Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
EEA, UK, and Swiss residents hold GDPR and equivalent rights including objection, restriction, data portability, and consent withdrawal, with Glean committing to cooperation with EU DPAs, the UK ICO, and the Swiss FDPIC for unresolved complaints.
This analysis describes what Glean's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the GDPR rights framework and the regulatory escalation pathway for EEA, UK, and Swiss residents, including named supervisory authorities for unresolved complaints, which is operationally relevant for compliance teams managing cross-border data transfers.
Under this clause, EEA, UK, and Swiss residents may exercise data portability, objection, processing restriction, and consent withdrawal rights by contacting privacy@glean.com, and may escalate unresolved complaints to their local data protection authority, the UK ICO, or the Swiss FDPIC.
Cross-platform context
See how other platforms handle GDPR Rights for EEA, UK, and Switzerland Residents and similar clauses.
Compare across platforms →Monitoring
Glean has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"If you are located in the EEA, UK, or Switzerland, you have the following additional rights under the GDPR and equivalent laws: The right to object to processing or request restriction of processing; The right to data portability; The right to withdraw consent at any time (without affecting the lawfulness of prior processing); The right to lodge a complaint with your local data protection authority. Glean cooperates with EU data protection authorities (DPAs), the UK ICO, and the Swiss Federal Data Protection and Information Commissioner regarding unresolved complaints relating to data transferred from those jurisdictions.Excerpt from Glean's Privacy Policy
1) REGULATORY LANDSCAPE: This provision implicates GDPR, the UK GDPR, and Switzerland's Federal Act on Data Protection, enforced respectively by EU national DPAs, the UK Information Commissioner's Office, and the Swiss Federal Data Protection and Information Commissioner. Standard Contractual Clauses approved by the European Commission are cited as the primary transfer mechanism for EEA data. 2) GOVERNANCE EXPOSURE: Medium. The statement's legal basis for processing, citing contract performance, legitimate interests, and consent, requires documentation of specific processing activities mapped to each basis, which compliance teams should verify against Glean's Records of Processing Activities. 3) JURISDICTION FLAGS: EEA and UK residents have access to supervisory authority complaint mechanisms with investigative and enforcement powers. Swiss residents have equivalent rights under the revised Federal Act on Data Protection. The statement's consent-based transfer language for website use may warrant evaluation under GDPR's transfer adequacy hierarchy. 4) CONTRACT AND VENDOR IMPLICATIONS: Enterprise customers in the EU and UK should ensure that their agreements with Glean include appropriate GDPR Article 28 data processing agreements and that Standard Contractual Clauses are executed for any relevant data transfers. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should audit whether Glean's processing activities are documented with specific legal bases, whether the Privacy Statement's legitimate interests claims are supported by documented legitimate interests assessments, and whether the 30-day response commitment satisfies GDPR's one-month response requirement.
This provision establishes the GDPR rights framework and the regulatory escalation pathway for EEA, UK, and Swiss residents, including named supervisory authorities for unresolved complaints, which is operationally relevant for compliance teams managing cross-border data transfers.
Under this clause, EEA, UK, and Swiss residents may exercise data portability, objection, processing restriction, and consent withdrawal rights by contacting privacy@glean.com, and may escalate unresolved complaints to their local data protection authority, the UK ICO, or the Swiss FDPIC.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Glean.