In the EU, Databricks uses 'legitimate interests' as a legal justification to process your data for purposes like marketing and fraud prevention without needing your explicit consent.
Databricks processes EU residents' personal data for marketing and other purposes under 'legitimate interests' without requiring consent — EU/UK residents can object to this processing at any time by contacting privacy@databricks.com, and Databricks must stop unless it can demonstrate compelling grounds.
Cross-platform context
See how other platforms handle Legitimate Interests as Legal Basis (GDPR) and similar clauses.
Compare across platforms →Legitimate interests is a flexible legal basis that Databricks can invoke broadly — EU users have the right to object to processing on this basis, which could stop direct marketing or certain data uses.
REGULATORY FRAMEWORK: Legitimate interests processing is governed by GDPR Art. 6(1)(f) and requires a three-part balancing test: (1) purpose test — is there a legitimate interest; (2) necessity test — is processing necessary; (3) balancing test — do data subject interests override. GDPR Art. 21 grants data subjects an absolute right to object to direct marketing processing on legitimate interests grounds. Recital 47 specifically addresses direct marketing as a potential legitimate interest. Enforced by EU DPAs and UK ICO under UK GDPR Art. 6(1)(f).
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.