EU, EEA, UK, and Swiss users have GDPR rights including access to their data, the right to have it deleted or corrected, the right to object to processing, and the right to take their data to another service.
This analysis describes what Garmin's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
GDPR rights are among the strongest data protection rights globally and are legally enforceable; identifying Garmin Ltd. in Switzerland as the data controller clarifies which entity is legally accountable for data collected outside the U.S.
Interpretive note: The one-stop-shop supervisory authority jurisdiction is uncertain given that the designated controller is Garmin Ltd. in Switzerland rather than an EU-established entity; EU users should verify which supervisory authority has primary jurisdiction for complaints.
If you are based in the EU, EEA, UK, or Switzerland, Garmin is legally required to respond to your requests to access, correct, erase, or port your personal data, and you can withdraw consent for health and biometric data processing at any time, which should stop that specific processing.
How other platforms handle this
If you are located in the EEA or UK, you may have the following rights under applicable data protection law: the right to access your personal data; the right to rectify inaccurate personal data; the right to erasure of your personal data; the right to restrict processing of your personal data; the ...
In addition to the above rights, your local laws (including those in the EU, UK, Japan, California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Virginia, or Utah) may afford you f...
If you are located in the European Economic Area or the United Kingdom, you have certain rights under applicable data protection laws, including the right to access, correct, or delete your personal data, the right to object to or restrict processing, and the right to data portability. You may also ...
Monitoring
Garmin has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"If you are located in the European Economic Area, Switzerland, or the United Kingdom, you have the right to access, correct, or erase your personal data; the right to restrict or object to our processing of your personal data; the right to data portability; and, where our processing is based on your consent, the right to withdraw that consent. Garmin Ltd. in Switzerland is the data controller for personal data collected from individuals located outside the United States.— Excerpt from Garmin's Garmin Privacy Statement
REGULATORY LANDSCAPE: This provision directly addresses GDPR (Regulation (EU) 2016/679) obligations including data subject rights under Articles 15 through 22, the right to withdraw consent under Article 7, and data portability under Article 20. UK GDPR applies similar standards for UK users post-Brexit. Switzerland's revised Federal Act on Data Protection applies to Swiss users. The designation of Garmin Ltd. (Switzerland) as data controller for non-U.S. users determines which supervisory authority has primary jurisdiction, which may be a Swiss authority given the Swiss establishment of the controller, with potential complexity regarding GDPR's one-stop-shop mechanism given Garmin Ltd.'s location outside the EU. GOVERNANCE EXPOSURE: Medium. The identification of Garmin Ltd. in Switzerland as the controller rather than a Garmin EU establishment may affect which supervisory authority has lead jurisdiction under GDPR's one-stop-shop mechanism, since the one-stop-shop applies to controllers with EU establishments. EU data subjects retain the right to lodge complaints with their local supervisory authority regardless. Compliance teams should verify whether Garmin has a designated EU representative under GDPR Article 27 and whether this affects supervisory authority relationships. JURISDICTION FLAGS: The designation of a Swiss controller creates complexity for EU/EEA users because Switzerland, while deemed adequate by the EU for data protection purposes, sits outside the GDPR one-stop-shop framework. UK users have separate rights under UK GDPR with the ICO as supervisory authority. Swiss users are governed by revFADP. CONTRACT AND VENDOR IMPLICATIONS: The identification of Garmin Ltd. as the controller should be reflected in all data processing agreements with subprocessors handling EU/EEA user data. If Garmin has EU-based subsidiaries processing data on behalf of Garmin Ltd., the intercompany data transfer arrangements should be reviewed for GDPR compliance. COMPLIANCE CONSIDERATIONS: Legal teams should confirm whether a GDPR Article 27 EU representative has been appointed by Garmin Ltd., verify that Standard Contractual Clauses for onward international transfers are updated to the 2021 European Commission versions, and ensure that data subject request fulfillment processes meet GDPR's one-month response deadline. The legal basis for each category of processing (consent, contract, legitimate interest) should be documented and made available to supervisory authorities on request.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
GDPR rights are among the strongest data protection rights globally and are legally enforceable; identifying Garmin Ltd. in Switzerland as the data controller clarifies which entity is legally accountable for data collected outside the U.S.
If you are based in the EU, EEA, UK, or Switzerland, Garmin is legally required to respond to your requests to access, correct, erase, or port your personal data, and you can withdraw consent for health and biometric data processing at any time, which should stop that specific processing.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Garmin.