connection with its website, marketing activities, and data platform products, relying on legal bases including consent, legitimate interests, and contractual necessity under applicable law. The most significant obligations created include Databricks' duty to respond to data subject rights requests (access, deletion, correction, portability, opt-out of sale/sharing), to maintain data retention schedules, and to provide notice of data sharing with third-party service providers, advertising partners, and business transaction counterparties. A notable provision is that Databricks explicitly distinguishes between its role as a data controller (for website visitors and prospects) and data processor (for customer-uploaded data under a separate agreement), which limits the scope of this notice and may create gaps in consumer understanding of how their data is handled within the platform. The notice engages GDPR (EU/EEA residents), UK GDPR, CCPA/CPRA (California residents), and references compliance with additional global privacy frameworks; Databricks designates EU and UK representatives and maintains a consent management mechanism via OneTrust. Material compliance considerations include the adequacy of cross-border data transfer mechanisms (SCCs), the sufficiency of cookie consent for non-essential tracking, and whether Databricks' legitimate interest assertions satisfy the GDPR balancing test.