HILTON GLOBAL PRIVACY STATEMENT

Last updated: August 31, 2026

• Stated version of the Global Privacy Statement: last updated August 31, 2026 Legal Rights & Agreement Rules

• Introduction
• Personal Information We Collect
• Online and Mobile Information We Collect
• Your Rights and Choices
• Marketing Communications Choices
• How We Protect Personal Information
• How We Disclose Personal Information
• International Transfers
• Data Retention Periods
• Contact Information for Questions or Concerns
• Changes to this Statement

Appendix A: Additional Provisions Applicable to Residents of Certain Countries and U.S. States

Appendix A-1: California Residents

Appendix A-2: Nevada Residents

Appendix A-3: French Residents

Appendix A-4: Hong Kong Residents

Appendix A-5: Türkiye Residents

Appendix A-6: China Residents

Appendix A-7: Brazil Residents

Appendix A-8: Monaco Residents

Appendix A-9: Nigeria Residents

Appendix A-10: Korea Privacy Policy

Appendix A-11: Mexico Residents

Appendix A-12: Albania Residents

Appendix B: Hilton Premium Club Japan Program

1. Introduction

Hilton’s mission is to be the most hospitable company in the world. We’re passionate about delivering exceptional guest experiences, and we look forward to welcoming you to our hotels so we can share the light and warmth of hospitality with you.

• Hilton's mission, its privacy pledge, and what the Statement explains Legal Rights & Agreement Rules

We pledge to deliver the highest level of customer service, which includes respecting your privacy and protecting your personal information. In this privacy statement (“Statement”), we provide you with details about how we collect, use, and disclose your personal information.

• Hilton's mission, its privacy pledge, and what the Statement explains Legal Rights & Agreement Rules

This Statement applies to Hilton Worldwide Holdings Inc., its subsidiaries, and all of the hotels within the Hilton Portfolio of Brands (collectively, "Hilton," "we," or "us"). Our Portfolio of Brands includes Waldorf Astoria Hotels & Resorts, LXR Hotels & Resorts, Conrad Hotels & Resorts, Canopy by Hilton, Signia by Hilton, Hilton Hotels & Resorts, Curio Collection by Hilton, DoubleTree by Hilton, Tapestry Collection by Hilton, Embassy Suites by Hilton, Tempo by Hilton, Motto by Hilton, Hilton Garden Inn, Hampton by Hilton, Tru by Hilton, Spark by Hilton, Homewood Suites by Hilton, Home2 Suites by Hilton, LivSmart Studios by Hilton, Graduate by Hilton, NoMad, Outset Collection by Hilton, Apartment Collection by Hilton, Select by Hilton, and Undergraduate by Hilton.

• Entities the Statement applies to: Hilton Worldwide Holdings, its subsidiaries and all Portfolio brands Legal Rights & Agreement Rules

By using any of our products or services and/or by agreeing to this Statement, e.g., in the context of registering for any of our products or services, you understand and acknowledge that we will collect and use personal information as described in this Statement.

• Using Hilton products or agreeing to the Statement acknowledges collection and use Legal Rights & Agreement Rules

Please note that this Statement does not apply to our processing of personal information on behalf of and subject to the instructions of third parties such as airlines, car rental companies and other service providers, companies that organize or offer packaged travel arrangements, marketing partners, or certain corporate customers.

• The Statement does not cover Hilton's processing for other companies Data Access & Collection

Hilton Domestic Operating Company Inc., a corporation in the United States duly organized and existing under the laws of the State of Delaware, is the Hilton entity that is the data controller for all guest data and operates, among other things, Hilton’s marketing activities. Hilton Domestic Operating Company Inc. is a subsidiary of Hilton Worldwide Holdings Inc.

• Hilton Domestic Operating Company Inc. is the data controller for guest data Legal Rights & Agreement Rules

The Hilton Portfolio of Brands includes managed, franchised, and joint venture hotels. Franchised hotels are operated by entities that are separate from Hilton. Joint venture hotels are operated by entities that are partially owned and/or controlled by Hilton. In addition to Hilton Domestic Operating Company Inc., those entities may be independent data controllers for guest data.

• Franchised and joint-venture hotels are separate entities and may be independent controllers Legal Rights & Agreement Rules

Back to Top

2. Personal Information We Collect

Collection of Personal Information – Generally

The following summarizes the categories of personal information we have collected in the past 12 months, the sources for those categories of personal information, the business or commercial purposes for which the information was collected, the categories of third parties with whom the information may have been shared, as permitted by law, and whether the information was sold to a third party for a business or commercial purpose within the past 12 months. Certain categories of personal information collected are required in order for us to provide you with the requested products or services, and if you choose not to provide us with such information, we may not be able to provide you with these products or services. If consent is required, we will obtain your explicit, informed consent before collecting, processing, selling, or sharing your personal information. For additional information on how we share personal information, please refer to the How We Disclose Personal Information section.

• What the collection summary covers, the required-information limit, and the consent promise Data Access & Collection

Collapse All

Name

• Name: collected from the guest, from booking platforms and credit card providers, and from demographics companies Data Access & Collection

We have obtained this personal information from the following sources:

• Name: collected from the guest, from booking platforms and credit card providers, and from demographics companies Data Access & Collection

Directly from consumers themselves

• Name: collected from the guest, from booking platforms and credit card providers, and from demographics companies Data Access & Collection

From third parties such as travel booking platforms and credit card providers

• Name: collected from the guest, from booking platforms and credit card providers, and from demographics companies Data Access & Collection

From demographics companies

• Name: collected from the guest, from booking platforms and credit card providers, and from demographics companies Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Name: collected from the guest, from booking platforms and credit card providers, and from demographics companies Data Access & Collection

Fulfill guest reservations

• Name: collected from the guest, from booking platforms and credit card providers, and from demographics companies Data Access & Collection

Send guests communications relating to their reservations

• Name: business purposes Hilton says it collected the name for Use & Processing

Administer membership and activity in the Hilton Honors loyalty program

• Name: business purposes Hilton says it collected the name for Use & Processing

Provide customer service and support

• Name: business purposes Hilton says it collected the name for Use & Processing

Verify identity

• Name: business purposes Hilton says it collected the name for Use & Processing

Send marketing communications via email, direct mail, and social media

• Name: business purposes Hilton says it collected the name for Use & Processing

Perform analytics to provide guests with personalized offers and content

• Name: business purposes Hilton says it collected the name for Use & Processing

Perform analytics to improve business operations

• Name: business purposes Hilton says it collected the name for Use & Processing

Determine guests’ eligibility for special or promotional rates

• Name: business purposes Hilton says it collected the name for Use & Processing

Process payments, including conducting strong customer authentication (SCA) when required by law

• Name: business purposes Hilton says it collected the name for Use & Processing

Process transactions with partners

• Name: business purposes Hilton says it collected the name for Use & Processing

Administer contests and sweepstakes

• Name: business purposes Hilton says it collected the name for Use & Processing

Optimize our websites and mobile apps

• Name: business purposes Hilton says it collected the name for Use & Processing

Detect and prevent fraud

• Name: business purposes Hilton says it collected the name for Use & Processing

We have shared this personal information with the following categories of third parties

• Name: third parties the name was shared with, and the sale statement Sharing & Disclosure

Service providers who perform tasks on behalf of Hilton, which may include those who send marketing communications on our behalf

• Name: third parties the name was shared with, and the sale statement Sharing & Disclosure

Hilton’s Third-Party Partner

• Name: third parties the name was shared with, and the sale statement Sharing & Disclosure

Payment card issuers and payment processors

• Name: third parties the name was shared with, and the sale statement Sharing & Disclosure

Employers pursuant to corporate agreements, employee consent, and as permitted by law

• Name: third parties the name was shared with, and the sale statement Sharing & Disclosure

Entities that have arranged a special rate plan with Hilton and/or organized an event and/or room block with Hilton

• Name: third parties the name was shared with, and the sale statement Sharing & Disclosure

The third-party travel booking platform or travel agent through which a guest made a reservation

• Name: third parties the name was shared with, and the sale statement Sharing & Disclosure

Government agencies pursuant to legal requirements in some countries

• Name: third parties the name was shared with, and the sale statement Sharing & Disclosure

Third-party advertisers, for optimization and personalization on their platforms

• Name: third parties the name was shared with, and the sale statement Sharing & Disclosure

Hilton's Third-Party Operator

• Name: third parties the name was shared with, and the sale statement Sharing & Disclosure

Hilton Principal

• Name: third parties the name was shared with, and the sale statement Sharing & Disclosure

This information was sold to a third party within the past 12 months Yes

• Name: third parties the name was shared with, and the sale statement Sharing & Disclosure

Telephone and fax numbers

• Telephone and fax numbers: sources and business purposes Data Access & Collection

We have obtained this personal information from the following sources:

• Telephone and fax numbers: sources and business purposes Data Access & Collection

Directly from consumers themselves

• Telephone and fax numbers: sources and business purposes Data Access & Collection

From third parties such as travel booking platforms and credit card providers

• Telephone and fax numbers: sources and business purposes Data Access & Collection

From demographics companies

• Telephone and fax numbers: sources and business purposes Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Telephone and fax numbers: sources and business purposes Data Access & Collection

Fulfill guest reservations

• Telephone and fax numbers: sources and business purposes Data Access & Collection

Send guests communications relating to their reservations

• Telephone and fax numbers: sources and business purposes Data Access & Collection

Provide customer service and support

• Telephone and fax numbers: sources and business purposes Data Access & Collection

Verify identity

• Telephone and fax numbers: sources and business purposes Data Access & Collection

Send marketing communications via SMS

• Telephone and fax numbers: sources and business purposes Data Access & Collection

Process transactions with partners

• Telephone and fax numbers: sources and business purposes Data Access & Collection

Authenticate mobile account

• Telephone and fax numbers: sources and business purposes Data Access & Collection

Sending service-related SMS communications

• Telephone and fax numbers: sources and business purposes Data Access & Collection

Detect and prevent fraud

• Telephone and fax numbers: sources and business purposes Data Access & Collection

Engage in sales activity for group bookings, meetings and events

• Telephone and fax numbers: sources and business purposes Data Access & Collection

Sending post-stay surveys via SMS

• Telephone and fax numbers: post-stay surveys, third-party sharing and the sale statement Sharing & Disclosure

We have shared this personal information with the following categories of third parties

• Telephone and fax numbers: post-stay surveys, third-party sharing and the sale statement Sharing & Disclosure

Service providers who perform tasks on behalf of Hilton, which may include those who send marketing communications on our behalf

• Telephone and fax numbers: post-stay surveys, third-party sharing and the sale statement Sharing & Disclosure

Hilton's Third-Party Partner

• Telephone and fax numbers: post-stay surveys, third-party sharing and the sale statement Sharing & Disclosure

Employers pursuant to corporate agreements, employee consent, and as permitted by law

• Telephone and fax numbers: post-stay surveys, third-party sharing and the sale statement Sharing & Disclosure

The third-party travel booking platform or travel agent through which a guest made a reservation

• Telephone and fax numbers: post-stay surveys, third-party sharing and the sale statement Sharing & Disclosure

Third-party advertisers, for optimization and personalization on their platforms

• Telephone and fax numbers: post-stay surveys, third-party sharing and the sale statement Sharing & Disclosure

Hilton's Third-Party Operator

• Telephone and fax numbers: post-stay surveys, third-party sharing and the sale statement Sharing & Disclosure

Hilton Principal

• Telephone and fax numbers: post-stay surveys, third-party sharing and the sale statement Sharing & Disclosure

This information was sold to a third party within the past 12 months

• Telephone and fax numbers: post-stay surveys, third-party sharing and the sale statement Sharing & Disclosure

Yes

• Telephone and fax numbers: post-stay surveys, third-party sharing and the sale statement Sharing & Disclosure

Email address

• Email address: sources and business purposes Data Access & Collection

We have obtained this personal information from the following sources:

• Email address: sources and business purposes Data Access & Collection

Directly from consumers themselves

• Email address: sources and business purposes Data Access & Collection

From third parties such as travel booking platforms and credit card providers

• Email address: sources and business purposes Data Access & Collection

From demographics companies

• Email address: sources and business purposes Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Email address: sources and business purposes Data Access & Collection

Fulfill guest reservations

• Email address: sources and business purposes Data Access & Collection

Send guests communications relating to their reservations

• Email address: sources and business purposes Data Access & Collection

Administer membership and activity in the Hilton Honors loyalty program

• Email address: sources and business purposes Data Access & Collection

Provide customer service and support

• Email address: sources and business purposes Data Access & Collection

Verify identity

• Email address: sources and business purposes Data Access & Collection

Send marketing communications via email

• Email address: sources and business purposes Data Access & Collection

Process transactions with partners

• Email address: sources and business purposes Data Access & Collection

Administer contests and sweepstakes

• Email address: sources and business purposes Data Access & Collection

Authenticate mobile account

• Email address: sources and business purposes Data Access & Collection

Detect and prevent fraud

• Email address: sources and business purposes Data Access & Collection

Engage in sales activity for group bookings, meetings and events

• Email address: group sales purpose, third-party sharing and the sale statement Sharing & Disclosure

We have shared this personal information with the following categories of third parties

• Email address: group sales purpose, third-party sharing and the sale statement Sharing & Disclosure

Service providers who perform tasks on behalf of Hilton, which may include those who send marketing communications on our behalf

• Email address: group sales purpose, third-party sharing and the sale statement Sharing & Disclosure

Hilton's Third-Party Partner

• Email address: group sales purpose, third-party sharing and the sale statement Sharing & Disclosure

Employers pursuant to corporate agreements, employee consent, and as permitted by law

• Email address: group sales purpose, third-party sharing and the sale statement Sharing & Disclosure

The third-party travel booking platform or travel agent through which a guest made a reservation

• Email address: group sales purpose, third-party sharing and the sale statement Sharing & Disclosure

Third-party advertisers, for optimization and personalization on their platforms

• Email address: group sales purpose, third-party sharing and the sale statement Sharing & Disclosure

Hilton's Third-Party Operator

• Email address: group sales purpose, third-party sharing and the sale statement Sharing & Disclosure

Hilton Principal

• Email address: group sales purpose, third-party sharing and the sale statement Sharing & Disclosure

This information was sold to a third party within the past 12 months

• Email address: group sales purpose, third-party sharing and the sale statement Sharing & Disclosure

Yes

• Email address: group sales purpose, third-party sharing and the sale statement Sharing & Disclosure

Home address

• Home address: obtained directly from consumers Data Access & Collection

We have obtained this personal information from the following sources:

• Home address: obtained directly from consumers Data Access & Collection

Directly from consumers themselves

• Home address: obtained directly from consumers Data Access & Collection

From third parties such as travel booking platforms and credit card providers

• Home address: further sources — booking platforms, card providers and demographics companies Data Access & Collection

From demographics companies

• Home address: further sources — booking platforms, card providers and demographics companies Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Home address: business purposes Hilton says it collected the address for Use & Processing

Fulfill guest reservations

• Home address: business purposes Hilton says it collected the address for Use & Processing

Administer membership and activity in the Hilton Honors loyalty program

• Home address: business purposes Hilton says it collected the address for Use & Processing

Provide customer service and support

• Home address: business purposes Hilton says it collected the address for Use & Processing

Verify identity

• Home address: business purposes Hilton says it collected the address for Use & Processing

Send marketing communications via direct mail

• Home address: business purposes Hilton says it collected the address for Use & Processing

Perform analytics to provide guests with personalized offers and content

• Home address: business purposes Hilton says it collected the address for Use & Processing

Perform analytics to improve business operations

• Home address: business purposes Hilton says it collected the address for Use & Processing

Process payments, including conducting strong customer authentication (SCA) when required by law

• Home address: business purposes Hilton says it collected the address for Use & Processing

Process transactions with partners

• Home address: business purposes Hilton says it collected the address for Use & Processing

Administer contests and sweepstakes

• Home address: business purposes Hilton says it collected the address for Use & Processing

Detect and prevent fraud

• Home address: business purposes Hilton says it collected the address for Use & Processing

Engage in sales activity for group bookings, meetings and events

• Home address: business purposes Hilton says it collected the address for Use & Processing

We have shared this personal information with the following categories of third parties

• Home address: third parties the address was shared with, and the sale statement Sharing & Disclosure

Service providers who perform tasks on behalf of Hilton

• Home address: third parties the address was shared with, and the sale statement Sharing & Disclosure

Hilton's Third-Party Partner

• Home address: third parties the address was shared with, and the sale statement Sharing & Disclosure

Payment card issuers and payment processors

• Home address: third parties the address was shared with, and the sale statement Sharing & Disclosure

Employers pursuant to corporate agreements, employee consent, and as permitted by law

• Home address: third parties the address was shared with, and the sale statement Sharing & Disclosure

The third-party travel booking platform or travel agent through which a guest made a reservation

• Home address: third parties the address was shared with, and the sale statement Sharing & Disclosure

Third-party advertisers, for optimization and personalization on their platforms

• Home address: third parties the address was shared with, and the sale statement Sharing & Disclosure

Hilton's Third-Party Operator

• Home address: third parties the address was shared with, and the sale statement Sharing & Disclosure

Hilton Principal

• Home address: third parties the address was shared with, and the sale statement Sharing & Disclosure

This information was sold to a third party within the past 12 months

• Home address: third parties the address was shared with, and the sale statement Sharing & Disclosure

Yes

• Home address: third parties the address was shared with, and the sale statement Sharing & Disclosure

Nationality

• Nationality: collected from the guest for legal compliance, shared with government agencies, not sold Data Access & Collection

We have obtained this personal information from the following sources:

• Nationality: collected from the guest for legal compliance, shared with government agencies, not sold Data Access & Collection

Directly from consumers themselves

• Nationality: collected from the guest for legal compliance, shared with government agencies, not sold Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Nationality: collected from the guest for legal compliance, shared with government agencies, not sold Data Access & Collection

Comply with applicable laws that require us to collect this information in some jurisdictions

• Nationality: collected from the guest for legal compliance, shared with government agencies, not sold Data Access & Collection

We have shared this personal information with the following categories of third parties

• Nationality: collected from the guest for legal compliance, shared with government agencies, not sold Data Access & Collection

Government agencies pursuant to legal requirements in some countries

• Nationality: collected from the guest for legal compliance, shared with government agencies, not sold Data Access & Collection

This information was sold to a third party within the past 12 months

• Nationality: collected from the guest for legal compliance, shared with government agencies, not sold Data Access & Collection

No

• Nationality: collected from the guest for legal compliance, shared with government agencies, not sold Data Access & Collection

Date of birth

• Date of birth: collected from the guest for legal compliance, shared with government agencies, not sold Data Access & Collection

We have obtained this personal information from the following sources:

• Date of birth: collected from the guest for legal compliance, shared with government agencies, not sold Data Access & Collection

Directly from consumers themselves

• Date of birth: collected from the guest for legal compliance, shared with government agencies, not sold Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Date of birth: collected from the guest for legal compliance, shared with government agencies, not sold Data Access & Collection

Comply with applicable laws that require us to collect this information in some jurisdictions

• Date of birth: collected from the guest for legal compliance, shared with government agencies, not sold Data Access & Collection

We have shared this personal information with the following categories of third parties

• Date of birth: collected from the guest for legal compliance, shared with government agencies, not sold Data Access & Collection

Government agencies pursuant to legal requirements in some countries

• Date of birth: collected from the guest for legal compliance, shared with government agencies, not sold Data Access & Collection

This information was sold to a third party within the past 12 months

• Date of birth: collected from the guest for legal compliance, shared with government agencies, not sold Data Access & Collection

No

• Date of birth: collected from the guest for legal compliance, shared with government agencies, not sold Data Access & Collection

Gender

• Gender: collected from the guest for legal compliance, shared with government agencies, not sold Data Access & Collection

We have obtained this personal information from the following sources:

• Gender: collected from the guest for legal compliance, shared with government agencies, not sold Data Access & Collection

Directly from consumers themselves

• Gender: collected from the guest for legal compliance, shared with government agencies, not sold Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Gender: collected from the guest for legal compliance, shared with government agencies, not sold Data Access & Collection

Comply with applicable laws that require us to collect this information in some jurisdictions

• Gender: collected from the guest for legal compliance, shared with government agencies, not sold Data Access & Collection

We have shared this personal information with the following categories of third parties

• Gender: collected from the guest for legal compliance, shared with government agencies, not sold Data Access & Collection

Government agencies pursuant to legal requirements in some countries

• Gender: collected from the guest for legal compliance, shared with government agencies, not sold Data Access & Collection

This information was sold to a third party within the past 12 months

• Gender: collected from the guest for legal compliance, shared with government agencies, not sold Data Access & Collection

No

• Gender: collected from the guest for legal compliance, shared with government agencies, not sold Data Access & Collection

Payment card information

• Payment card information: sources, payment and record-keeping purposes, recipients, not sold Data Access & Collection

We have obtained this personal information from the following sources:

• Payment card information: sources, payment and record-keeping purposes, recipients, not sold Data Access & Collection

Directly from consumers themselves

• Payment card information: sources, payment and record-keeping purposes, recipients, not sold Data Access & Collection

The third-party travel booking platform or travel agent through which a consumer made a reservation

• Payment card information: sources, payment and record-keeping purposes, recipients, not sold Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Payment card information: sources, payment and record-keeping purposes, recipients, not sold Data Access & Collection

Process payments, including conducting SCA when required by law

• Payment card information: sources, payment and record-keeping purposes, recipients, not sold Data Access & Collection

Detect and prevent fraud

• Payment card information: sources, payment and record-keeping purposes, recipients, not sold Data Access & Collection

Maintain books and records to comply with legal obligations for business reporting, auditing, tax, and income reconciliation

• Payment card information: sources, payment and record-keeping purposes, recipients, not sold Data Access & Collection

We have shared this personal information with the following categories of third parties

• Payment card information: sources, payment and record-keeping purposes, recipients, not sold Data Access & Collection

Payment card issuers and payment processors

• Payment card information: sources, payment and record-keeping purposes, recipients, not sold Data Access & Collection

Hilton's Partner Accommodations

• Payment card information: sources, payment and record-keeping purposes, recipients, not sold Data Access & Collection

Hilton's Third-Party Operator

• Payment card information: sources, payment and record-keeping purposes, recipients, not sold Data Access & Collection

Hilton Principal

• Payment card information: sources, payment and record-keeping purposes, recipients, not sold Data Access & Collection

This information was sold to a third party within the past 12 months

• Payment card information: sources, payment and record-keeping purposes, recipients, not sold Data Access & Collection

No

• Payment card information: sources, payment and record-keeping purposes, recipients, not sold Data Access & Collection

Hilton Honors number

• Hilton Honors number: obtained from members, used for reservations, service, verification and marketing Data Access & Collection

We have obtained this personal information from the following sources:

• Hilton Honors number: obtained from members, used for reservations, service, verification and marketing Data Access & Collection

Directly from Hilton Honors members themselves

• Hilton Honors number: obtained from members, used for reservations, service, verification and marketing Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Hilton Honors number: obtained from members, used for reservations, service, verification and marketing Data Access & Collection

Fulfill guest reservations

• Hilton Honors number: obtained from members, used for reservations, service, verification and marketing Data Access & Collection

Send guests communications relating to their reservations

• Hilton Honors number: obtained from members, used for reservations, service, verification and marketing Data Access & Collection

Administer membership and activity in the Hilton Honors loyalty program

• Hilton Honors number: obtained from members, used for reservations, service, verification and marketing Data Access & Collection

Provide customer service and support

• Hilton Honors number: obtained from members, used for reservations, service, verification and marketing Data Access & Collection

Verify account

• Hilton Honors number: obtained from members, used for reservations, service, verification and marketing Data Access & Collection

Send marketing communications via email, direct mail, and social media

• Hilton Honors number: obtained from members, used for reservations, service, verification and marketing Data Access & Collection

Perform analytics in order to provide guests with personalized offers and content

• Hilton Honors number: obtained from members, used for reservations, service, verification and marketing Data Access & Collection

Perform analytics to improve business operations

• Hilton Honors number: obtained from members, used for reservations, service, verification and marketing Data Access & Collection

Determine guests’ eligibility for special or promotional rates

• Hilton Honors number: remaining purposes, third-party sharing and the sale statement Sharing & Disclosure

Process payments

• Hilton Honors number: remaining purposes, third-party sharing and the sale statement Sharing & Disclosure

Process transactions with partners

• Hilton Honors number: remaining purposes, third-party sharing and the sale statement Sharing & Disclosure

Administer contests and sweepstakes

• Hilton Honors number: remaining purposes, third-party sharing and the sale statement Sharing & Disclosure

Detect and prevent fraud

• Hilton Honors number: remaining purposes, third-party sharing and the sale statement Sharing & Disclosure

We have shared this personal information with the following categories of third parties

• Hilton Honors number: remaining purposes, third-party sharing and the sale statement Sharing & Disclosure

Service providers who perform tasks on behalf of Hilton, which may include those who send marketing communications on our behalf

• Hilton Honors number: remaining purposes, third-party sharing and the sale statement Sharing & Disclosure

Hilton's Third-Party Partner

• Hilton Honors number: remaining purposes, third-party sharing and the sale statement Sharing & Disclosure

Employers pursuant to corporate agreements, employee consent, and as permitted by law

• Hilton Honors number: remaining purposes, third-party sharing and the sale statement Sharing & Disclosure

Third-party advertisers, for optimization and personalization on their platforms

• Hilton Honors number: remaining purposes, third-party sharing and the sale statement Sharing & Disclosure

Hilton's Third-Party Operator

• Hilton Honors number: remaining purposes, third-party sharing and the sale statement Sharing & Disclosure

Hilton Principal

• Hilton Honors number: remaining purposes, third-party sharing and the sale statement Sharing & Disclosure

This information was sold to a third party within the past 12 months

• Hilton Honors number: remaining purposes, third-party sharing and the sale statement Sharing & Disclosure

Yes

• Hilton Honors number: remaining purposes, third-party sharing and the sale statement Sharing & Disclosure

WeChat ID

• WeChat ID: used to log into the Hilton Honors account, not shared with third parties, not sold Data Access & Collection

We have obtained this personal information from the following sources:

• WeChat ID: used to log into the Hilton Honors account, not shared with third parties, not sold Data Access & Collection

Directly from consumers themselves

• WeChat ID: used to log into the Hilton Honors account, not shared with third parties, not sold Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• WeChat ID: used to log into the Hilton Honors account, not shared with third parties, not sold Data Access & Collection

Enable guests to log into Hilton Honors account

• WeChat ID: used to log into the Hilton Honors account, not shared with third parties, not sold Data Access & Collection

We have shared this personal information with the following categories of third parties

• WeChat ID: used to log into the Hilton Honors account, not shared with third parties, not sold Data Access & Collection

We do not share customers' WeChat ID with third parties

• WeChat ID: used to log into the Hilton Honors account, not shared with third parties, not sold Data Access & Collection

This information was sold to a third party within the past 12 months

• WeChat ID: used to log into the Hilton Honors account, not shared with third parties, not sold Data Access & Collection

No

• WeChat ID: used to log into the Hilton Honors account, not shared with third parties, not sold Data Access & Collection

WeChat name and profile photo

• WeChat name and profile photo: used for customer service, not shared, not sold Data Access & Collection

We have obtained this personal information from the following sources:

• WeChat name and profile photo: used for customer service, not shared, not sold Data Access & Collection

Directly from consumers themselves

• WeChat name and profile photo: used for customer service, not shared, not sold Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• WeChat name and profile photo: used for customer service, not shared, not sold Data Access & Collection

Provide customer service and support

• WeChat name and profile photo: used for customer service, not shared, not sold Data Access & Collection

We have shared this personal information with the following categories of third parties

• WeChat name and profile photo: used for customer service, not shared, not sold Data Access & Collection

We do not share customers' WeChat name and profile photo with third parties

• WeChat name and profile photo: used for customer service, not shared, not sold Data Access & Collection

This information was sold to a third party within the past 12 months

• WeChat name and profile photo: used for customer service, not shared, not sold Data Access & Collection

No

• WeChat name and profile photo: used for customer service, not shared, not sold Data Access & Collection

Passport or ID information

• Passport or ID information: collected as law requires, shared with government agencies, not sold Data Access & Collection

We have obtained this personal information from the following sources:

• Passport or ID information: collected as law requires, shared with government agencies, not sold Data Access & Collection

Directly from consumers themselves

• Passport or ID information: collected as law requires, shared with government agencies, not sold Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Passport or ID information: collected as law requires, shared with government agencies, not sold Data Access & Collection

Pursuant to laws that require the collection of such data

• Passport or ID information: collected as law requires, shared with government agencies, not sold Data Access & Collection

We have shared this personal information with the following categories of third parties

• Passport or ID information: collected as law requires, shared with government agencies, not sold Data Access & Collection

Government agencies pursuant to legal requirements in some countries

• Passport or ID information: collected as law requires, shared with government agencies, not sold Data Access & Collection

This information was sold to a third party within the past 12 months

• Passport or ID information: collected as law requires, shared with government agencies, not sold Data Access & Collection

No

• Passport or ID information: collected as law requires, shared with government agencies, not sold Data Access & Collection

Preferred language

• Preferred language: read from the guest or device settings, used for service, Honors communications and analytics Data Access & Collection

We have obtained this personal information from the following sources:

• Preferred language: read from the guest or device settings, used for service, Honors communications and analytics Data Access & Collection

Directly from consumers themselves, including from browser and computer settings

• Preferred language: read from the guest or device settings, used for service, Honors communications and analytics Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Preferred language: read from the guest or device settings, used for service, Honors communications and analytics Data Access & Collection

Better serve our guests

• Preferred language: read from the guest or device settings, used for service, Honors communications and analytics Data Access & Collection

Provide you with a superior guest experience

• Preferred language: read from the guest or device settings, used for service, Honors communications and analytics Data Access & Collection

Send you communications relating to Hilton Honors

• Preferred language: read from the guest or device settings, used for service, Honors communications and analytics Data Access & Collection

Send you marketing communications

• Preferred language: read from the guest or device settings, used for service, Honors communications and analytics Data Access & Collection

Perform analytics in order to provide you with personalized offers and content

• Preferred language: read from the guest or device settings, used for service, Honors communications and analytics Data Access & Collection

We have shared this personal information with the following categories of third parties

• Preferred language: read from the guest or device settings, used for service, Honors communications and analytics Data Access & Collection

Hilton's Third-Party Partner

• Preferred language: read from the guest or device settings, used for service, Honors communications and analytics Data Access & Collection

Hilton Partner Accommodations

• Preferred language: read from the guest or device settings, used for service, Honors communications and analytics Data Access & Collection

Hilton's Third-Party Operator

• Preferred language: read from the guest or device settings, used for service, Honors communications and analytics Data Access & Collection

Hilton Principal

• Preferred language: read from the guest or device settings, used for service, Honors communications and analytics Data Access & Collection

This information was sold to a third party within the past 12 months

• Preferred language: read from the guest or device settings, used for service, Honors communications and analytics Data Access & Collection

No

• Preferred language: read from the guest or device settings, used for service, Honors communications and analytics Data Access & Collection

Room preference

• Room preference: collected from the guest for service, personalization and analytics Data Access & Collection

We have obtained this personal information from the following sources:

• Room preference: collected from the guest for service, personalization and analytics Data Access & Collection

Directly from consumers themselves

• Room preference: collected from the guest for service, personalization and analytics Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Room preference: collected from the guest for service, personalization and analytics Data Access & Collection

Better serve our guests

• Room preference: collected from the guest for service, personalization and analytics Data Access & Collection

Fulfill your reservations

• Room preference: collected from the guest for service, personalization and analytics Data Access & Collection

Personalize your experience

• Room preference: collected from the guest for service, personalization and analytics Data Access & Collection

Perform analytics to provide you with personalized offers and content

• Room preference: collected from the guest for service, personalization and analytics Data Access & Collection

Perform analytics to improve business operations

• Room preference: collected from the guest for service, personalization and analytics Data Access & Collection

We have shared this personal information with the following categories of third parties

• Room preference: collected from the guest for service, personalization and analytics Data Access & Collection

Hilton Partner Accommodations

• Room preference: collected from the guest for service, personalization and analytics Data Access & Collection

Hilton's Third-Party Operator

• Room preference: collected from the guest for service, personalization and analytics Data Access & Collection

Hilton Principal

• Room preference: collected from the guest for service, personalization and analytics Data Access & Collection

This information was sold to a third party within the past 12 months

• Room preference: collected from the guest for service, personalization and analytics Data Access & Collection

No

• Room preference: collected from the guest for service, personalization and analytics Data Access & Collection

Room selection and assignment

• Room selection and assignment: guest choice on the app, Hilton assignment, shared with partner and principal Data Access & Collection

We have obtained this personal information from the following sources:

• Room selection and assignment: guest choice on the app, Hilton assignment, shared with partner and principal Data Access & Collection

Guests can select their rooms on the Hilton Honors app and Hilton assigns rooms

• Room selection and assignment: guest choice on the app, Hilton assignment, shared with partner and principal Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Room selection and assignment: guest choice on the app, Hilton assignment, shared with partner and principal Data Access & Collection

Better serve our guests

• Room selection and assignment: guest choice on the app, Hilton assignment, shared with partner and principal Data Access & Collection

Fulfill reservations

• Room selection and assignment: guest choice on the app, Hilton assignment, shared with partner and principal Data Access & Collection

We have shared this personal information with the following categories of third parties

• Room selection and assignment: guest choice on the app, Hilton assignment, shared with partner and principal Data Access & Collection

Hilton Partner Accommodations

• Room selection and assignment: guest choice on the app, Hilton assignment, shared with partner and principal Data Access & Collection

Hilton Principal

• Room selection and assignment: guest choice on the app, Hilton assignment, shared with partner and principal Data Access & Collection

This information was sold to a third party within the past 12 months

• Room selection and assignment: guest choice on the app, Hilton assignment, shared with partner and principal Data Access & Collection

No

• Room selection and assignment: guest choice on the app, Hilton assignment, shared with partner and principal Data Access & Collection

Arrival time

• Arrival time: obtained directly from consumers Data Access & Collection

We have obtained this personal information from the following sources:

• Arrival time: obtained directly from consumers Data Access & Collection

Directly from consumers themselves

• Arrival time: obtained directly from consumers Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Arrival time: purposes, third-party sharing and the sale statement Sharing & Disclosure

Better serve our guests

• Arrival time: purposes, third-party sharing and the sale statement Sharing & Disclosure

Fulfill reservations

• Arrival time: purposes, third-party sharing and the sale statement Sharing & Disclosure

Personalize guest experience

• Arrival time: purposes, third-party sharing and the sale statement Sharing & Disclosure

Provide customer service and support

• Arrival time: purposes, third-party sharing and the sale statement Sharing & Disclosure

We have shared this personal information with the following categories of third parties

• Arrival time: purposes, third-party sharing and the sale statement Sharing & Disclosure

Hilton Partner Accommodations

• Arrival time: purposes, third-party sharing and the sale statement Sharing & Disclosure

Hilton's Third-Party Operator

• Arrival time: purposes, third-party sharing and the sale statement Sharing & Disclosure

Hilton Principal

• Arrival time: purposes, third-party sharing and the sale statement Sharing & Disclosure

This information was sold to a third party within the past 12 months

• Arrival time: purposes, third-party sharing and the sale statement Sharing & Disclosure

No

• Arrival time: purposes, third-party sharing and the sale statement Sharing & Disclosure

Departure date

• Departure date: obtained from the guest, used for service and reservations, shared with partner hotels Data Access & Collection

We have obtained this personal information from the following sources:

• Departure date: obtained from the guest, used for service and reservations, shared with partner hotels Data Access & Collection

Directly from consumers themselves

• Departure date: obtained from the guest, used for service and reservations, shared with partner hotels Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Departure date: obtained from the guest, used for service and reservations, shared with partner hotels Data Access & Collection

Better serve our guests

• Departure date: obtained from the guest, used for service and reservations, shared with partner hotels Data Access & Collection

Fulfill reservations

• Departure date: obtained from the guest, used for service and reservations, shared with partner hotels Data Access & Collection

Personalize guest experience

• Departure date: obtained from the guest, used for service and reservations, shared with partner hotels Data Access & Collection

We have shared this personal information with the following categories of third parties

• Departure date: obtained from the guest, used for service and reservations, shared with partner hotels Data Access & Collection

Hilton Partner Accommodations

• Departure date: obtained from the guest, used for service and reservations, shared with partner hotels Data Access & Collection

Hilton's Third-Party Operator

• Departure date: obtained from the guest, used for service and reservations, shared with partner hotels Data Access & Collection

Hilton Principal

• Departure date: obtained from the guest, used for service and reservations, shared with partner hotels Data Access & Collection

This information was sold to a third party within the past 12 months

• Departure date: obtained from the guest, used for service and reservations, shared with partner hotels Data Access & Collection

No

• Departure date: obtained from the guest, used for service and reservations, shared with partner hotels Data Access & Collection

Additional guest names

• Additional guest names: collected from the guest for reservations, shared with partners, sold Data Access & Collection

We have obtained this personal information from the following sources:

• Additional guest names: collected from the guest for reservations, shared with partners, sold Data Access & Collection

Directly from consumers themselves

• Additional guest names: collected from the guest for reservations, shared with partners, sold Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Additional guest names: collected from the guest for reservations, shared with partners, sold Data Access & Collection

Fulfill reservations

• Additional guest names: collected from the guest for reservations, shared with partners, sold Data Access & Collection

We have shared this personal information with the following categories of third parties

• Additional guest names: collected from the guest for reservations, shared with partners, sold Data Access & Collection

Hilton's Third-Party Partner

• Additional guest names: collected from the guest for reservations, shared with partners, sold Data Access & Collection

Hilton Partner Accommodations

• Additional guest names: collected from the guest for reservations, shared with partners, sold Data Access & Collection

Hilton's Third-Party Operator

• Additional guest names: collected from the guest for reservations, shared with partners, sold Data Access & Collection

This information was sold to a third party within the past 12 months

• Additional guest names: collected from the guest for reservations, shared with partners, sold Data Access & Collection

Yes

• Additional guest names: collected from the guest for reservations, shared with partners, sold Data Access & Collection

Corporate travel planner information

• Corporate travel planner information: from corporate contacts, shared with employers, not sold Data Access & Collection

We have obtained this personal information from the following sources:

• Corporate travel planner information: from corporate contacts, shared with employers, not sold Data Access & Collection

Directly from the corporate contacts themselves

• Corporate travel planner information: from corporate contacts, shared with employers, not sold Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Corporate travel planner information: from corporate contacts, shared with employers, not sold Data Access & Collection

Fulfill and manage corporate travel reservations

• Corporate travel planner information: from corporate contacts, shared with employers, not sold Data Access & Collection

Provide customer service and support

• Corporate travel planner information: from corporate contacts, shared with employers, not sold Data Access & Collection

Send marketing communications via email, direct mail, and social media

• Corporate travel planner information: from corporate contacts, shared with employers, not sold Data Access & Collection

We have shared this personal information with the following categories of third parties

• Corporate travel planner information: from corporate contacts, shared with employers, not sold Data Access & Collection

Employers pursuant to corporate agreements, employee consent, and as permitted by law

• Corporate travel planner information: from corporate contacts, shared with employers, not sold Data Access & Collection

This information was sold to a third party within the past 12 months

• Corporate travel planner information: from corporate contacts, shared with employers, not sold Data Access & Collection

No

• Corporate travel planner information: from corporate contacts, shared with employers, not sold Data Access & Collection

Media contact data

• Media contact data: from a communications service provider, used to contact media, not shared, not sold Data Access & Collection

We have obtained this personal information from the following sources:

• Media contact data: from a communications service provider, used to contact media, not shared, not sold Data Access & Collection

From a third-party communications service provider

• Media contact data: from a communications service provider, used to contact media, not shared, not sold Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Media contact data: from a communications service provider, used to contact media, not shared, not sold Data Access & Collection

Contact members of the media and social media influencers in their business capacity

• Media contact data: from a communications service provider, used to contact media, not shared, not sold Data Access & Collection

We have shared this personal information with the following categories of third parties

• Media contact data: from a communications service provider, used to contact media, not shared, not sold Data Access & Collection

We do not share business contact data for members of the media and social media influencers with third parties

• Media contact data: from a communications service provider, used to contact media, not shared, not sold Data Access & Collection

This information was sold to a third party within the past 12 months

• Media contact data: from a communications service provider, used to contact media, not shared, not sold Data Access & Collection

No

• Media contact data: from a communications service provider, used to contact media, not shared, not sold Data Access & Collection

Corporate number and name

• Corporate number and name: collected from the guest, shared with employers and partners, sold Data Access & Collection

We have obtained this personal information from the following sources:

• Corporate number and name: collected from the guest, shared with employers and partners, sold Data Access & Collection

Directly from consumers themselves

• Corporate number and name: collected from the guest, shared with employers and partners, sold Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Corporate number and name: collected from the guest, shared with employers and partners, sold Data Access & Collection

Fulfill reservations

• Corporate number and name: collected from the guest, shared with employers and partners, sold Data Access & Collection

Determine guests' eligibility for special or promotional rates

• Corporate number and name: collected from the guest, shared with employers and partners, sold Data Access & Collection

We have shared this personal information with the following categories of third parties

• Corporate number and name: collected from the guest, shared with employers and partners, sold Data Access & Collection

Employers pursuant to corporate agreements, employee consent, and as permitted by law

• Corporate number and name: collected from the guest, shared with employers and partners, sold Data Access & Collection

Hilton's Third-Party Partner

• Corporate number and name: collected from the guest, shared with employers and partners, sold Data Access & Collection

Hilton's Third-Party Operator

• Corporate number and name: collected from the guest, shared with employers and partners, sold Data Access & Collection

This information was sold to a third party within the past 12 months

• Corporate number and name: collected from the guest, shared with employers and partners, sold Data Access & Collection

Yes

• Corporate number and name: collected from the guest, shared with employers and partners, sold Data Access & Collection

Travel agent number and name

• Travel agent number and name: from the guest and from travel agents, used to attribute reservations Data Access & Collection

We have obtained this personal information from the following sources:

• Travel agent number and name: from the guest and from travel agents, used to attribute reservations Data Access & Collection

Directly from consumers themselves

• Travel agent number and name: from the guest and from travel agents, used to attribute reservations Data Access & Collection

From travel agents

• Travel agent number and name: from the guest and from travel agents, used to attribute reservations Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Travel agent number and name: from the guest and from travel agents, used to attribute reservations Data Access & Collection

Property attribute reservations to travel agents

• Travel agent number and name: from the guest and from travel agents, used to attribute reservations Data Access & Collection

Fulfill your reservation

• Travel agent number and name: from the guest and from travel agents, used to attribute reservations Data Access & Collection

We have shared this personal information with the following categories of third parties

• Travel agent number and name: from the guest and from travel agents, used to attribute reservations Data Access & Collection

Hilton Grand Vacations

• Travel agent number and name: from the guest and from travel agents, used to attribute reservations Data Access & Collection

This information was sold to a third party within the past 12 months

• Travel agent number and name: from the guest and from travel agents, used to attribute reservations Data Access & Collection

Yes

• Travel agent number and name: from the guest and from travel agents, used to attribute reservations Data Access & Collection

Airline partner number and name

• Airline partner number and name: from the guest, used to attribute Points, shared with the airlines Data Access & Collection

We have obtained this personal information from the following sources:

• Airline partner number and name: from the guest, used to attribute Points, shared with the airlines Data Access & Collection

Directly from consumers themselves

• Airline partner number and name: from the guest, used to attribute Points, shared with the airlines Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Airline partner number and name: from the guest, used to attribute Points, shared with the airlines Data Access & Collection

Properly attribute Points to consumers who participate in airline loyalty programs

• Airline partner number and name: from the guest, used to attribute Points, shared with the airlines Data Access & Collection

We have shared this personal information with the following categories of third parties

• Airline partner number and name: from the guest, used to attribute Points, shared with the airlines Data Access & Collection

The respective airlines

• Airline partner number and name: from the guest, used to attribute Points, shared with the airlines Data Access & Collection

Hilton's Third-Party Partner

• Airline partner number and name: from the guest, used to attribute Points, shared with the airlines Data Access & Collection

Hilton's Third-Party Operator

• Airline partner number and name: from the guest, used to attribute Points, shared with the airlines Data Access & Collection

This information was sold to a third party within the past 12 months

• Airline partner number and name: from the guest, used to attribute Points, shared with the airlines Data Access & Collection

Yes

• Airline partner number and name: from the guest, used to attribute Points, shared with the airlines Data Access & Collection

Vehicle information

• Vehicle information: from plate recognition and cameras, used for parking and safety, not shared Data Access & Collection

We have obtained this personal information from the following sources:

• Vehicle information: from plate recognition and cameras, used for parking and safety, not shared Data Access & Collection

Directly from consumers themselves

• Vehicle information: from plate recognition and cameras, used for parking and safety, not shared Data Access & Collection

From license plate recognition technology

• Vehicle information: from plate recognition and cameras, used for parking and safety, not shared Data Access & Collection

From video capabilities

• Vehicle information: from plate recognition and cameras, used for parking and safety, not shared Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Vehicle information: from plate recognition and cameras, used for parking and safety, not shared Data Access & Collection

Enable guests to park at our properties

• Vehicle information: from plate recognition and cameras, used for parking and safety, not shared Data Access & Collection

Ensure safety and security

• Vehicle information: from plate recognition and cameras, used for parking and safety, not shared Data Access & Collection

We have shared this personal information with the following categories of third parties

• Vehicle information: from plate recognition and cameras, used for parking and safety, not shared Data Access & Collection

We do not share vehicle information with any third parties

• Vehicle information: from plate recognition and cameras, used for parking and safety, not shared Data Access & Collection

This information was sold to a third party within the past 12 months

• Vehicle information: from plate recognition and cameras, used for parking and safety, not shared Data Access & Collection

No

• Vehicle information: from plate recognition and cameras, used for parking and safety, not shared Data Access & Collection

CCTV footage

• CCTV footage: recorded by property cameras, used for safety and legal compliance, shared in limited cases Data Access & Collection

We have obtained this personal information from the following sources:

• CCTV footage: recorded by property cameras, used for safety and legal compliance, shared in limited cases Data Access & Collection

Directly from cameras located on and around the property

• CCTV footage: recorded by property cameras, used for safety and legal compliance, shared in limited cases Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• CCTV footage: recorded by property cameras, used for safety and legal compliance, shared in limited cases Data Access & Collection

Protect guests, employees and visitors to properties

• CCTV footage: recorded by property cameras, used for safety and legal compliance, shared in limited cases Data Access & Collection

Comply with applicable laws that require us to collect this information in some jurisdictions

• CCTV footage: recorded by property cameras, used for safety and legal compliance, shared in limited cases Data Access & Collection

We have shared this personal information with the following categories of third parties

• CCTV footage: recorded by property cameras, used for safety and legal compliance, shared in limited cases Data Access & Collection

Government agencies pursuant to legal requirements in some countries

• CCTV footage: recorded by property cameras, used for safety and legal compliance, shared in limited cases Data Access & Collection

Employers pursuant to corporate agreements, employee consent, and as permitted by law

• CCTV footage: recorded by property cameras, used for safety and legal compliance, shared in limited cases Data Access & Collection

Entities that have arranged a special rate plan with Hilton and/or organized an event and/or room block with Hilton, as permitted by law

• CCTV footage: recorded by property cameras, used for safety and legal compliance, shared in limited cases Data Access & Collection

This information was sold to a third party within the past 12 months

• CCTV footage: recorded by property cameras, used for safety and legal compliance, shared in limited cases Data Access & Collection

No

• CCTV footage: recorded by property cameras, used for safety and legal compliance, shared in limited cases Data Access & Collection

Promotional Images

• Promotional images: photographed on the property, used in promotions, shared with promotion partners Use & Processing

We have obtained this personal information from the following sources:

• Promotional images: photographed on the property, used in promotions, shared with promotion partners Use & Processing

Directly from cameras utilized on the property

• Promotional images: photographed on the property, used in promotions, shared with promotion partners Use & Processing

We collected this personal information for the following business or commercial purposes:

• Promotional images: photographed on the property, used in promotions, shared with promotion partners Use & Processing

Internal and external promotions and communications

• Promotional images: photographed on the property, used in promotions, shared with promotion partners Use & Processing

We have shared this personal information with the following categories of third parties

• Promotional images: photographed on the property, used in promotions, shared with promotion partners Use & Processing

We share promotional images with third parties that facilitate promotions

• Promotional images: photographed on the property, used in promotions, shared with promotion partners Use & Processing

This information was sold to a third party within the past 12 months

• Promotional images: photographed on the property, used in promotions, shared with promotion partners Use & Processing

No

• Promotional images: photographed on the property, used in promotions, shared with promotion partners Use & Processing

Customer interactions with Hilton

• Customer interactions: cookies, server logs, beacons, tags and pixels used for analytics and marketing Data Access & Collection

We have obtained this personal information from the following sources:

• Customer interactions: cookies, server logs, beacons, tags and pixels used for analytics and marketing Data Access & Collection

Directly from consumers themselves via cookies, server logs, web beacons, tags, pixels, and other similar technologies

• Customer interactions: cookies, server logs, beacons, tags and pixels used for analytics and marketing Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Customer interactions: cookies, server logs, beacons, tags and pixels used for analytics and marketing Data Access & Collection

Perform analytics to provide you with personalized offers and content

• Customer interactions: cookies, server logs, beacons, tags and pixels used for analytics and marketing Data Access & Collection

Perform analytics to improve business operations

• Customer interactions: cookies, server logs, beacons, tags and pixels used for analytics and marketing Data Access & Collection

Marketing

• Customer interactions: cookies, server logs, beacons, tags and pixels used for analytics and marketing Data Access & Collection

Share that data with advertising networks who serve personalized advertisements

• Customer interactions: cookies, server logs, beacons, tags and pixels used for analytics and marketing Data Access & Collection

Detect and prevent fraud

• Customer interactions: cookies, server logs, beacons, tags and pixels used for analytics and marketing Data Access & Collection

Optimize our websites and mobile apps

• Customer interactions: cookies, server logs, beacons, tags and pixels used for analytics and marketing Data Access & Collection

We have shared this personal information with the following categories of third parties

• Customer interactions: cookies, server logs, beacons, tags and pixels used for analytics and marketing Data Access & Collection

Advertising networks

• Customer interactions: cookies, server logs, beacons, tags and pixels used for analytics and marketing Data Access & Collection

Analytics providers for our websites and mobile applications

• Customer interactions: cookies, server logs, beacons, tags and pixels used for analytics and marketing Data Access & Collection

This information was sold to a third party within the past 12 months

• Customer interactions: cookies, server logs, beacons, tags and pixels used for analytics and marketing Data Access & Collection

Yes

• Customer interactions: cookies, server logs, beacons, tags and pixels used for analytics and marketing Data Access & Collection

Note: If in the Hilton Honors iOS App you ask the App not to track you across other companies’ apps and websites, Hilton will honor that request. Please note that you may still receive emails about properties you searched for either directly within the Hilton Honors App, or on Hilton.com. You may also receive emails related to Hilton-American Express Co-Branded Credit Cards; those emails are not sent based on iOS tracking.

• Customer interactions: cookies, server logs, beacons, tags and pixels used for analytics and marketing Data Access & Collection

IP addresses

• IP addresses: from browsing, used for analytics, advertising, payment authentication, troubleshooting and fraud Data Access & Collection

We have obtained this personal information from the following sources:

• IP addresses: from browsing, used for analytics, advertising, payment authentication, troubleshooting and fraud Data Access & Collection

Directly from consumers themselves as a result of their browsing activity on the internet

• IP addresses: from browsing, used for analytics, advertising, payment authentication, troubleshooting and fraud Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• IP addresses: from browsing, used for analytics, advertising, payment authentication, troubleshooting and fraud Data Access & Collection

Perform analytics in order to provide guests with personalized offers and content

• IP addresses: from browsing, used for analytics, advertising, payment authentication, troubleshooting and fraud Data Access & Collection

Perform analytics to improve business operations

• IP addresses: from browsing, used for analytics, advertising, payment authentication, troubleshooting and fraud Data Access & Collection

Share that data with advertising networks who serve personalized advertisements

• IP addresses: from browsing, used for analytics, advertising, payment authentication, troubleshooting and fraud Data Access & Collection

Conduct SCA as part of the payment process, when required by law

• IP addresses: from browsing, used for analytics, advertising, payment authentication, troubleshooting and fraud Data Access & Collection

Optimize our websites and mobile apps

• IP addresses: from browsing, used for analytics, advertising, payment authentication, troubleshooting and fraud Data Access & Collection

Troubleshoot and resolve website issues

• IP addresses: from browsing, used for analytics, advertising, payment authentication, troubleshooting and fraud Data Access & Collection

Detect and prevent fraud

• IP addresses: from browsing, used for analytics, advertising, payment authentication, troubleshooting and fraud Data Access & Collection

We have shared this personal information with the following categories of third parties

• IP addresses: sharing with advertising networks, analytics providers, service providers and card issuers, not sold Sharing & Disclosure

Advertising networks

• IP addresses: sharing with advertising networks, analytics providers, service providers and card issuers, not sold Sharing & Disclosure

Analytics providers for our websites and mobile applications

• IP addresses: sharing with advertising networks, analytics providers, service providers and card issuers, not sold Sharing & Disclosure

Service providers who perform tasks on behalf of Hilton, which may include those who send marketing communications on our behalf

• IP addresses: sharing with advertising networks, analytics providers, service providers and card issuers, not sold Sharing & Disclosure

Payment card issuers and payment processors (only when conducting SCA)

• IP addresses: sharing with advertising networks, analytics providers, service providers and card issuers, not sold Sharing & Disclosure

This information was sold to a third party within the past 12 months

• IP addresses: sharing with advertising networks, analytics providers, service providers and card issuers, not sold Sharing & Disclosure

No

• IP addresses: sharing with advertising networks, analytics providers, service providers and card issuers, not sold Sharing & Disclosure

Session IDs

• Session IDs: from browsing, used for personalization analytics and marketing Data Access & Collection

We have obtained this personal information from the following sources:

• Session IDs: from browsing, used for personalization analytics and marketing Data Access & Collection

Directly from consumers themselves as a result of their browsing activity on the internet

• Session IDs: from browsing, used for personalization analytics and marketing Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Session IDs: from browsing, used for personalization analytics and marketing Data Access & Collection

Perform analytics in order to provide guests with personalized offers and content

• Session IDs: from browsing, used for personalization analytics and marketing Data Access & Collection

Marketing

• Session IDs: from browsing, used for personalization analytics and marketing Data Access & Collection

Perform analytics to improve business operations

• Session IDs: remaining purposes, sharing with advertising networks, and the sale statement Sharing & Disclosure

Share that data with advertising networks who serve personalized advertisements

• Session IDs: remaining purposes, sharing with advertising networks, and the sale statement Sharing & Disclosure

Detect and prevent fraud

• Session IDs: remaining purposes, sharing with advertising networks, and the sale statement Sharing & Disclosure

We have shared this personal information with the following categories of third parties

• Session IDs: remaining purposes, sharing with advertising networks, and the sale statement Sharing & Disclosure

Advertising networks

• Session IDs: remaining purposes, sharing with advertising networks, and the sale statement Sharing & Disclosure

Analytics providers for our websites and mobile applications

• Session IDs: remaining purposes, sharing with advertising networks, and the sale statement Sharing & Disclosure

This information was sold to a third party within the past 12 months

• Session IDs: remaining purposes, sharing with advertising networks, and the sale statement Sharing & Disclosure

Yes

• Session IDs: remaining purposes, sharing with advertising networks, and the sale statement Sharing & Disclosure

Booking engine

• Booking engine data: from browsing, used for targeted media advertising and marketing, shared with advertising networks Data Access & Collection

We have obtained this personal information from the following sources:

• Booking engine data: from browsing, used for targeted media advertising and marketing, shared with advertising networks Data Access & Collection

Directly from consumers as a result of their browsing activity on the internet

• Booking engine data: from browsing, used for targeted media advertising and marketing, shared with advertising networks Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Booking engine data: from browsing, used for targeted media advertising and marketing, shared with advertising networks Data Access & Collection

Show you targeted advertisements on media

• Booking engine data: from browsing, used for targeted media advertising and marketing, shared with advertising networks Data Access & Collection

Support marketing efforts

• Booking engine data: from browsing, used for targeted media advertising and marketing, shared with advertising networks Data Access & Collection

Provide customer service

• Booking engine data: from browsing, used for targeted media advertising and marketing, shared with advertising networks Data Access & Collection

Perform analytics to improve business operations

• Booking engine data: from browsing, used for targeted media advertising and marketing, shared with advertising networks Data Access & Collection

We have shared this personal information with the following categories of third parties

• Booking engine data: from browsing, used for targeted media advertising and marketing, shared with advertising networks Data Access & Collection

Advertising networks

• Booking engine data: from browsing, used for targeted media advertising and marketing, shared with advertising networks Data Access & Collection

Analytics providers for our websites and mobile applications

• Booking engine data: from browsing, used for targeted media advertising and marketing, shared with advertising networks Data Access & Collection

Hilton Principal

• Booking engine data: from browsing, used for targeted media advertising and marketing, shared with advertising networks Data Access & Collection

This information was sold to a third party within the past 12 months

• Booking engine data: from browsing, used for targeted media advertising and marketing, shared with advertising networks Data Access & Collection

Yes

• Booking engine data: from browsing, used for targeted media advertising and marketing, shared with advertising networks Data Access & Collection

Streaming service usage

• Streaming service usage: from Connected Room login, used to evaluate streaming usage, not shared Data Access & Collection

We have obtained this personal information from the following sources:

• Streaming service usage: from Connected Room login, used to evaluate streaming usage, not shared Data Access & Collection

Directly from consumers as a result of their logging into a streaming service through Connected Room functionality

• Streaming service usage: from Connected Room login, used to evaluate streaming usage, not shared Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Streaming service usage: from Connected Room login, used to evaluate streaming usage, not shared Data Access & Collection

Evaluate the usage of different streaming services

• Streaming service usage: from Connected Room login, used to evaluate streaming usage, not shared Data Access & Collection

We have shared this personal information with the following categories of third parties

• Streaming service usage: from Connected Room login, used to evaluate streaming usage, not shared Data Access & Collection

We do not share streaming service usage with third parties

• Streaming service usage: from Connected Room login, used to evaluate streaming usage, not shared Data Access & Collection

This information was sold to a third party within the past 12 months

• Streaming service usage: from Connected Room login, used to evaluate streaming usage, not shared Data Access & Collection

No

• Streaming service usage: from Connected Room login, used to evaluate streaming usage, not shared Data Access & Collection

Hilton and Amex credit card

• Hilton and Amex co-branded card data: from American Express, used for card benefits and marketing Data Access & Collection

We have obtained this personal information from the following sources:

• Hilton and Amex co-branded card data: from American Express, used for card benefits and marketing Data Access & Collection

From American Express

• Hilton and Amex co-branded card data: from American Express, used for card benefits and marketing Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Hilton and Amex co-branded card data: from American Express, used for card benefits and marketing Data Access & Collection

Provide you with benefits associated with your co-branded card

• Hilton and Amex co-branded card data: from American Express, used for card benefits and marketing Data Access & Collection

Show you targeted advertisements on media

• Hilton and Amex co-branded card data: from American Express, used for card benefits and marketing Data Access & Collection

Support marketing efforts

• Hilton and Amex co-branded card data: from American Express, used for card benefits and marketing Data Access & Collection

Provide customer service

• Hilton and Amex co-branded card data: from American Express, used for card benefits and marketing Data Access & Collection

Perform analytics to improve business operations

• Hilton and Amex co-branded card data: from American Express, used for card benefits and marketing Data Access & Collection

We have shared this personal information with the following categories of third parties

• Hilton and American Express co-branded card data: sharing and the sale statement Sharing & Disclosure

Advertising networks

• Hilton and American Express co-branded card data: sharing and the sale statement Sharing & Disclosure

Analytics providers for our websites and mobile applications

• Hilton and American Express co-branded card data: sharing and the sale statement Sharing & Disclosure

Hilton Honors affiliated partners

• Hilton and American Express co-branded card data: sharing and the sale statement Sharing & Disclosure

Hilton Partner Accommodations

• Hilton and American Express co-branded card data: sharing and the sale statement Sharing & Disclosure

Hilton's Third-Party Operator

• Hilton and American Express co-branded card data: sharing and the sale statement Sharing & Disclosure

This information was sold to a third party within the past 12 months

• Hilton and American Express co-branded card data: sharing and the sale statement Sharing & Disclosure

No

• Hilton and American Express co-branded card data: sharing and the sale statement Sharing & Disclosure

Hilton and Amazon accounts

• Hilton and Amazon account data: from Amazon, used for Shop with Points, advertising and marketing Data Access & Collection

We have obtained this personal information from the following sources:

• Hilton and Amazon account data: from Amazon, used for Shop with Points, advertising and marketing Data Access & Collection

From AmazonAmazon

• Hilton and Amazon account data: from Amazon, used for Shop with Points, advertising and marketing Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Hilton and Amazon account data: from Amazon, used for Shop with Points, advertising and marketing Data Access & Collection

Facilitate use of Honors Points as part of Amazon's Shop with Points program

• Hilton and Amazon account data: from Amazon, used for Shop with Points, advertising and marketing Data Access & Collection

Show you targeted advertisements on media

• Hilton and Amazon account data: from Amazon, used for Shop with Points, advertising and marketing Data Access & Collection

Support marketing efforts

• Hilton and Amazon account data: from Amazon, used for Shop with Points, advertising and marketing Data Access & Collection

Provide customer service

• Hilton and Amazon account data: from Amazon, used for Shop with Points, advertising and marketing Data Access & Collection

Perform analytics to improve business operations

• Hilton and Amazon account data: from Amazon, used for Shop with Points, advertising and marketing Data Access & Collection

We have shared this personal information with the following categories of third parties

• Hilton and Amazon account data: from Amazon, used for Shop with Points, advertising and marketing Data Access & Collection

Advertising networks

• Hilton and Amazon account data: from Amazon, used for Shop with Points, advertising and marketing Data Access & Collection

Analytics providers for our websites and mobile applications

• Hilton and Amazon account data: from Amazon, used for Shop with Points, advertising and marketing Data Access & Collection

This information was sold to a third party within the past 12 months

• Hilton and Amazon account data: from Amazon, used for Shop with Points, advertising and marketing Data Access & Collection

No

• Hilton and Amazon account data: from Amazon, used for Shop with Points, advertising and marketing Data Access & Collection

Hilton and Lyft accounts

• Hilton and Lyft account data: from Lyft, used for advertising, marketing and analytics Data Access & Collection

We have obtained this personal information from the following sources:

• Hilton and Lyft account data: from Lyft, used for advertising, marketing and analytics Data Access & Collection

From Lyft

• Hilton and Lyft account data: from Lyft, used for advertising, marketing and analytics Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Hilton and Lyft account data: from Lyft, used for advertising, marketing and analytics Data Access & Collection

Show you targeted advertisements on media

• Hilton and Lyft account data: from Lyft, used for advertising, marketing and analytics Data Access & Collection

Support marketing efforts

• Hilton and Lyft account data: from Lyft, used for advertising, marketing and analytics Data Access & Collection

Provide customer service

• Hilton and Lyft account data: from Lyft, used for advertising, marketing and analytics Data Access & Collection

Perform analytics to improve business operations

• Hilton and Lyft account data: from Lyft, used for advertising, marketing and analytics Data Access & Collection

We have shared this personal information with the following categories of third parties

• Hilton and Lyft account data: from Lyft, used for advertising, marketing and analytics Data Access & Collection

Advertising networks

• Hilton and Lyft account data: from Lyft, used for advertising, marketing and analytics Data Access & Collection

Analytics providers for our websites and mobile applications

• Hilton and Lyft account data: from Lyft, used for advertising, marketing and analytics Data Access & Collection

Hilton Honors affiliated partners

• Hilton and Lyft account data: from Lyft, used for advertising, marketing and analytics Data Access & Collection

This information was sold to a third party within the past 12 months

• Hilton and Lyft account data: from Lyft, used for advertising, marketing and analytics Data Access & Collection

No

• Hilton and Lyft account data: from Lyft, used for advertising, marketing and analytics Data Access & Collection

Geolocation information

• Geolocation information: from browsing and app use, used for room access, Digital Key, analytics and marketing Data Access & Collection

We have obtained this personal information from the following sources:

• Geolocation information: from browsing and app use, used for room access, Digital Key, analytics and marketing Data Access & Collection

Directly from consumers as a result of their browsing activity on the internet and use of the Hilton Honors app

• Geolocation information: from browsing and app use, used for room access, Digital Key, analytics and marketing Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Geolocation information: from browsing and app use, used for room access, Digital Key, analytics and marketing Data Access & Collection

Enable guest access to guest room and hotel facilities

• Geolocation information: from browsing and app use, used for room access, Digital Key, analytics and marketing Data Access & Collection

Fulfill Digital Key sharing requests

• Geolocation information: from browsing and app use, used for room access, Digital Key, analytics and marketing Data Access & Collection

Perform analytics in order to provide guests with personalized offers and content

• Geolocation information: from browsing and app use, used for room access, Digital Key, analytics and marketing Data Access & Collection

Marketing

• Geolocation information: from browsing and app use, used for room access, Digital Key, analytics and marketing Data Access & Collection

Detect and prevent fraud

• Geolocation information: from browsing and app use, used for room access, Digital Key, analytics and marketing Data Access & Collection

We have shared this personal information with the following categories of third parties

• Geolocation information: from browsing and app use, used for room access, Digital Key, analytics and marketing Data Access & Collection

We do not share geolocation information with any third parties.

• Geolocation information: from browsing and app use, used for room access, Digital Key, analytics and marketing Data Access & Collection

This information was sold to a third party within the past 12 months

• Geolocation information: not sold to a third party in the past 12 months Sharing & Disclosure

No

• Geolocation information: not sold to a third party in the past 12 months Sharing & Disclosure

Device information

• Device information: from browsing, QR scans and the Honors app, used for analytics, marketing and advertising Data Access & Collection

We have obtained this personal information from the following sources:

• Device information: from browsing, QR scans and the Honors app, used for analytics, marketing and advertising Data Access & Collection

Directly from consumers as a result of their browsing activity on the internet, scanning of QR codes on property, and use of the Hilton Honors app

• Device information: from browsing, QR scans and the Honors app, used for analytics, marketing and advertising Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Device information: from browsing, QR scans and the Honors app, used for analytics, marketing and advertising Data Access & Collection

Perform analytics to provide you with personalized offers and content

• Device information: from browsing, QR scans and the Honors app, used for analytics, marketing and advertising Data Access & Collection

Marketing

• Device information: from browsing, QR scans and the Honors app, used for analytics, marketing and advertising Data Access & Collection

Share that data with advertising networks who serve personalized advertisements

• Device information: from browsing, QR scans and the Honors app, used for analytics, marketing and advertising Data Access & Collection

Detect and prevent fraud

• Device information: from browsing, QR scans and the Honors app, used for analytics, marketing and advertising Data Access & Collection

We have shared this personal information with the following categories of third parties

• Device information: from browsing, QR scans and the Honors app, used for analytics, marketing and advertising Data Access & Collection

Advertising networks

• Device information: from browsing, QR scans and the Honors app, used for analytics, marketing and advertising Data Access & Collection

Analytics providers for our websites and mobile applications

• Device information: from browsing, QR scans and the Honors app, used for analytics, marketing and advertising Data Access & Collection

This information was sold to a third party within the past 12 months

• Device information: from browsing, QR scans and the Honors app, used for analytics, marketing and advertising Data Access & Collection

Yes

• Device information: from browsing, QR scans and the Honors app, used for analytics, marketing and advertising Data Access & Collection

Social media information

• Social media information: from the guest, from public social channels and public online sources, not shared Data Access & Collection

We have obtained this personal information from the following sources:

• Social media information: from the guest, from public social channels and public online sources, not shared Data Access & Collection

Directly from consumers themselves

• Social media information: from the guest, from public social channels and public online sources, not shared Data Access & Collection

Indirectly from consumers by reviewing publicly available information on their social media channels

• Social media information: from the guest, from public social channels and public online sources, not shared Data Access & Collection

From publicly available online sources

• Social media information: from the guest, from public social channels and public online sources, not shared Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Social media information: from the guest, from public social channels and public online sources, not shared Data Access & Collection

Perform analytics in order to provide guests with personalized offers and content

• Social media information: from the guest, from public social channels and public online sources, not shared Data Access & Collection

Respond to service concerns in order to better serve our guests

• Social media information: from the guest, from public social channels and public online sources, not shared Data Access & Collection

Provide a more personalized welcome and stay experience

• Social media information: from the guest, from public social channels and public online sources, not shared Data Access & Collection

We have shared this personal information with the following categories of third parties

• Social media information: from the guest, from public social channels and public online sources, not shared Data Access & Collection

We do not share social media information or publicly available online information with any third parties

• Social media information: from the guest, from public social channels and public online sources, not shared Data Access & Collection

This information was sold to a third party within the past 12 months

• Social media information: from the guest, from public social channels and public online sources, not shared Data Access & Collection

No

• Social media information: from the guest, from public social channels and public online sources, not shared Data Access & Collection

Demographics data

• Demographics data: from third-party demographics companies, linked to Hilton's own file, not shared Linking & Identification

We have obtained this personal information from the following sources:

• Demographics data: from third-party demographics companies, linked to Hilton's own file, not shared Linking & Identification

From third-party companies that provide demographics data

• Demographics data: from third-party demographics companies, linked to Hilton's own file, not shared Linking & Identification

We collected this personal information for the following business or commercial purposes:

• Demographics data: from third-party demographics companies, linked to Hilton's own file, not shared Linking & Identification

Perform analytics in order to provide guests with personalized offers and content

• Demographics data: from third-party demographics companies, linked to Hilton's own file, not shared Linking & Identification

Link with customer information that Hilton already has on file

• Demographics data: from third-party demographics companies, linked to Hilton's own file, not shared Linking & Identification

We have shared this personal information with the following categories of third parties

• Demographics data: from third-party demographics companies, linked to Hilton's own file, not shared Linking & Identification

We do not share demographics data with any third parties

• Demographics data: from third-party demographics companies, linked to Hilton's own file, not shared Linking & Identification

This information was sold to a third party within the past 12 months

• Demographics data: from third-party demographics companies, linked to Hilton's own file, not shared Linking & Identification

No

• Demographics data: from third-party demographics companies, linked to Hilton's own file, not shared Linking & Identification

Your MyWay preferences

• MyWay preferences: from the guest, used for service and requested communications Data Access & Collection

We have obtained this personal information from the following sources:

• MyWay preferences: from the guest, used for service and requested communications Data Access & Collection

Directly from consumers themselves

• MyWay preferences: from the guest, used for service and requested communications Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• MyWay preferences: from the guest, used for service and requested communications Data Access & Collection

Better serve our guests

• MyWay preferences: from the guest, used for service and requested communications Data Access & Collection

Send you the communications you would like to receive

• MyWay preferences: from the guest, used for service and requested communications Data Access & Collection

We have shared this personal information with the following categories of third parties

• MyWay preferences: from the guest, used for service and requested communications Data Access & Collection

Hilton Partner Accommodations

• MyWay preferences: from the guest, used for service and requested communications Data Access & Collection

Hilton's Third-Party Operator

• MyWay preferences: from the guest, used for service and requested communications Data Access & Collection

Hilton Principal

• MyWay preferences: from the guest, used for service and requested communications Data Access & Collection

This information was sold to a third party within the past 12 months

• MyWay preferences: from the guest, used for service and requested communications Data Access & Collection

No

• MyWay preferences: from the guest, used for service and requested communications Data Access & Collection

Email and consent preferences

• Email and consent preferences: from the guest, used for service and requested communications, shared with advertising Data Access & Collection

We have obtained this personal information from the following sources:

• Email and consent preferences: from the guest, used for service and requested communications, shared with advertising Data Access & Collection

Directly from consumers themselves

• Email and consent preferences: from the guest, used for service and requested communications, shared with advertising Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Email and consent preferences: from the guest, used for service and requested communications, shared with advertising Data Access & Collection

Better serve our guests

• Email and consent preferences: from the guest, used for service and requested communications, shared with advertising Data Access & Collection

Send you the communications you would like to receive

• Email and consent preferences: from the guest, used for service and requested communications, shared with advertising Data Access & Collection

We have shared this personal information with the following categories of third parties

• Email and consent preferences: from the guest, used for service and requested communications, shared with advertising Data Access & Collection

Advertising networks

• Email and consent preferences: from the guest, used for service and requested communications, shared with advertising Data Access & Collection

This information was sold to a third party within the past 12 months

• Email and consent preferences: from the guest, used for service and requested communications, shared with advertising Data Access & Collection

No

• Email and consent preferences: from the guest, used for service and requested communications, shared with advertising Data Access & Collection

Personal preferences

• Personal preferences: from the guest, used for service, shared with partner accommodations, not sold Data Access & Collection

We have obtained this personal information from the following sources:

• Personal preferences: from the guest, used for service, shared with partner accommodations, not sold Data Access & Collection

Directly from consumers themselves

• Personal preferences: from the guest, used for service, shared with partner accommodations, not sold Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Personal preferences: from the guest, used for service, shared with partner accommodations, not sold Data Access & Collection

Better serve our guests

• Personal preferences: from the guest, used for service, shared with partner accommodations, not sold Data Access & Collection

Provide customer service and support

• Personal preferences: from the guest, used for service, shared with partner accommodations, not sold Data Access & Collection

We have shared this personal information with the following categories of third parties

• Personal preferences: from the guest, used for service, shared with partner accommodations, not sold Data Access & Collection

Hilton Partner Accommodations

• Personal preferences: from the guest, used for service, shared with partner accommodations, not sold Data Access & Collection

This information was sold to a third party within the past 12 months No

• Personal preferences: from the guest, used for service, shared with partner accommodations, not sold Data Access & Collection

On-site incidents

• On-site incidents: reported by guests, employees or law enforcement, used for safety, service and legal compliance Data Access & Collection

We have obtained this personal information from the following sources:

• On-site incidents: reported by guests, employees or law enforcement, used for safety, service and legal compliance Data Access & Collection

Directly from consumers themselves

• On-site incidents: reported by guests, employees or law enforcement, used for safety, service and legal compliance Data Access & Collection

Directly from Hilton employees

• On-site incidents: reported by guests, employees or law enforcement, used for safety, service and legal compliance Data Access & Collection

Directly from law enforcement

• On-site incidents: reported by guests, employees or law enforcement, used for safety, service and legal compliance Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• On-site incidents: reported by guests, employees or law enforcement, used for safety, service and legal compliance Data Access & Collection

Respond to safety and security concerns

• On-site incidents: reported by guests, employees or law enforcement, used for safety, service and legal compliance Data Access & Collection

Better serve our guests

• On-site incidents: reported by guests, employees or law enforcement, used for safety, service and legal compliance Data Access & Collection

Comply with legal or contractual obligations

• On-site incidents: reported by guests, employees or law enforcement, used for safety, service and legal compliance Data Access & Collection

We have shared this personal information with the following categories of third parties

• On-site incidents: reported by guests, employees or law enforcement, used for safety, service and legal compliance Data Access & Collection

Law enforcement

• On-site incidents: reported by guests, employees or law enforcement, used for safety, service and legal compliance Data Access & Collection

Employers pursuant to corporate agreements, employee consent, and as permitted by law

• On-site incidents: reported by guests, employees or law enforcement, used for safety, service and legal compliance Data Access & Collection

Entities that have arranged a special rate plan with Hilton and/or organized an event and/or room block with Hilton

• On-site incidents: reported by guests, employees or law enforcement, used for safety, service and legal compliance Data Access & Collection

The management and/or owners of a franchise property if the incident relates to that property

• On-site incidents: sharing with franchise property owners and others required by law Sharing & Disclosure

Others as required by law

• On-site incidents: sharing with franchise property owners and others required by law Sharing & Disclosure

This information was sold to a third party within the past 12 months

• On-site incidents: sharing with franchise property owners and others required by law Sharing & Disclosure

No

• On-site incidents: sharing with franchise property owners and others required by law Sharing & Disclosure

Complaint descriptions

• Complaint descriptions: from the guest, used for safety, service and legal compliance, shared with franchise owners Data Access & Collection

We have obtained this personal information from the following sources:

• Complaint descriptions: from the guest, used for safety, service and legal compliance, shared with franchise owners Data Access & Collection

Directly from consumers themselves

• Complaint descriptions: from the guest, used for safety, service and legal compliance, shared with franchise owners Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Complaint descriptions: from the guest, used for safety, service and legal compliance, shared with franchise owners Data Access & Collection

Respond to safety and security concerns

• Complaint descriptions: from the guest, used for safety, service and legal compliance, shared with franchise owners Data Access & Collection

Better serve our guests

• Complaint descriptions: from the guest, used for safety, service and legal compliance, shared with franchise owners Data Access & Collection

Comply with legal or contractual obligations

• Complaint descriptions: from the guest, used for safety, service and legal compliance, shared with franchise owners Data Access & Collection

We have shared this personal information with the following categories of third parties

• Complaint descriptions: from the guest, used for safety, service and legal compliance, shared with franchise owners Data Access & Collection

The management and/or owners of a franchise property if your complaint relates to that property

• Complaint descriptions: from the guest, used for safety, service and legal compliance, shared with franchise owners Data Access & Collection

This information was sold to a third party within the past 12 months

• Complaint descriptions: from the guest, used for safety, service and legal compliance, shared with franchise owners Data Access & Collection

No

• Complaint descriptions: from the guest, used for safety, service and legal compliance, shared with franchise owners Data Access & Collection

Customer ratings and survey responses

• Customer ratings and survey responses: published with consent, identifiable responses not shared Use & Processing

We have obtained this personal information from the following sources:

• Customer ratings and survey responses: published with consent, identifiable responses not shared Use & Processing

Directly from consumers themselves

• Customer ratings and survey responses: published with consent, identifiable responses not shared Use & Processing

We collected this personal information for the following business or commercial purposes:

• Customer ratings and survey responses: published with consent, identifiable responses not shared Use & Processing

Troubleshoot and resolve website issues

• Customer ratings and survey responses: published with consent, identifiable responses not shared Use & Processing

Improve customer experience

• Customer ratings and survey responses: published with consent, identifiable responses not shared Use & Processing

With your consent where required, display or publish guest feedback, survey responses, ratings, testimonials, or excerpts of comments on Hilton websites, mobile applications, or other promotional materials to help inform other travelers about guest experiences at our properties.

• Customer ratings and survey responses: published with consent, identifiable responses not shared Use & Processing

We have shared this personal information with the following categories of third parties

• Customer ratings and survey responses: published with consent, identifiable responses not shared Use & Processing

We do not share identifiable customer ratings and survey responses with any third parties.

• Customer ratings and survey responses: published with consent, identifiable responses not shared Use & Processing

This information was sold to a third party within the past 12 months

• Customer ratings and survey responses: published with consent, identifiable responses not shared Use & Processing

No

• Customer ratings and survey responses: published with consent, identifiable responses not shared Use & Processing

Free form textual feedback

• Free form textual feedback: from the guest, used for troubleshooting and improvement, not shared Data Access & Collection

We have obtained this personal information from the following sources:

• Free form textual feedback: from the guest, used for troubleshooting and improvement, not shared Data Access & Collection

Directly from consumers themselves

• Free form textual feedback: from the guest, used for troubleshooting and improvement, not shared Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Free form textual feedback: from the guest, used for troubleshooting and improvement, not shared Data Access & Collection

Troubleshoot and resolve website issues

• Free form textual feedback: from the guest, used for troubleshooting and improvement, not shared Data Access & Collection

Improve customer experience

• Free form textual feedback: from the guest, used for troubleshooting and improvement, not shared Data Access & Collection

We have shared this personal information with the following categories of third parties

• Free form textual feedback: from the guest, used for troubleshooting and improvement, not shared Data Access & Collection

We do not share your feedback with any third parties

• Free form textual feedback: from the guest, used for troubleshooting and improvement, not shared Data Access & Collection

This information was sold to a third party within the past 12 months

• Free form textual feedback: from the guest, used for troubleshooting and improvement, not shared Data Access & Collection

No

• Free form textual feedback: from the guest, used for troubleshooting and improvement, not shared Data Access & Collection

Spa and wellness service information

• Spa and wellness service information: date, time and service type, used for safety and compliance, not shared Data Access & Collection

We have obtained this personal information (such as date, time, and type of service) from the following sources:

• Spa and wellness service information: date, time and service type, used for safety and compliance, not shared Data Access & Collection

Directly from consumers themselves

• Spa and wellness service information: date, time and service type, used for safety and compliance, not shared Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Spa and wellness service information: date, time and service type, used for safety and compliance, not shared Data Access & Collection

Respond to safety and security concerns

• Spa and wellness service information: date, time and service type, used for safety and compliance, not shared Data Access & Collection

Better serve our guests

• Spa and wellness service information: date, time and service type, used for safety and compliance, not shared Data Access & Collection

Comply with legal or contractual obligations

• Spa and wellness service information: date, time and service type, used for safety and compliance, not shared Data Access & Collection

We have shared this personal information with the following categories of third parties

• Spa and wellness service information: date, time and service type, used for safety and compliance, not shared Data Access & Collection

We do not share your spa and wellness service or treatment details with any third parties.

• Spa and wellness service information: date, time and service type, used for safety and compliance, not shared Data Access & Collection

This information was sold to a third party within the past 12 months

• Spa and wellness service information: date, time and service type, used for safety and compliance, not shared Data Access & Collection

No

• Spa and wellness service information: date, time and service type, used for safety and compliance, not shared Data Access & Collection

Spending amount

• Spending amount: from the guest, used for service, analytics, marketing and financial reporting, shared with card Data Access & Collection

We have obtained this personal information from the following sources:

• Spending amount: from the guest, used for service, analytics, marketing and financial reporting, shared with card Data Access & Collection

Directly from consumers themselves

• Spending amount: from the guest, used for service, analytics, marketing and financial reporting, shared with card Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Spending amount: from the guest, used for service, analytics, marketing and financial reporting, shared with card Data Access & Collection

Better serve our guests

• Spending amount: from the guest, used for service, analytics, marketing and financial reporting, shared with card Data Access & Collection

Perform analytics to improve business operations

• Spending amount: from the guest, used for service, analytics, marketing and financial reporting, shared with card Data Access & Collection

Support marketing efforts

• Spending amount: from the guest, used for service, analytics, marketing and financial reporting, shared with card Data Access & Collection

Fulfill obligations for business reporting, auditing, tax, and income reconciliation

• Spending amount: from the guest, used for service, analytics, marketing and financial reporting, shared with card Data Access & Collection

We have shared this personal information with the following categories of third parties

• Spending amount: from the guest, used for service, analytics, marketing and financial reporting, shared with card Data Access & Collection

Payment card issuers and payment processors

• Spending amount: from the guest, used for service, analytics, marketing and financial reporting, shared with card Data Access & Collection

This information was sold to a third party within the past 12 months

• Spending amount: from the guest, used for service, analytics, marketing and financial reporting, shared with card Data Access & Collection

No

• Spending amount: from the guest, used for service, analytics, marketing and financial reporting, shared with card Data Access & Collection

Stay Add-Ons (such as parking, pets, time, and extra add-ons)

• Stay add-ons such as parking, pets, time and extra add-ons: from the guest, shared with Hilton Principal Data Access & Collection

We have obtained this personal information from the following sources:

• Stay add-ons such as parking, pets, time and extra add-ons: from the guest, shared with Hilton Principal Data Access & Collection

Directly from consumers themselves

• Stay add-ons such as parking, pets, time and extra add-ons: from the guest, shared with Hilton Principal Data Access & Collection

We collected this personal information for the following business or commercial purposes:

• Stay add-ons such as parking, pets, time and extra add-ons: from the guest, shared with Hilton Principal Data Access & Collection

Better serve our guests

• Stay add-ons such as parking, pets, time and extra add-ons: from the guest, shared with Hilton Principal Data Access & Collection

Improve customer experience

• Stay add-ons such as parking, pets, time and extra add-ons: from the guest, shared with Hilton Principal Data Access & Collection

We have shared this personal information with the following categories of third parties

• Stay add-ons such as parking, pets, time and extra add-ons: from the guest, shared with Hilton Principal Data Access & Collection

Hilton Principal

• Stay add-ons such as parking, pets, time and extra add-ons: from the guest, shared with Hilton Principal Data Access & Collection

This information was sold to a third party within the past 12 months

• Stay add-ons such as parking, pets, time and extra add-ons: from the guest, shared with Hilton Principal Data Access & Collection

No

• Stay add-ons such as parking, pets, time and extra add-ons: from the guest, shared with Hilton Principal Data Access & Collection

Back to Top

Collection of Personal Information – Notice at Point of Collection

Browsing Hilton Websites

• Point of collection: categories and purposes disclosed when you browse a Hilton website Data Access & Collection

When you browse a Hilton website, we collect the following categories of personal information about you, which are used for the following purposes:

• Point of collection: categories and purposes disclosed when you browse a Hilton website Data Access & Collection

Collapse All

Interaction information with Hilton websites, apps, emails or ads (such as open time, clicked links, and version)

• Point of collection: categories and purposes disclosed when you browse a Hilton website Data Access & Collection

We collect this information in order to:

• Point of collection: categories and purposes disclosed when you browse a Hilton website Data Access & Collection

Show you targeted advertisements on marketing efforts including media, email, and chat (e.g., if you searched for Hilton properties in New York City, then when you visit a non-Hilton website, we may show you an ad for a Hilton property in New York City)

• Point of collection: categories and purposes disclosed when you browse a Hilton website Data Access & Collection

Optimize our websites and mobile apps

• Point of collection, browsing: remaining purposes of interaction information Use & Processing

Perform analytics to improve business operations

• Point of collection, browsing: remaining purposes of interaction information Use & Processing

Perform analytics in order to provide guests with personalized offers and content

• Point of collection, browsing: remaining purposes of interaction information Use & Processing

Marketing

• Point of collection, browsing: remaining purposes of interaction information Use & Processing

Share that data with advertising networks who serve personalized advertisements

• Point of collection, browsing: remaining purposes of interaction information Use & Processing

Detect and prevent fraud

• Point of collection, browsing: remaining purposes of interaction information Use & Processing

IP address

• Point of collection, browsing: IP address and its purposes Data Access & Collection

We collect this information in order to:

• Point of collection, browsing: IP address and its purposes Data Access & Collection

Perform analytics in order to provide guests with personalized offers and content

• Point of collection, browsing: IP address and its purposes Data Access & Collection

Show you targeted advertisements on media

• Point of collection, browsing: IP address and its purposes Data Access & Collection

Optimize our websites and mobile apps

• Point of collection, browsing: IP address and its purposes Data Access & Collection

Perform analytics to improve business operations

• Point of collection, browsing: IP address and its purposes Data Access & Collection

Share that data with advertising networks who serve personalized advertisements

• Point of collection, browsing: IP address and its purposes Data Access & Collection

Conduct SCA as part of the payment process, when required by law

• Point of collection, browsing: IP address and its purposes Data Access & Collection

Troubleshoot and resolve website issues

• Point of collection, browsing: IP address and its purposes Data Access & Collection

Detect and prevent fraud

• Point of collection, browsing: IP address and its purposes Data Access & Collection

Session ID

• Point of collection, browsing: session ID and its purposes Data Access & Collection

We collect this information in order to:

• Point of collection, browsing: session ID and its purposes Data Access & Collection

Perform analytics in order to provide guests with personalized offers and content

• Point of collection, browsing: session ID and its purposes Data Access & Collection

Marketing

• Point of collection, browsing: session ID and its purposes Data Access & Collection

Show you targeted advertisements on media

• Point of collection, browsing: session ID and its purposes Data Access & Collection

Optimize our websites and mobile apps

• Point of collection, browsing: session ID and its purposes Data Access & Collection

Perform analytics to improve business operations

• Point of collection, browsing: session ID and its purposes Data Access & Collection

Share that data with advertising networks who serve personalized advertisements

• Point of collection, browsing: session ID and its purposes Data Access & Collection

Detect and prevent fraud

• Point of collection, browsing: session ID and its purposes Data Access & Collection

Booking engine

• Point of collection, browsing: booking engine data and its purposes Data Access & Collection

We collect this information in order to:

• Point of collection, browsing: booking engine data and its purposes Data Access & Collection

Show you targeted advertisements on media

• Point of collection, browsing: booking engine data and its purposes Data Access & Collection

Support marketing efforts

• Point of collection, browsing: booking engine data and its purposes Data Access & Collection

Provide customer service

• Point of collection, browsing: booking engine data and its purposes Data Access & Collection

Perform analytics to improve business operations

• Point of collection, browsing: booking engine data and its purposes Data Access & Collection

Hilton and Lyft accounts

• Point of collection, browsing: Hilton and Lyft account data and its purposes Data Access & Collection

We collect this information in order to:

• Point of collection, browsing: Hilton and Lyft account data and its purposes Data Access & Collection

Show you targeted advertisements on media

• Point of collection, browsing: Hilton and Lyft account data and its purposes Data Access & Collection

Support marketing efforts

• Point of collection, browsing: Hilton and Lyft account data and its purposes Data Access & Collection

Provide customer service

• Point of collection, browsing: Hilton and Lyft account data and its purposes Data Access & Collection

Perform analytics to improve business operations

• Point of collection, browsing: Hilton and Lyft account data and its purposes Data Access & Collection

If you are a Hilton Honors member and you log into your account during your browsing session, then we collect the following information about you, which is used for the following purposes:

• Point of collection: information collected when a member logs in during a browsing session Data Access & Collection

Collapse All

Internet or network activity information

• Point of collection: information collected when a member logs in during a browsing session Data Access & Collection

We collect this information in order to:

• Point of collection: information collected when a member logs in during a browsing session Data Access & Collection

Show you targeted advertisements on marketing efforts including media, email, and chat (e.g., if you searched for Hilton properties in New York City, then when you visit a non-Hilton website, we may show you an ad for a Hilton property in New York City)

• Point of collection: information collected when a member logs in during a browsing session Data Access & Collection

Optimize our websites and mobile apps

• Point of collection: information collected when a member logs in during a browsing session Data Access & Collection

Perform analytics to improve business operations

• Point of collection: information collected when a member logs in during a browsing session Data Access & Collection

Perform analytics in order to provide guests with personalized offers and content

• Point of collection: information collected when a member logs in during a browsing session Data Access & Collection

Marketing

• Point of collection: information collected when a member logs in during a browsing session Data Access & Collection

Share that data with advertising networks who serve personalized advertisements

• Point of collection: information collected when a member logs in during a browsing session Data Access & Collection

Detect and prevent fraud

• Point of collection: information collected when a member logs in during a browsing session Data Access & Collection

IP address

• Point of collection, logged-in browsing: IP address and its purposes Data Access & Collection

We collect this information in order to:

• Point of collection, logged-in browsing: IP address and its purposes Data Access & Collection

Perform analytics in order to provide guests with personalized offers and content

• Point of collection, logged-in browsing: IP address and its purposes Data Access & Collection

Share that data with advertising networks who serve personalized advertisements

• Point of collection, logged-in browsing: IP address and its purposes Data Access & Collection

Conduct SCA as part of the payment process, when required by law

• Point of collection, logged-in browsing: IP address and its purposes Data Access & Collection

Show you targeted advertisements on media

• Point of collection, logged-in browsing: IP address and its purposes Data Access & Collection

Optimize our websites and mobile apps

• Point of collection, logged-in browsing: IP address and its purposes Data Access & Collection

Troubleshoot and resolve website issues

• Point of collection, logged-in browsing: IP address and its purposes Data Access & Collection

Perform analytics to improve business operations

• Point of collection, logged-in browsing: IP address and its purposes Data Access & Collection

Detect and prevent fraud

• Point of collection, logged-in browsing: IP address and its purposes Data Access & Collection

Session ID

• Point of collection, logged-in browsing: session ID and its purposes Data Access & Collection

We collect this information in order to:

• Point of collection, logged-in browsing: session ID and its purposes Data Access & Collection

Perform analytics in order to provide guests with personalized offers and content

• Point of collection, logged-in browsing: session ID and its purposes Data Access & Collection

Show you targeted advertisements on media

• Point of collection, logged-in browsing: session ID and its purposes Data Access & Collection

Optimize our websites and mobile apps

• Point of collection, logged-in browsing: session ID and its purposes Data Access & Collection

Perform analytics to improve business operations

• Point of collection, logged-in browsing: session ID and its purposes Data Access & Collection

Share that data with advertising networks who serve personalized advertisements

• Point of collection, logged-in browsing: session ID and its purposes Data Access & Collection

Detect and prevent fraud

• Point of collection, logged-in browsing: session ID and its purposes Data Access & Collection

Customer ratings and survey responses

• Point of collection, logged-in browsing: customer ratings and survey responses Data Access & Collection

We collect this personal information in order to:

• Point of collection, logged-in browsing: customer ratings and survey responses Data Access & Collection

Troubleshoot and resolve website issues

• Point of collection, logged-in browsing: customer ratings and survey responses Data Access & Collection

Improve customer experience

• Point of collection, logged-in browsing: customer ratings and survey responses Data Access & Collection

Free form textual feedback

• Point of collection, logged-in browsing: free form textual feedback Data Access & Collection

We collect this personal information in order to:

• Point of collection, logged-in browsing: free form textual feedback Data Access & Collection

Troubleshoot and resolve website issues

• Point of collection, logged-in browsing: free form textual feedback Data Access & Collection

Improve customer experience

• Point of collection, logged-in browsing: free form textual feedback Data Access & Collection

Hilton Honors number

• Point of collection, logged-in browsing: Hilton Honors number and its purposes Data Access & Collection

We collect this personal information in order to:

• Point of collection, logged-in browsing: Hilton Honors number and its purposes Data Access & Collection

Look up and verify your Hilton Honors account and reservation

• Point of collection, logged-in browsing: Hilton Honors number and its purposes Data Access & Collection

Fulfill guest reservations

• Point of collection, logged-in browsing: Hilton Honors number and its purposes Data Access & Collection

Send guests communications relating to their reservations

• Point of collection, logged-in browsing: Hilton Honors number and its purposes Data Access & Collection

Administer membership and activity in the Hilton Honors loyalty program

• Point of collection, logged-in browsing: Hilton Honors number and its purposes Data Access & Collection

Support marketing efforts

• Point of collection, logged-in browsing: Hilton Honors number and its purposes Data Access & Collection

Provide customer service and support

• Point of collection, logged-in browsing: Hilton Honors number and its purposes Data Access & Collection

Troubleshoot and resolve website issues

• Point of collection, logged-in browsing: Hilton Honors number and its purposes Data Access & Collection

Send marketing communications via email, direct mail, and social media

• Point of collection, logged-in browsing: Hilton Honors number and its purposes Data Access & Collection

Perform analytics in order to provide guests with personalized offers and content

• Point of collection, logged-in browsing: Hilton Honors number and its purposes Data Access & Collection

Perform analytics to improve business operations

• Point of collection, logged-in browsing: Hilton Honors number and its purposes Data Access & Collection

Determine guests’ eligibility for special or promotional rates

• Point of collection, logged-in browsing: Hilton Honors number and its purposes Data Access & Collection

Process payments

• Point of collection, logged-in browsing: Hilton Honors number and its purposes Data Access & Collection

Process transactions with partners

• Point of collection, logged-in browsing: Hilton Honors number and its purposes Data Access & Collection

Administer contests and sweepstakes

• Point of collection, logged-in browsing: Hilton Honors number and its purposes Data Access & Collection

Detect and prevent fraud

• Point of collection, making a reservation: tier, purposes and the categories collected Data Access & Collection

Hilton Honors tier

• Point of collection, making a reservation: tier, purposes and the categories collected Data Access & Collection

We collect this personal information in order to:

• Point of collection, making a reservation: tier, purposes and the categories collected Data Access & Collection

Support marketing efforts

• Point of collection, making a reservation: tier, purposes and the categories collected Data Access & Collection

Provide customer service

• Point of collection, making a reservation: tier, purposes and the categories collected Data Access & Collection

Troubleshoot and resolve website issues

• Point of collection, making a reservation: tier, purposes and the categories collected Data Access & Collection

Making a Reservation

• Point of collection, making a reservation: tier, purposes and the categories collected Data Access & Collection

When you make a reservation at a Hilton property, we collect the following categories of personal information about you, which are used for the following purposes:

• Point of collection, making a reservation: tier, purposes and the categories collected Data Access & Collection

Collapse All

Name

• Point of collection, reservation: name and its purposes Data Access & Collection

We collect this information in order to:

• Point of collection, reservation: name and its purposes Data Access & Collection

Look up and verify your reservation

• Point of collection, reservation: name and its purposes Data Access & Collection

Fulfill your reservation

• Point of collection, reservation: name and its purposes Data Access & Collection

Send you communications relating to your reservation

• Point of collection, reservation: name and its purposes Data Access & Collection

Administer membership and activity in the Hilton Honors loyalty program

• Point of collection, reservation: name and its purposes Data Access & Collection

Provide customer service and support

• Point of collection, reservation: name and its purposes Data Access & Collection

Send you marketing communications via email and direct mail

• Point of collection, reservation: name and its purposes Data Access & Collection

Perform analytics to provide guests with personalized offers and content

• Point of collection, reservation: name — analytics, payments and sharing Data Access & Collection

Perform analytics to improve business operations

• Point of collection, reservation: name — analytics, payments and sharing Data Access & Collection

Determine your eligibility for special or promotional rates

• Point of collection, reservation: name — analytics, payments and sharing Data Access & Collection

Process payments

• Point of collection, reservation: name — analytics, payments and sharing Data Access & Collection

Process transactions with partners

• Point of collection, reservation: name — analytics, payments and sharing Data Access & Collection

Share this information with Hilton Principal, Hilton’s Third-Party Partner Hilton Partner Accommodations, and Hilton’s Third-Party Operator

• Point of collection, reservation: name — analytics, payments and sharing Data Access & Collection

Administer contests and sweepstakes

• Point of collection, reservation: name — analytics, payments and sharing Data Access & Collection

Optimize our websites and mobile apps

• Point of collection, reservation: name — analytics, payments and sharing Data Access & Collection

Detect and prevent fraud

• Point of collection, reservation: name — analytics, payments and sharing Data Access & Collection

Additional names

• Point of collection, reservation: additional names Data Access & Collection

We collect this information in order to:

• Point of collection, reservation: additional names Data Access & Collection

Fulfill your reservation

• Point of collection, reservation: additional names Data Access & Collection

Share this information with Hilton Partner Accommodations and Hilton's Third-Party Operator

• Point of collection, reservation: additional names Data Access & Collection

Hilton Honors number

• Point of collection, reservation: Hilton Honors number and its purposes and sharing Data Access & Collection

We collect this personal information in order to:

• Point of collection, reservation: Hilton Honors number and its purposes and sharing Data Access & Collection

Look up and verify your Hilton Honors account and reservation

• Point of collection, reservation: Hilton Honors number and its purposes and sharing Data Access & Collection

Administer your membership in Hilton Honors

• Point of collection, reservation: Hilton Honors number and its purposes and sharing Data Access & Collection

Fulfill guest reservations

• Point of collection, reservation: Hilton Honors number and its purposes and sharing Data Access & Collection

Send guests communications relating to their reservations

• Point of collection, reservation: Hilton Honors number and its purposes and sharing Data Access & Collection

Provide customer service and support

• Point of collection, reservation: Hilton Honors number and its purposes and sharing Data Access & Collection

Send marketing communications via email, direct mail, and social media

• Point of collection, reservation: Hilton Honors number and its purposes and sharing Data Access & Collection

Perform analytics in order to provide guests with personalized offers and content

• Point of collection, reservation: Hilton Honors number and its purposes and sharing Data Access & Collection

Perform analytics to improve business operations

• Point of collection, reservation: Hilton Honors number and its purposes and sharing Data Access & Collection

Determine guests’ eligibility for special or promotional rates

• Point of collection, reservation: Hilton Honors number and its purposes and sharing Data Access & Collection

Process payments

• Point of collection, reservation: Hilton Honors number and its purposes and sharing Data Access & Collection

Process transactions with partners

• Point of collection, reservation: Hilton Honors number and its purposes and sharing Data Access & Collection

Share this information with Hilton Principal, Hilton Partner Accommodations and Hilton’s Third-Party Operator

• Point of collection, reservation: Hilton Honors number and its purposes and sharing Data Access & Collection

Administer contests and sweepstakes

• Point of collection, reservation: Hilton Honors number and its purposes and sharing Data Access & Collection

Detect and prevent fraud

• Point of collection, reservation: Hilton Honors number and its purposes and sharing Data Access & Collection

Phone number

• Point of collection, reservation: phone number, its purposes and sharing Data Access & Collection

We collect this information in order to:

• Point of collection, reservation: phone number, its purposes and sharing Data Access & Collection

Verify identity

• Point of collection, reservation: phone number, its purposes and sharing Data Access & Collection

Fulfill your reservation

• Point of collection, reservation: phone number, its purposes and sharing Data Access & Collection

Send you text messages relating to check-in and any services you may need during your stay

• Point of collection, reservation: phone number, its purposes and sharing Data Access & Collection

Send marketing communications via SMS

• Point of collection, reservation: phone number, its purposes and sharing Data Access & Collection

Provide customer service and support

• Point of collection, reservation: phone number, its purposes and sharing Data Access & Collection

Perform analytics in order to provide you with personalized offers and content

• Point of collection, reservation: phone number, its purposes and sharing Data Access & Collection

Perform analytics to improve business operations

• Point of collection, reservation: phone number, its purposes and sharing Data Access & Collection

Process transactions with partners

• Point of collection, reservation: phone number, its purposes and sharing Data Access & Collection

Share this information with Hilton Principal, Hilton’s Third-Party Partner, Hilton Partner Accommodations, and Hilton’s Third-Party Operator

• Point of collection, reservation: phone number, its purposes and sharing Data Access & Collection

Detect and prevent fraud

• Point of collection, reservation: phone number, its purposes and sharing Data Access & Collection

Engage in sales activity for group bookings, meetings and events

• Point of collection, reservation: phone number, its purposes and sharing Data Access & Collection

Address

• Point of collection, reservation: address, its purposes and sharing Data Access & Collection

We collect this information in order to:

• Point of collection, reservation: address, its purposes and sharing Data Access & Collection

Administer your membership in the Hilton Honors loyalty program

• Point of collection, reservation: address, its purposes and sharing Data Access & Collection

Verify your Hilton Honors account

• Point of collection, reservation: address, its purposes and sharing Data Access & Collection

Send you communications relating to Hilton Honors

• Point of collection, reservation: address, its purposes and sharing Data Access & Collection

Send you marketing communications

• Point of collection, reservation: address, its purposes and sharing Data Access & Collection

Perform analytics in order to provide you with personalized offers and content

• Point of collection, reservation: address, its purposes and sharing Data Access & Collection

Perform analytics to improve business operations

• Point of collection, reservation: address, its purposes and sharing Data Access & Collection

Determine your eligibility for special or promotional rates

• Point of collection, reservation: address, its purposes and sharing Data Access & Collection

Process payments

• Point of collection, reservation: address, its purposes and sharing Data Access & Collection

Process transactions with partners

• Point of collection, reservation: address, its purposes and sharing Data Access & Collection

Share this information with Hilton Principal, Hilton’s Third-Party Partner, Hilton Partner Accommodations, and Hilton’s Third-Party Operator

• Point of collection, reservation: address, its purposes and sharing Data Access & Collection

Detect and prevent fraud

• Point of collection, reservation: address, its purposes and sharing Data Access & Collection

Address type (home/work)

• Point of collection, reservation: address type (home/work) Data Access & Collection

We collect this information in order to:

• Point of collection, reservation: address type (home/work) Data Access & Collection

Perform analytics in order to provide you with personalized offers and content

• Point of collection, reservation: address type (home/work) Data Access & Collection

Share this information with Hilton Principal, Hilton Partner Accommodations and Hilton’s Third-Party Operator

• Point of collection, reservation: address type (home/work) Data Access & Collection

Email address

• Point of collection, reservation: email address and its purposes Data Access & Collection

We collect this information in order to:

• Point of collection, reservation: email address and its purposes Data Access & Collection

Administer your membership in the Hilton Honors loyalty program

• Point of collection, reservation: email address and its purposes Data Access & Collection

Verify your Hilton Honors account

• Point of collection, reservation: email address and its purposes Data Access & Collection

Associate your reservation with your Hilton Honors account

• Point of collection, reservation: email address and its purposes Data Access & Collection

Send you communications relating to Hilton Honors

• Point of collection, reservation: email address and its purposes Data Access & Collection

Send you marketing communications

• Point of collection, reservation: email address and its purposes Data Access & Collection

Perform analytics in order to provide you with personalized offers and content

• Point of collection, reservation: email address and its purposes Data Access & Collection

Perform analytics to improve business operations

• Point of collection, reservation: email address and its purposes Data Access & Collection

Determine your eligibility for special or promotional rates

• Point of collection, reservation: email address and its purposes Data Access & Collection

Process transactions with partners

• Point of collection, reservation: email address and its purposes Data Access & Collection

Share this information with Hilton Principal, Hilton’s Third-Party Partner, Hilton Partner Accommodations, and Hilton’s Third-Party Operator

• Point of collection, reservation: email address — sharing, fraud, mobile authentication and group sales Data Access & Collection

Detect and prevent fraud

• Point of collection, reservation: email address — sharing, fraud, mobile authentication and group sales Data Access & Collection

Authenticate mobile account

• Point of collection, reservation: email address — sharing, fraud, mobile authentication and group sales Data Access & Collection

Engage in sales activity for group bookings, meetings, and events

• Point of collection, reservation: email address — sharing, fraud, mobile authentication and group sales Data Access & Collection

Preferred language

• Point of collection, reservation: preferred language Data Access & Collection

We collect this information in order to:

• Point of collection, reservation: preferred language Data Access & Collection

Provide you with a superior guest experience

• Point of collection, reservation: preferred language Data Access & Collection

Send you communications relating to Hilton Honors

• Point of collection, reservation: preferred language Data Access & Collection

Send you marketing communications

• Point of collection, reservation: preferred language Data Access & Collection

Perform analytics in order to provide you with personalized offers and content

• Point of collection, reservation: preferred language Data Access & Collection

Share this information with Hilton Principal, Hilton’s Third-Party Partner, Hilton Partner Accommodations, and Hilton’s Third-Party Operator

• Point of collection, reservation: preferred language Data Access & Collection

Payment card information

• Point of collection, reservation: payment card information Data Access & Collection

We collect this information in order to:

• Point of collection, reservation: payment card information Data Access & Collection

Process payments

• Point of collection, reservation: payment card information Data Access & Collection

Share this information with Hilton Principal, Hilton Partner Accommodations, and Hilton’s Third-Party Operator

• Point of collection, reservation: payment card information Data Access & Collection

Detect and prevent fraud

• Point of collection, reservation: payment card information Data Access & Collection

Room preference

• Point of collection, reservation: room preference Data Access & Collection

We collect this information in order to:

• Point of collection, reservation: room preference Data Access & Collection

Fulfill your reservations

• Point of collection, reservation: room preference Data Access & Collection

Personalize your experience

• Point of collection, reservation: room preference Data Access & Collection

Perform analytics to provide you with personalized offers and content

• Point of collection, reservation: room preference Data Access & Collection

Perform analytics to improve business operations

• Point of collection, reservation: room preference Data Access & Collection

Share this information with Hilton Principal, Hilton Partner Accommodations, and Hilton’s Third-Party Operator

• Point of collection, reservation: room preference Data Access & Collection

Corporate name and number

• Point of collection, reservation: corporate name and number Data Access & Collection

We collect this information in order to:

• Point of collection, reservation: corporate name and number Data Access & Collection

Fulfill your reservation

• Point of collection, reservation: corporate name and number Data Access & Collection

Determine your eligibility for special or promotional rates

• Point of collection, reservation: corporate name and number Data Access & Collection

Share this information with Hilton’s Third-Party Partner

• Point of collection, reservation: corporate name and number Data Access & Collection

Travel agent name and number

• Point of collection, reservation: travel agent name and number Data Access & Collection

We collect this information in order to:

• Point of collection, reservation: travel agent name and number Data Access & Collection

Fulfill your reservation

• Point of collection, reservation: travel agent name and number Data Access & Collection

Determine your eligibility for special or promotional rates

• Point of collection, reservation: travel agent name and number Data Access & Collection

Properly attribute reservations to travel agents

• Point of collection, reservation: travel agent name and number Data Access & Collection

Share this information with Hilton’s Third-Party Partner

• Point of collection, reservation: travel agent name and number Data Access & Collection

Airline partner name and number

• Point of collection, reservation: airline partner name and number Data Access & Collection

We collect this information in order to:

• Point of collection, reservation: airline partner name and number Data Access & Collection

Credit Points to you if you participate in an airline loyalty program

• Point of collection, reservation: airline partner name and number Data Access & Collection

Share this information with Hilton’s Third-Party Partner

• Point of collection, reservation: airline partner name and number Data Access & Collection

Enrolling in Hilton Honors

• Point of collection: what is collected when you enroll in Hilton Honors Data Access & Collection

When you enroll in Hilton Honors, we collect the following categories of personal information about you, which are used for the following purposes:

• Point of collection: what is collected when you enroll in Hilton Honors Data Access & Collection

Collapse All

Name

• Point of collection, enrolment: name, its purposes and sharing Data Access & Collection

We collect this information in order to:

• Point of collection, enrolment: name, its purposes and sharing Data Access & Collection

Administer your membership in the Hilton Honors loyalty program

• Point of collection, enrolment: name, its purposes and sharing Data Access & Collection

Verify your Hilton Honors account

• Point of collection, enrolment: name, its purposes and sharing Data Access & Collection

Send you communications relating to Hilton Honors

• Point of collection, enrolment: name, its purposes and sharing Data Access & Collection

Send you marketing communications

• Point of collection, enrolment: name, its purposes and sharing Data Access & Collection

Perform analytics to provide guests with personalized offers and content

• Point of collection, enrolment: name, its purposes and sharing Data Access & Collection

Perform analytics to improve business operations

• Point of collection, enrolment: name, its purposes and sharing Data Access & Collection

Determine your eligibility for special or promotional rates

• Point of collection, enrolment: name, its purposes and sharing Data Access & Collection

Process payments

• Point of collection, enrolment: name, its purposes and sharing Data Access & Collection

Process transactions with Hilton Honors affiliated partners (such as Points.com and Lyft)

• Point of collection, enrolment: name, its purposes and sharing Data Access & Collection

Share this information with Hilton's Third-Party Partner

• Point of collection, enrolment: name, its purposes and sharing Data Access & Collection

Administer contests and sweepstakes

• Point of collection, enrolment: name, its purposes and sharing Data Access & Collection

Optimize our websites and mobile apps

• Point of collection, enrolment: name, its purposes and sharing Data Access & Collection

Detect and prevent fraud

• Point of collection, enrolment: name, its purposes and sharing Data Access & Collection

Phone and fax numbers

• Point of collection, enrolment: phone and fax numbers Data Access & Collection

We collect this information in order to:

• Point of collection, enrolment: phone and fax numbers Data Access & Collection

Administer your membership in the Hilton Honors loyalty program

• Point of collection, enrolment: phone and fax numbers Data Access & Collection

Verify your Hilton Honors account

• Point of collection, enrolment: phone and fax numbers Data Access & Collection

Send you text messages relating to check-in and any services you may need during your stay

• Point of collection, enrolment: phone and fax numbers Data Access & Collection

Authenticate mobile account

• Point of collection, enrolment: phone and fax numbers Data Access & Collection

Send service-related SMS communications

• Point of collection, enrolment: phone and fax numbers Data Access & Collection

Provide customer service and support

• Point of collection, enrolment: phone and fax numbers Data Access & Collection

Perform analytics in order to provide you with personalized offers and content

• Point of collection, enrolment: phone and fax numbers Data Access & Collection

Perform analytics to improve business operations

• Point of collection, enrolment: phone and fax numbers Data Access & Collection

Process transactions with partners

• Point of collection, enrolment: phone and fax numbers Data Access & Collection

Share this information with Hilton's Third-Party Partner

• Point of collection, enrolment: phone and fax numbers Data Access & Collection

Detect and prevent fraud

• Point of collection, enrolment: phone and fax numbers Data Access & Collection

Engage in sales activity for group bookings, meetings and events

• Point of collection, enrolment: phone and fax numbers Data Access & Collection

Address

• Point of collection, enrolment: address, its purposes and sharing Data Access & Collection

We collect this information in order to:

• Point of collection, enrolment: address, its purposes and sharing Data Access & Collection

Administer your membership in the Hilton Honors loyalty program

• Point of collection, enrolment: address, its purposes and sharing Data Access & Collection

Verify your Hilton Honors account

• Point of collection, enrolment: address, its purposes and sharing Data Access & Collection

Send you communications relating to Hilton Honors

• Point of collection, enrolment: address, its purposes and sharing Data Access & Collection

Send you marketing communications

• Point of collection, enrolment: address, its purposes and sharing Data Access & Collection

Perform analytics to provide guests with personalized offers and content

• Point of collection, enrolment: address, its purposes and sharing Data Access & Collection

Perform analytics to improve business operations

• Point of collection, enrolment: address, its purposes and sharing Data Access & Collection

Determine your eligibility for special or promotional rates

• Point of collection, enrolment: address, its purposes and sharing Data Access & Collection

Process payments

• Point of collection, enrolment: address, its purposes and sharing Data Access & Collection

Process transactions with partners

• Point of collection, enrolment: address, its purposes and sharing Data Access & Collection

Share this information with Hilton’s Third-Party Partner

• Point of collection, enrolment: address, its purposes and sharing Data Access & Collection

Detect and prevent fraud

• Point of collection, enrolment: address, its purposes and sharing Data Access & Collection

Engage in sales activity for group bookings, meetings, and events

• Point of collection, enrolment: address, its purposes and sharing Data Access & Collection

Email address

• Point of collection, enrolment: email address, first purposes Data Access & Collection

We collect this information in order to:

• Point of collection, enrolment: email address, first purposes Data Access & Collection

Administer your membership in the Hilton Honors loyalty program

• Point of collection, enrolment: email address, first purposes Data Access & Collection

Verify your Hilton Honors account and reservation

• Point of collection, enrolment: email address, first purposes Data Access & Collection

Associate your reservation with your Hilton Honors account

• Point of collection, enrolment: email address, first purposes Data Access & Collection

Send you communications relating to Hilton Honors

• Point of collection, enrolment: email address — remaining purposes and sharing Data Access & Collection

Send you marketing communications

• Point of collection, enrolment: email address — remaining purposes and sharing Data Access & Collection

Perform analytics in order to provide you with personalized offers and content

• Point of collection, enrolment: email address — remaining purposes and sharing Data Access & Collection

Perform analytics to improve business operations

• Point of collection, enrolment: email address — remaining purposes and sharing Data Access & Collection

Determine your eligibility for special or promotional rates

• Point of collection, enrolment: email address — remaining purposes and sharing Data Access & Collection

Process transactions with partners

• Point of collection, enrolment: email address — remaining purposes and sharing Data Access & Collection

Share this information with Hilton's Third-Party Partner

• Point of collection, enrolment: email address — remaining purposes and sharing Data Access & Collection

Detect and prevent fraud

• Point of collection, enrolment: email address — remaining purposes and sharing Data Access & Collection

Authenticate mobile account

• Point of collection, enrolment: email address — remaining purposes and sharing Data Access & Collection

Engage in sales activity for group bookings, meetings and events

• Point of collection, enrolment: email address — remaining purposes and sharing Data Access & Collection

Preferred language

• Point of collection, enrolment: preferred language Data Access & Collection

We collect this information in order to:

• Point of collection, enrolment: preferred language Data Access & Collection

Provide you with a superior guest experience

• Point of collection, enrolment: preferred language Data Access & Collection

Send you communications relating to Hilton Honors

• Point of collection, enrolment: preferred language Data Access & Collection

Send you marketing communications

• Point of collection, enrolment: preferred language Data Access & Collection

Perform analytics in order to provide you with personalized offers and content

• Point of collection, enrolment: preferred language Data Access & Collection

Share this information with Hilton Principal, Hilton’s Third-Party Partner, Hilton Partner Accommodations, and Hilton’s Third-Party Operator

• Point of collection, enrolment: preferred language Data Access & Collection

Payment card information

• Point of collection, enrolment: payment card information Data Access & Collection

We collect this information in order to:

• Point of collection, enrolment: payment card information Data Access & Collection

Process payments

• Point of collection, enrolment: payment card information Data Access & Collection

Share this information with Hilton Principal, Hilton Partner Accommodations, and Hilton’s Third-Party Operator

• Point of collection, enrolment: payment card information Data Access & Collection

Detect and prevent fraud

• Point of collection, enrolment: payment card information Data Access & Collection

Room preference

• Point of collection, enrolment: room preference Data Access & Collection

We collect this information in order to:

• Point of collection, enrolment: room preference Data Access & Collection

Fulfill your reservations

• Point of collection, enrolment: room preference Data Access & Collection

Personalize your experience

• Point of collection, enrolment: room preference Data Access & Collection

Perform analytics to provide you with personalized offers and content

• Point of collection, enrolment: room preference Data Access & Collection

Perform analytics to improve business operations

• Point of collection, enrolment: room preference Data Access & Collection

Share this information with Hilton Principal, Hilton Partner Accommodations, and Hilton’s Third-Party Operator

• Point of collection, enrolment: room preference Data Access & Collection

Corporate name and number

• Point of collection, enrolment: corporate name and number Data Access & Collection

We collect this information in order to:

• Point of collection, enrolment: corporate name and number Data Access & Collection

Fulfill your reservation

• Point of collection, enrolment: corporate name and number Data Access & Collection

Determine your eligibility for special or promotional rates

• Point of collection, enrolment: corporate name and number Data Access & Collection

Share this information with Hilton’s Third-Party Partner

• Point of collection, enrolment: corporate name and number Data Access & Collection

Travel agent name and number

• Point of collection, enrolment: travel agent name and number Data Access & Collection

We collect this information in order to:

• Point of collection, enrolment: travel agent name and number Data Access & Collection

Fulfill your reservation

• Point of collection, enrolment: travel agent name and number Data Access & Collection

Determine your eligibility for special or promotional rates

• Point of collection, enrolment: travel agent name and number Data Access & Collection

Properly attribute reservations to travel agents

• Point of collection, enrolment: travel agent name and number Data Access & Collection

Share this information with Hilton’s Third-Party Partner

• Point of collection, enrolment: travel agent name and number Data Access & Collection

Airline partner name and number

• Point of collection, enrolment: airline partner name and number Data Access & Collection

We collect this information in order to:

• Point of collection, enrolment: airline partner name and number Data Access & Collection

Credit Points to you if you participate in an airline loyalty program

• Point of collection, enrolment: airline partner name and number Data Access & Collection

Share this information with Hilton’s Third-Party Partner

• Point of collection, enrolment: airline partner name and number Data Access & Collection

MyWay preferences

• Point of collection, enrolment: MyWay preferences Data Access & Collection

We collect this information in order to:

• Point of collection, enrolment: MyWay preferences Data Access & Collection

Provide you with a superior guest experience

• Point of collection, enrolment: MyWay preferences Data Access & Collection

Share this information with Hilton’s Third-Party Partner

• Point of collection, enrolment: MyWay preferences Data Access & Collection

Email subscription preferences

• Point of collection, enrolment: email subscription preferences Data Access & Collection

We collect this information in order to:

• Point of collection, enrolment: email subscription preferences Data Access & Collection

Send you the communications you would like to receive

• Point of collection, enrolment: email subscription preferences Data Access & Collection

Opt-out preferences

• Point of collection, enrolment: opt-out preferences Data Access & Collection

We collect this information in order to:

• Point of collection, enrolment: opt-out preferences Data Access & Collection

Send you the communications you would like to receive

• Point of collection, enrolment: opt-out preferences Data Access & Collection

Better serve our guests

• Point of collection, enrolment: opt-out preferences Data Access & Collection

Checking in at a Hilton Property

• Point of collection: what may be collected when you check in at a Hilton property Data Access & Collection

When you check in at a Hilton property, we may collect the following categories of personal information about you, which are used for the following purposes:

• Point of collection: what may be collected when you check in at a Hilton property Data Access & Collection

Collapse All

Name

• Point of collection, check-in: name and its purposes Data Access & Collection

We collect this information in order to:

• Point of collection, check-in: name and its purposes Data Access & Collection

Look up and verify your reservation

• Point of collection, check-in: name and its purposes Data Access & Collection

Fulfill your reservation

• Point of collection, check-in: name and its purposes Data Access & Collection

Provide customer service and support

• Point of collection, check-in: name and its purposes Data Access & Collection

Detect and prevent fraud

• Point of collection, check-in: name and its purposes Data Access & Collection

Payment card information

• Point of collection, check-in: payment card information Data Access & Collection

We collect this information in order to:

• Point of collection, check-in: payment card information Data Access & Collection

Process payments

• Point of collection, check-in: payment card information Data Access & Collection

Share this information with Hilton Principal, Hilton Partner Accommodations, and Hilton’s Third-Party Operator

• Point of collection, check-in: payment card information Data Access & Collection

Detect and prevent fraud

• Point of collection, check-in: payment card information Data Access & Collection

Additional guest names

• Point of collection, check-in: additional guest names Data Access & Collection

We collect this information in order to:

• Point of collection, check-in: additional guest names Data Access & Collection

Fulfill your reservation

• Point of collection, check-in: additional guest names Data Access & Collection

Passport or ID information

• Point of collection, check-in: passport or ID information Data Access & Collection

We collect this information in order to:

• Point of collection, check-in: passport or ID information Data Access & Collection

Comply with applicable laws that require us to collect this information in some jurisdictions

• Point of collection, check-in: passport or ID information Data Access & Collection

Address

• Point of collection, check-in: address, its purposes and sharing Data Access & Collection

We collect this information in order to:

• Point of collection, check-in: address, its purposes and sharing Data Access & Collection

Comply with applicable laws that require us to collect this information in some jurisdictions

• Point of collection, check-in: address, its purposes and sharing Data Access & Collection

Verify your Hilton Honors account

• Point of collection, check-in: address, its purposes and sharing Data Access & Collection

Fulfill your reservation

• Point of collection, check-in: address, its purposes and sharing Data Access & Collection

Send you communications relating to your reservation

• Point of collection, check-in: address, its purposes and sharing Data Access & Collection

Send you marketing communications

• Point of collection, check-in: address, its purposes and sharing Data Access & Collection

Perform analytics to provide guests with personalized offers and content

• Point of collection, check-in: address, its purposes and sharing Data Access & Collection

Perform analytics to improve business operations

• Point of collection, check-in: address, its purposes and sharing Data Access & Collection

Process payments

• Point of collection, check-in: address, its purposes and sharing Data Access & Collection

Process transactions with partners

• Point of collection, check-in: address, its purposes and sharing Data Access & Collection

Share this information with Hilton Principal, Hilton’s Third-Party Partner, and Hilton’s Third-Party Operator

• Point of collection, check-in: address, its purposes and sharing Data Access & Collection

Detect and prevent fraud

• Point of collection, check-in: address, its purposes and sharing Data Access & Collection

Nationality

• Point of collection, check-in: nationality collected for legal compliance Data Access & Collection

We collect this information in order to:

• Point of collection, check-in: nationality collected for legal compliance Data Access & Collection

Comply with applicable laws that require us to collect this information in some jurisdictions

• Point of collection, check-in: nationality collected for legal compliance Data Access & Collection

Date of birth

• Point of collection, check-in: date of birth collected for legal compliance Data Access & Collection

We collect this information in order to:

• Point of collection, check-in: date of birth collected for legal compliance Data Access & Collection

Comply with applicable laws that require us to collect this information in some jurisdictions

• Point of collection, check-in: date of birth collected for legal compliance Data Access & Collection

Gender

• Point of collection, check-in: gender collected for legal compliance Data Access & Collection

We collect this information in order to:

• Point of collection, check-in: gender collected for legal compliance Data Access & Collection

Comply with applicable laws that require us to collect this information in some jurisdictions

• Point of collection, check-in: gender collected for legal compliance Data Access & Collection

Hilton Honors number

• Point of collection, check-in: Hilton Honors number and its purposes Data Access & Collection

We collect this personal information in order to:

• Point of collection, check-in: Hilton Honors number and its purposes Data Access & Collection

Look up and verify your Hilton Honors account and reservation

• Point of collection, check-in: Hilton Honors number and its purposes Data Access & Collection

Administer your membership in Hilton Honors

• Point of collection, check-in: Hilton Honors number and its purposes Data Access & Collection

Support marketing efforts

• Point of collection, check-in: Hilton Honors number and its purposes Data Access & Collection

Provide customer service and support

• Point of collection, check-in: Hilton Honors number and its purposes Data Access & Collection

Fulfill guest reservations

• Point of collection, check-in: Hilton Honors number and its purposes Data Access & Collection

Send guests communications relating to their reservations

• Point of collection, check-in: Hilton Honors number and its purposes Data Access & Collection

Send marketing communications via email, direct mail, and social media

• Point of collection, check-in: Hilton Honors number and its purposes Data Access & Collection

Perform analytics in order to provide guests with personalized offers and content

• Point of collection, check-in: Hilton Honors number and its purposes Data Access & Collection

Perform analytics to improve business operations

• Point of collection, check-in: Hilton Honors number and its purposes Data Access & Collection

Determine guests’ eligibility for special or promotional rates

• Point of collection, check-in: Hilton Honors number and its purposes Data Access & Collection

Process payments

• Point of collection, check-in: Hilton Honors number and its purposes Data Access & Collection

Process transactions with partners

• Point of collection, check-in: Hilton Honors number — remaining purposes and sharing Data Access & Collection

Administer contests and sweepstakes

• Point of collection, check-in: Hilton Honors number — remaining purposes and sharing Data Access & Collection

Share this information with Hilton Principal, Hilton’s Third-Party Partner, and Hilton’s Third-Party Operator

• Point of collection, check-in: Hilton Honors number — remaining purposes and sharing Data Access & Collection

Detect and prevent fraud

• Point of collection, check-in: Hilton Honors number — remaining purposes and sharing Data Access & Collection

Frequent flyer number

• Point of collection, check-in: frequent flyer number to award loyalty Points Data Access & Collection

We collect this information in order to:

• Point of collection, check-in: frequent flyer number to award loyalty Points Data Access & Collection

Facilitate the award of loyalty Points

• Point of collection, check-in: frequent flyer number to award loyalty Points Data Access & Collection

Email address

• Point of collection, check-in: email address, its purposes and sharing Data Access & Collection

We collect this information in order to:

• Point of collection, check-in: email address, its purposes and sharing Data Access & Collection

Send folios after the completion of a stay

• Point of collection, check-in: email address, its purposes and sharing Data Access & Collection

Associate your reservation with your Hilton Honors account

• Point of collection, check-in: email address, its purposes and sharing Data Access & Collection

Send you marketing communications

• Point of collection, check-in: email address, its purposes and sharing Data Access & Collection

Perform analytics in order to provide you with personalized offers and content

• Point of collection, check-in: email address, its purposes and sharing Data Access & Collection

Perform analytics to improve business operations

• Point of collection, check-in: email address, its purposes and sharing Data Access & Collection

Determine your eligibility for special or promotional rates

• Point of collection, check-in: email address, its purposes and sharing Data Access & Collection

Process transactions with partners

• Point of collection, check-in: email address, its purposes and sharing Data Access & Collection

Share this information with Hilton Principal, Hilton’s Third-Party Partner, and Hilton’s Third-Party Operator

• Point of collection, check-in: email address, its purposes and sharing Data Access & Collection

Detect and prevent fraud

• Point of collection, check-in: email address, its purposes and sharing Data Access & Collection

Authenticate mobile account

• Point of collection, check-in: email address, its purposes and sharing Data Access & Collection

Engage in sales activity for group bookings, meetings and events

• Point of collection, check-in: email address, its purposes and sharing Data Access & Collection

E-Check In

• Point of collection: what is collected when you check in using e-check-in Data Access & Collection

When you check in using e-check-in, we collect the following categories of personal information about you, which are used for the following purposes:

• Point of collection: what is collected when you check in using e-check-in Data Access & Collection

Collapse All

Payment card information

• Point of collection, e-check-in: payment card information Data Access & Collection

We collect this information in order to:

• Point of collection, e-check-in: payment card information Data Access & Collection

Receive payment for your reservation

• Point of collection, e-check-in: payment card information Data Access & Collection

Detect and prevent fraud

• Point of collection, e-check-in: payment card information Data Access & Collection

Maintain books and records and comply with legal obligations for business reporting, auditing, tax, and income reconciliation

• Point of collection, e-check-in: payment card information Data Access & Collection

Room selection and assignment

• Point of collection, e-check-in: room selection and assignment Data Access & Collection

We collect this information in order to:

• Point of collection, e-check-in: room selection and assignment Data Access & Collection

Fulfill your reservation

• Point of collection, e-check-in: room selection and assignment Data Access & Collection

Better serve our guests

• Point of collection, e-check-in: room selection and assignment Data Access & Collection

Arrival time

• Point of collection, e-check-in: arrival time Data Access & Collection

We collect this information in order to:

• Point of collection, e-check-in: arrival time Data Access & Collection

Better serve our guests

• Point of collection, e-check-in: arrival time Data Access & Collection

Fulfill your reservation

• Point of collection, e-check-in: arrival time Data Access & Collection

Personalize your experience

• Point of collection, e-check-in: arrival time Data Access & Collection

Provide customer service and support

• Point of collection, e-check-in: arrival time Data Access & Collection

Departure date

• Point of collection, e-check-in: departure date Data Access & Collection

We collect this information in order to:

• Point of collection, e-check-in: departure date Data Access & Collection

Better serve our guests

• Point of collection, e-check-in: departure date Data Access & Collection

Fulfill your reservations

• Point of collection, e-check-in: departure date Data Access & Collection

Personalize your experience

• Point of collection, e-check-in: departure date Data Access & Collection

Provide customer service and support

• Point of collection, e-check-in: departure date Data Access & Collection

Digital Key

• Point of collection: what is collected when you use Digital Key Data Access & Collection

When you use Digital Key, we collect the following categories of personal information about you, which are used for the following purposes:

• Point of collection: what is collected when you use Digital Key Data Access & Collection

Collapse All

Payment card information

• Point of collection, Digital Key: payment card information Data Access & Collection

We collect this information in order to:

• Point of collection, Digital Key: payment card information Data Access & Collection

Receive payment for your reservation

• Point of collection, Digital Key: payment card information Data Access & Collection

Detect and prevent fraud

• Point of collection, Digital Key: payment card information Data Access & Collection

Maintain books and records and comply with legal obligations for business reporting, auditing, tax, and income reconciliation

• Point of collection, Digital Key: payment card information Data Access & Collection

Room selection and assignment

• Point of collection, Digital Key: room selection and assignment Data Access & Collection

We collect this information in order to:

• Point of collection, Digital Key: room selection and assignment Data Access & Collection

Fulfill your reservation

• Point of collection, Digital Key: room selection and assignment Data Access & Collection

Better serve our guests

• Point of collection, Digital Key: room selection and assignment Data Access & Collection

Arrival time

• Point of collection, Digital Key: arrival time Data Access & Collection

We collect this information in order to:

• Point of collection, Digital Key: arrival time Data Access & Collection

Better serve our guests

• Point of collection, Digital Key: arrival time Data Access & Collection

Fulfill your reservation

• Point of collection, Digital Key: arrival time Data Access & Collection

Personalize your experience

• Point of collection, Digital Key: arrival time Data Access & Collection

Provide customer service and support

• Point of collection, Digital Key: arrival time Data Access & Collection

Departure date

• Point of collection, Digital Key: departure date Data Access & Collection

We collect this information in order to:

• Point of collection, Digital Key: departure date Data Access & Collection

Better serve our guests

• Point of collection, Digital Key: departure date Data Access & Collection

Fulfill your reservations

• Point of collection, Digital Key: departure date Data Access & Collection

Personalize your experience

• Point of collection, Digital Key: departure date Data Access & Collection

Provide customer service and support

• Point of collection, Digital Key: departure date Data Access & Collection

Precise geolocation information

• Point of collection, Digital Key: precise geolocation information Data Access & Collection

We collect this information in order to:

• Point of collection, Digital Key: precise geolocation information Data Access & Collection

Enable you to access your guest room and hotel facilities

• Point of collection, Digital Key: precise geolocation information Data Access & Collection

Fulfill Digital Key sharing requests

• Point of collection, Digital Key: precise geolocation information Data Access & Collection

Detect and prevent fraud

• Point of collection, Digital Key: precise geolocation information Data Access & Collection

Guest Assistance

• Point of collection: what is collected when you contact Guest Assistance Data Access & Collection

When you contact Guest Assistance, we collect the following categories of personal information about you, which are used for the following purposes:

• Point of collection: what is collected when you contact Guest Assistance Data Access & Collection

Collapse All

Complaint descriptions

• Point of collection, Guest Assistance: complaint descriptions Data Access & Collection

We collect this information in order to:

• Point of collection, Guest Assistance: complaint descriptions Data Access & Collection

Respond to your complaint or injury

• Point of collection, Guest Assistance: complaint descriptions Data Access & Collection

Perform analytics to improve business operations

• Point of collection, Guest Assistance: complaint descriptions Data Access & Collection

Provide customer service and support

• Point of collection, Guest Assistance: complaint descriptions Data Access & Collection

Name

• Point of collection, Guest Assistance: name, identity verification and record search Data Access & Collection

We collect this information in order to:

• Point of collection, Guest Assistance: name, identity verification and record search Data Access & Collection

Look up and verify your identity

• Point of collection, Guest Assistance: name, identity verification and record search Data Access & Collection

Search our records for information about your past stays and membership in the Hilton Honors loyalty program

• Point of collection, Guest Assistance: name, identity verification and record search Data Access & Collection

Provide customer service recovery and support

• Point of collection, Guest Assistance: name, identity verification and record search Data Access & Collection

Detect and prevent fraud

• Point of collection, Guest Assistance: name, identity verification and record search Data Access & Collection

Address

• Point of collection, Guest Assistance: address Data Access & Collection

We collect this information in order to:

• Point of collection, Guest Assistance: address Data Access & Collection

Verify your identity

• Point of collection, Guest Assistance: address Data Access & Collection

Provide customer service and support

• Point of collection, Guest Assistance: address Data Access & Collection

Detect and prevent fraud

• Point of collection, Guest Assistance: address Data Access & Collection

Email address

• Point of collection, Guest Assistance: email address Data Access & Collection

We collect this information in order to:

• Point of collection, Guest Assistance: email address Data Access & Collection

Verify your identity

• Point of collection, Guest Assistance: email address Data Access & Collection

Provide follow-up communications regarding your inquiry

• Point of collection, Guest Assistance: email address Data Access & Collection

Perform analytics to improve business operations

• Point of collection, Guest Assistance: email address Data Access & Collection

Detect and prevent fraud

• Point of collection, Guest Assistance: email address Data Access & Collection

Provide customer service and support

• Point of collection, Guest Assistance: email address Data Access & Collection

Authenticate mobile account

• Point of collection, Guest Assistance: email address Data Access & Collection

Phone and fax numbers

• Point of collection, Guest Assistance: phone and fax numbers Data Access & Collection

We collect this information in order to:

• Point of collection, Guest Assistance: phone and fax numbers Data Access & Collection

Verify your identity

• Point of collection, Guest Assistance: phone and fax numbers Data Access & Collection

Provide follow-up communications regarding your inquiry

• Point of collection, Guest Assistance: phone and fax numbers Data Access & Collection

Authenticate mobile account

• Point of collection, Guest Assistance: phone and fax numbers Data Access & Collection

Send service-related SMS communications

• Point of collection, Guest Assistance: phone and fax numbers Data Access & Collection

Provide customer service and support

• Point of collection, Guest Assistance: phone and fax numbers Data Access & Collection

Detect and prevent fraud

• Point of collection, Guest Assistance: phone and fax numbers Data Access & Collection

Minors

• Minors: no knowing collection below the age of majority without parental permission, and ages of minor guests for rates Data Access & Collection

Hilton does not knowingly collect, disclose, or sell personal information of individuals under the age of majority in their respective jurisdiction without permission from a minor’s parent or guardian. We verify parental or guardian consent using industry-standard methods prior to collecting, processing, or storing personal information of minors. When searching for hotel reservations on a Hilton website or on the Hilton Honors app, you may be asked to provide the ages of any minor guests staying in the room. Hilton collects this information for the purpose of determining room rates where applicable, such as at an “all-inclusive” property.

• Minors: no knowing collection below the age of majority without parental permission, and ages of minor guests for rates Data Access & Collection

Closed-Circuit Television (CCTV)

• CCTV: footage retained 31 days, access requests handled by the Data Protection Office or the franchise hotel Retention & Deletion

We use closed-circuit television (CCTV) and other security measures at our properties that may capture or record images of guests and visitors in clearly signposted public areas, such as hallways and lobbies. We do not use CCTV and other security measures in areas where guests and visitors have a reasonable expectation of privacy, such as locker rooms and bathrooms. We retain CCTV footage on property and in the cloud for 31 days unless we are required to maintain footage for a longer period, such as if the footage is subject to a legal proceeding or investigation. We protect CCTV footage in accordance with our information security policies. You may be able to request access to CCTV footage within the time specified by applicable law and as required by law.

• CCTV: footage retained 31 days, access requests handled by the Data Protection Office or the franchise hotel Retention & Deletion

Franchised hotels are operated by entities that are separate from Hilton. To request access to CCTV images from a franchised hotel, please contact that hotel. In addition to Hilton Domestic Operating Company Inc., those entities also are independent data controllers of CCTV images. When permitted by law, we may charge an appropriate fee to cover the costs of responding to the request. Such requests may be submitted by accessing the Data Subject Rights Requests Portal at datarights.hilton.com or in writing to DataProtectionOffice@hilton.com or Hilton Data Protection Office, 7930 Jones Branch Drive, McLean, VA 22102, USA.

• CCTV: footage retained 31 days, access requests handled by the Data Protection Office or the franchise hotel Retention & Deletion

Back to Top

3. Online and Mobile Information We Collect

• Cookies and Other Technologies: what they are, what they are used for, and consent for non-essential cookies Data Access & Collection

Cookies and Other Technologies

• Cookies and Other Technologies: what they are, what they are used for, and consent for non-essential cookies Data Access & Collection

Like many other websites, our site may use "Cookies" or "Other Technologies" (such as "pixel tags," "web beacons," "clear GIFs", links in emails, JavaScript, device IDs assigned by GoogleGoogle or Apple, or similar technologies). Cookies and Other Technologies allow us and third parties to obtain information about your visits to the site, including to analyze your visiting patterns. We use this information to process your reservations or requests and to deliver online and mobile advertisements, messages and content for us and others that are specific to your interests. Depending on your jurisdiction, prior consent for the use of non-essential cookies may be required. If it is the case, we will obtain your consent before using cookies on your device.

• Cookies and Other Technologies: what they are, what they are used for, and consent for non-essential cookies Data Access & Collection

Cookies are small text files that are stored on your computer or mobile device ("device") when you visit a website. Cookies alone cannot be used to disclose your individual identity to us, though in some cases we may tie Hilton or third-party Cookies to personal information you have provided to us or that we have otherwise obtained about you. Cookies may be used on the site in order to improve your experience.

• Cookies and Other Technologies: what they are, what they are used for, and consent for non-essential cookies Data Access & Collection

For example, we will use Cookies to:

• Examples of what Hilton uses cookies for Use & Processing

Remember your user name and password for future visits so that log-in is easier and faster;

• Examples of what Hilton uses cookies for Use & Processing

Remember your language and other preferences;

• Examples of what Hilton uses cookies for Use & Processing

Ensure you obtain all requested information;

• Examples of what Hilton uses cookies for Use & Processing

Provide a safe and secure service for online transactions;

• Examples of what Hilton uses cookies for Use & Processing

Track your response to advertisements and website or app content for analysis and the number of times we send you the same advertisement;

• Examples of what Hilton uses cookies for Use & Processing

Measure how many people use the site, and how they use it, so that we may keep it running quickly and efficiently; and

• Examples of what Hilton uses cookies for Use & Processing

Help us and others deliver communications and content to you that are relevant and responsive to your interests and location.

• Examples of what Hilton uses cookies for Use & Processing

Below we explain the different types of Cookies that may be used on the site.

• Essential and Functional cookies Use & Processing

Essential Cookies – Essential Cookies are necessary for the site to work, and enable you to move around it and use its services and features. Disabling these Cookies may make the services and features unavailable.

• Essential and Functional cookies Use & Processing

Functional Cookies – We use Functional Cookies to save your settings on the site—settings such as your language preference, or booking information you have previously used when booking a hotel with us. We also use Functional Cookies to store such things as the last hotel you searched for, so that you can easily find it the next time you visit. Some Functional Cookies are essential to viewing maps or videos on our site.

• Essential and Functional cookies Use & Processing

Session Cookies – These types of Cookies are stored only temporarily during a browsing session, and are deleted from your device when you close the browser. We use Session Cookies to support the functionality of the site and to understand your use of the site—that is, which pages you visit, which links you use and how long you stay on each page.

• Session and Persistent cookies Retention & Deletion

Persistent Cookies – These types of Cookies are not deleted when you close your browser, but are saved on your device for a fixed period of time or until you delete them. Each time you visit the site, the server that set the Cookie will recognize the persistent Cookie saved on your device. We and others use persistent Cookies to store your preferences, so that they are available for your next visit, to keep a more accurate account of how often you visit the site, how often you return, how your use of the site may vary over time and the effectiveness of advertising efforts.

• Session and Persistent cookies Retention & Deletion

Advertising Cookies – Allow us and other advertisers to show you the most relevant products, offers, and advertisements on the site and third-party sites, or through emails or other message platforms. For example, some Advertising Cookies help our service providers and other advertisers select advertisements that are based on your interests, including those expressed or inferred by visits to our websites or apps or across other websites, online services, and apps over time. Others help prevent the same advertisement from continuously reappearing for you. These types of Cookies also help us provide you with content on the site that is tailored to your interests and needs. As noted below, some Analytics Cookies and Other Technologies are used in part to facilitate advertising.

• Advertising cookies and Social Plug-In cookies Use & Processing

Social Plug-In Cookies – Advertising Cookies also include Social Plug-In Cookies. Social Plug-In Cookies are used to share content from the site with members and non-members of social media networks such as FacebookFacebook, X, YouTubeYouTube and PinterestPinterest. These Cookies are usually set by the social networking provider, enabling such sharing to be smooth and seamless.

• Advertising cookies and Social Plug-In cookies Use & Processing

Analytics Cookies – Collect information about your use of the site, and enable us to improve the way it works. These Cookies give us aggregated information that we use to monitor site performance, count page visits, spot technical errors, see how users reach the site, and measure the effectiveness of advertising (including emails we send to you).

• Analytics cookies and other technologies used for the same purposes Data Access & Collection

Other technologies may be used for the same purposes as our Cookies, to allow us and third parties to know when you visit the site, and to understand how you interact with emails or advertisements. Through Other Technologies, non-personal information (e.g., your operating system, your browser version, and the URL you came from) or aggregate information may be obtained and used to enhance your experience and understand traffic patterns.

• Analytics cookies and other technologies used for the same purposes Data Access & Collection

Managing Cookies and Other Technologies

• Managing cookies: browser settings, Hilton's responsibility, and the effect of rejecting cookies Account & Service Control

If you want to remove or block Cookies from your device at any time, you can update your browser settings (consult your browser's "help" menu to learn how to remove or block Cookies). Hilton is not responsible for your browser settings. Below are instructions on how to manage Cookies on different types of web browsers.

• Managing cookies: browser settings, Hilton's responsibility, and the effect of rejecting cookies Account & Service Control

AppleApple Safari

• Apple Safari: how to set your cookie preference Account & Service Control

From the Safari app, select Preferences

• Apple Safari: how to set your cookie preference Account & Service Control

Click Privacy and select your cookie preference from the provided options.

• Apple Safari: how to set your cookie preference Account & Service Control

Google Chrome

• Google Chrome: how to set your cookie preference Account & Service Control

At the top right of the Chrome browser, click the three vertical dots to open a drop-down menu.

• Google Chrome: how to set your cookie preference Account & Service Control

Select Settings.

• Google Chrome: how to set your cookie preference Account & Service Control

Under Privacy and security, click Tracking Protection, and select your cookie preference from the provided options.

• Google Chrome: how to set your cookie preference Account & Service Control

MicrosoftMicrosoft Edge

• Microsoft Edge: how to set your cookie preference Account & Service Control

At the top right of the Microsoft Edge browser, select the three dots icon to open a menu.

• Microsoft Edge: how to set your cookie preference Account & Service Control

Select Settings and click Site permissions.

• Microsoft Edge: how to set your cookie preference Account & Service Control

Click Manage and delete cookies and site data to select your cookie preference from the provided options.

• Microsoft Edge: how to set your cookie preference Account & Service Control

Mozilla Firefox

• Mozilla Firefox: how to set your cookie preference Account & Service Control

At the top right of the Firefox browser, click the three horizontal lines to open a menu.

• Mozilla Firefox: how to set your cookie preference Account & Service Control

Select Settings and click the Privacy & Security panel.

• Mozilla Firefox: how to set your cookie preference Account & Service Control

Under Enhanced Tracking Protection, select Custom.

• Mozilla Firefox: how to set your cookie preference Account & Service Control

Click Cookies and select your cookie preference from the provided options.

• Mozilla Firefox: how to set your cookie preference Account & Service Control

Please be aware that rejecting Cookies may affect your ability to perform certain transactions on the Site, and our ability to recognize your browser from one visit to the next.

• Managing cookies: browser settings, Hilton's responsibility, and the effect of rejecting cookies Account & Service Control

Analytics and Interest-Based Advertisements

• Analytics providers, Adobe Analytics and Adobe Audience Manager Use & Processing

We partner with certain third-party service providers to collect information to engage in analytics, auditing, research, and reporting. These third parties may use server logs, web beacons, tags, pixels, and similar technologies, and they may set and access cookies on your computer or other device.

• Analytics providers, Adobe Analytics and Adobe Audience Manager Use & Processing

In particular, we use AdobeAdobe Analytics to help us understand how our customers use our websites. We also use Adobe Audience Manager to create audiences for personalizing content and advertising experiences.

• Analytics providers, Adobe Analytics and Adobe Audience Manager Use & Processing

Read more about how Adobe uses your Personal Information in web browsers by Adobe Analytics.

• Analytics providers, Adobe Analytics and Adobe Audience Manager Use & Processing

We partner with Amazon Chat which supports our chat platform. We may use Amazon Chat for sharing dynamic content for authenticated users.

• Amazon Chat, WhatsApp and LINE for personalised content, analytics and account linking Use & Processing

We use WhatsAppWhatsApp and LINE to help us send you personalized content and advertising experiences across multiple platforms. We may use WhatsApp and LINE for analytics, research, and reporting. We will use your WhatsApp and LINE phone number to link you to your existing Hilton account (if available) and leverage your data to enhance our analytics, providing you with a richer customer experience across all channels. Read more about how WhatsApp protects Personal Information here. Read more about how LINE processes your personal information here.

• Amazon Chat, WhatsApp and LINE for personalised content, analytics and account linking Use & Processing

If you are a Hilton Honors member, you follow Hilton on LINE, and you log in via Universal Login, we will link your LINE identification number to your Hilton Honors account. If you have consented to receiving marketing messages from us, we may then send you personalized marketing messages on LINE. We also use LINE for analytics, research, and reporting.

• Amazon Chat, WhatsApp and LINE for personalised content, analytics and account linking Use & Processing

We partner with third parties to provide advertising services that are targeted based on your online activities across websites, mobile apps, and devices over time (commonly referred to as “interest-based advertising”). Our advertising partners may collect information about your activities on our Services on your current device and combine it with information about your activities on other websites, mobile apps, and devices. They may collect such information using server logs, cookies, web beacons, tags, pixels, mobile advertising IDs (such as Facebook cookies or Google’s Advertising ID), cross-device linking, and similar technologies. For example, our advertising partners may use the fact that you visited our website to target advertising to you on other websites and mobile apps on your current device or on other devices you use. They may match your browsers or devices if you log into the same online service on multiple devices or if your devices share similar attributes that support an inference that they are used by the same person or household. This means that information about your activity on websites or apps on your current browser or device may be combined and used with information collected from your other browsers or devices. You can opt out of interest-based advertising in web browsers and mobile apps on your current browser or device by following the instructions below.

• Interest-based advertising: third parties combine activity across sites, apps and devices Sharing & Disclosure

For more information about interest-based advertising and cross-device linking, please visit the Network Advertising Initiative (“NAI”) website and the Digital Advertising Alliance (“DAA”) website . We adhere to the DAA’s interest-based advertising principles by providing you enhanced notice, transparency, and control of our digital marketing practices as stated at http://www.aboutads.info/principles/ . You may opt out of interest-based advertising and cross-device linking in web browsers and mobile apps on your current browser or device by following the instructions below.

• Opting out of interest-based advertising: DAA principles, web browser and mobile app routes Account & Service Control

Web Browser Opt-Out. To opt out in web browsers, please visit http://optout.aboutads.info/ and http://optout.networkadvertising.org. To help preserve the choices that you make in the DAA’s WebChoices page, you can install the DAA’s “Protect My Choices” extension that is available at http://youradchoices.com/PMC.

• Opting out of interest-based advertising: DAA principles, web browser and mobile app routes Account & Service Control

Mobile Application Opt-Out. To opt out in mobile apps, you can adjust the advertising preferences on your mobile device (for example, in iOS, visit Settings > Privacy & Security > Tracking, and in Android, visit Settings > Google > Ads > Opt out of interest-based ads). You can also opt out for companies that participate in the Digital Advertising Alliance’s AppChoices tool by downloading the app and following the instructions. Learn how to opt out on mobile devices.

• Opting out of interest-based advertising: DAA principles, web browser and mobile app routes Account & Service Control

Please note that the opt-outs described above will apply only to the specific browser or device from which you opt out, and therefore you will need to opt out separately on all of your browsers and devices. If you delete or reset your cookies or mobile advertising identifiers, change browsers (including upgrading certain browsers), or use a different device, any opt-out cookie or tool may no longer work, and you will need to opt out again. We do not respond to Do Not Track signals at this time.

• Opt-outs are device-specific, do not track signals are not honoured, and global opt-out signals are Account & Service Control

Global Opt-Out Signal. We honor legally-recognized global opt-out signals and provide a unified portal for all opt-out requests, regardless of device or browser.

• Opt-outs are device-specific, do not track signals are not honoured, and global opt-out signals are Account & Service Control

Back to Top

4. Your Rights and Choices

• Your Rights and Choices: reviewing and updating the information you gave at enrollment Legal Rights & Agreement Rules

If you are a Hilton Honors member, you may review and update the information you provided to us at the time of enrollment at any time by signing in to your Hilton Honors account . You may also make changes to your information by contacting Hilton Reservations and Customer Care at +1 888-4HONORS (888-446-6677) (US and Canada). Customers located outside of the US and Canada can review our global phone numbers. You may also complete a support form .

• Your Rights and Choices: reviewing and updating the information you gave at enrollment Legal Rights & Agreement Rules

Depending on where you live, you may be able to request that we:

• Your Rights and Choices: the rights depend on where you live Legal Rights & Agreement Rules

inform you about the personal information we maintain about you,

• Your Rights and Choices: the rights depend on where you live Legal Rights & Agreement Rules

withdraw your consent for certain data processing activity, and/or

• Your Rights and Choices: the rights depend on where you live Legal Rights & Agreement Rules

update, correct, delete, and/or stop processing your personal information.

• Your Rights and Choices: the rights depend on where you live Legal Rights & Agreement Rules

To see your rights based on residency or submit a request:

• Your Rights and Choices: how to submit a request, timing and fees Legal Rights & Agreement Rules

visit the Data Subject Rights Requests Portal at datarights.hilton.com

• Your Rights and Choices: how to submit a request, timing and fees Legal Rights & Agreement Rules

email DataProtectionOffice@hilton.com

• Your Rights and Choices: how to submit a request, timing and fees Legal Rights & Agreement Rules

send a letter to Hilton Data Protection Office, 7930 Jones Branch Drive, McLean, VA 22102, USA

• Your Rights and Choices: how to submit a request, timing and fees Legal Rights & Agreement Rules

We will process your request within the time specified by applicable law and as required by law. When permitted by law, we may charge an appropriate fee to cover the costs of responding to the request.

• Your Rights and Choices: how to submit a request, timing and fees Legal Rights & Agreement Rules

In addition, in some circumstances you may request that we cease sharing personal information about you with our business partners or that Hilton cease using personal information about you by contacting us using the email or mailing address above.

• Your Rights and Choices: asking Hilton to stop sharing with business partners or to stop using your information Legal Rights & Agreement Rules

If you are in an eligible location and would like to opt out of the sale of your personal information or sharing/processing it for targeted ads, you may submit a request by clicking the “ Your Privacy Choices | Cookie Information” link at the bottom of the Hilton.com website when you access that site from an IP address that indicates your presence in a state that has enacted a privacy law. Please note that when you opt out of cookies, tags, and pixels, that opt out only pertains to the device and the browser that you are using when you opt out. If you wish to opt out for other devices or browsers, you must opt out again when you are using those devices or browsers. We honor legally recognized global opt-out signals and provide a unified portal for all opt-out requests, regardless of device or browser. In addition, residents in those states may request that we no longer sell non-cookie based personal information or process it for targeted ads by making a Hilton Opt-out request.

• Opting out of the sale of personal information or its sharing for targeted advertising Legal Rights & Agreement Rules

In some circumstances you may have the option to submit a request on behalf of someone else as their legal representative. If you submit a request on behalf of someone else, then you may be asked to provide proof of authorization.

• Submitting a rights request on behalf of someone else Legal Rights & Agreement Rules

Back to Top

5. Marketing Communications Choices

• Marketing communications: channels, service providers and consent Use & Processing

We want to make you aware of the fantastic products we offer! To do so, we may send you communications via email, text message, push notifications, in-app alerts, direct mail, and social media. To enable us to send you such communications, your information may be disclosed to service providers who use such information solely to send out marketing communications on our behalf. If, depending on the circumstances, consent is required in your jurisdiction, we will obtain your consent before sending you such communications.

• Marketing communications: channels, service providers and consent Use & Processing

Included in the services that Hilton provides during your stay is an SMS messaging service. If you provided Hilton with your mobile telephone number, the property where you are staying may contact you by SMS or WhatsApp to welcome you upon your arrival and permit you to submit questions or request additional services via SMS or WhatsApp. This may include notification of any problems with the room as well as your requests for further assistance in connection with your visit. The property may contact you mid-stay to remind you that you may use the SMS or WhatsApp messaging service. You can respond to these SMS or WhatsApp messages with any questions, needs, or requests you may have. You can opt out of receiving these SMS or WhatsApp messages by replying “STOP” to any message.

• In-stay SMS and WhatsApp messaging service, and how to stop it Use & Processing

WhatsApp and SMS Short code: In addition to traditional text messages, we offer the opportunity to receive transactional and promotional messages via WhatsApp or text message by using a short code. A short code is a five-digit number that you can message to opt-in to receive such text messages. The code for transactional messages is 97176. The code for promotional messages is 75712. Message frequency varies. Message and data rates may apply. For help, reply “HELP” to the message you received. Short code opt-in data and consent will not be shared with any other third parties for their own marketing or advertising purposes.

• Short codes for transactional and promotional messages on WhatsApp and SMS Account & Service Control

Hilton Honors Members: If you are a Hilton Honors member, you may change the communications you receive from us by logging on to your online account and managing your subscriptions.

• Hilton Honors members: change the communications received through the online account Account & Service Control

Marketing Opt-Out Requests

• Opting out of email marketing materials Account & Service Control

If you prefer not to receive email marketing materials from us, you may opt-out at any time by using the following methods:

• Opting out of email marketing materials Account & Service Control

Unsubscribe: Use the unsubscribe function in any email you receive from us or by clicking this link: https://www.hilton.com/en/hilton-honors/optout/unsubscribe

• Opting out of email marketing materials Account & Service Control

Email: DataProtectionOffice@hilton.com

• Marketing opt-out requests: email, mail, SMS or WhatsApp reply, and hotel-specific texts Account & Service Control

Mail: Write to Hilton’s Data Protection Office, 7930 Jones Branch Drive, McLean, VA 22102, USA

• Marketing opt-out requests: email, mail, SMS or WhatsApp reply, and hotel-specific texts Account & Service Control

SMS Short Code, Text, or WhatsApp messages: Reply “STOP” to the message you received

• Marketing opt-out requests: email, mail, SMS or WhatsApp reply, and hotel-specific texts Account & Service Control

Hotel-specific texts: Contact the hotel front desk to inform them that you do not want to receive text messages

• Marketing opt-out requests: email, mail, SMS or WhatsApp reply, and hotel-specific texts Account & Service Control

Please note that opt-out requests can take up to ten business days to be effective.

• Marketing opt-out requests can take up to ten business days to take effect Account & Service Control

Push and In-App Notifications: You may control whether our mobile apps send you push notifications by changing your notification settings on your mobile device. If we engage in sending you in-app messages, we will allow control for those in our apps’ settings.

• Push and in-app notification controls on the device and in the app Account & Service Control

Back to Top

6. How We Protect Personal Information

• How Hilton protects personal information: reasonable measures and a dedicated security team Security & Safeguards

We take reasonable measures to: (i) protect personal information from unauthorized access, disclosure, alteration, or destruction, and (ii) keep personal information accurate and up-to-date as appropriate.

• How Hilton protects personal information: reasonable measures and a dedicated security team Security & Safeguards

Global Information Security Team: Hilton employs a robust team of dedicated information security professionals who are responsible for managing Hilton’s security program. This team is responsible for, among other things, monitoring our systems for potential intrusions, responding to potential incidents, supporting property-level information security, regularly reviewing and updating the security controls Hilton uses to protect data, and providing training on Hilton’s information security program.

• How Hilton protects personal information: reasonable measures and a dedicated security team Security & Safeguards

Security Controls: Hilton implements risk-based security controls, including encryption and ongoing employee training, aligned with industry standards. Hilton maintains a payment card industry (“PCI”) compliance program and an Information Technology compliance program. This compliance program generates audit reports concerning the adequacy and effectiveness of Hilton’s Technology internal controls, including a PCI Attestation of Compliance signed by an external PCI Qualified Security Assessor and a SSAE16/SOC1 report addressing the Technology general controls over systems that support certain accounting and financial reporting.

• Security controls, third-party confidentiality, no card details by message, and incident notification Security & Safeguards

We require third parties with whom we share personal information to exercise reasonable efforts to maintain the confidentiality of personal information.

• Security controls, third-party confidentiality, no card details by message, and incident notification Security & Safeguards

We will never ask you to send us confidential personal information or payment card information via email or text message.

• Security controls, third-party confidentiality, no card details by message, and incident notification Security & Safeguards

In the event of a security incident, Hilton will notify regulators and/or affected individuals in a timely manner as required by applicable laws and regulations.

• Security controls, third-party confidentiality, no card details by message, and incident notification Security & Safeguards

Back to Top

7. How We Disclose Personal Information

• How We Disclose Personal Information: what this section adds to the collection section Sharing & Disclosure

In addition to the information provided in the Personal Information We Collect section, the following summarizes how we may disclose personal information.

• How We Disclose Personal Information: what this section adds to the collection section Sharing & Disclosure

Protection of Safety and Security

• Disclosure to protect safety and security, and disclosure required by law Sharing & Disclosure

Hilton will disclose personal information as required by law. Examples of such disclosures include when countries require Hilton to collect personal data about visitors to properties in that country, when a law enforcement agency serves a valid subpoena on Hilton, and when a civil litigant serves a lawful discovery request on Hilton. Hilton may elect to share personal information with law enforcement, employers, those who host events with Hilton, or others as necessary to protect the safety and security of people and property, to pursue available remedies or limit the damages that we may sustain, and to respond to an emergency.

• Disclosure to protect safety and security, and disclosure required by law Sharing & Disclosure

E-Folio Program

• e-Folio Program: a folio extract may go to the employer and the credit card company Sharing & Disclosure

If you are an employee of a company that participates in the Hilton e-Folio Program and you book your room using a company corporate code or pay for your expenses using a corporate credit card, we may send your employer and the credit card company an extract of your folio detailing the goods and services provided to you.

• e-Folio Program: a folio extract may go to the employer and the credit card company Sharing & Disclosure

Reservations with Hilton Partner Accommodations

• Reservations with partner accommodations: AutoCamp, SLH and Evermore Resort receive guest information Sharing & Disclosure

When making a reservation with AutoCamp, Small Luxury Hotels of the World (SLH), or Evermore Resort – Orlando through a Hilton channel, Hilton will provide certain guest information for the exclusive purpose of fulfilling the reservation and providing customer support, as identified in the Personal Information We Collect section of this Statement. Hilton channels include Hilton’s website, the Hilton Honors application, or Mini Programs. The guest information will be processed and retained in accordance with their privacy policies and as permitted by applicable law.

• Reservations with partner accommodations: AutoCamp, SLH and Evermore Resort receive guest information Sharing & Disclosure

AutoCamp: You can access AutoCamp’s privacy policy here.

• Reservations with partner accommodations: AutoCamp, SLH and Evermore Resort receive guest information Sharing & Disclosure

SLH: You can access SLH’s privacy policy here.

• Reservations with partner accommodations: AutoCamp, SLH and Evermore Resort receive guest information Sharing & Disclosure

Evermore Resort – Orlando: You can access Evermore Resort’s privacy policy here.

• Reservations with partner accommodations: AutoCamp, SLH and Evermore Resort receive guest information Sharing & Disclosure

Reservations with Hilton’s Third-Party Partners

• Reservations with Hilton's third-party partners: HGV and Placemakr receive booking information Sharing & Disclosure

Hilton Grand Vacations: When making a reservation with Hilton Grand Vacations (HGV) through a Hilton channel, Hilton will provide the information you provided for your booking to HGV to fulfill your reservation. Hilton channels include Hilton’s website, the Hilton Honors application, and the Hilton Honors Mini Programs. HGV may also process your personal information in accordance with HGV’s privacy policies and as permitted by applicable law. You can access HGV’s privacy policy here. Hilton may also share your personal data with HGV if you are a Hilton Honors member. Depending on your jurisdiction, prior consent to share your personal data with HGV may be required. If this is the case, we will obtain your consent to do so during the Hilton Honors enrollment journey.

• Reservations with Hilton's third-party partners: HGV and Placemakr receive booking information Sharing & Disclosure

Placemakr: When making a reservation with Placemakr through Hilton channel, Hilton will provide the information you provided for your booking to Placemakr to fulfill your reservation. Placemakr may also process your personal information in accordance with Placemakr’s privacy policies and as permitted by applicable law. You can access Placemakr’s privacy policy here. Depending on your jurisdiction, prior consent to share your personal data with Placemakr may be required. If this is the case, we will obtain your consent.

• Reservations with Hilton's third-party partners: HGV and Placemakr receive booking information Sharing & Disclosure

Reservations with Hilton’s Third-Party Operator

• Reservations with Hilton's third-party operator: Genting receives booking information from US guests Sharing & Disclosure

If you are a guest who lives in the United States, when you make a reservation with Resorts World Las Vegas, Conrad Las Vegas, or Crockfords Las Vegas through a Hilton channel, we will provide our Third-Party Operator, Genting with the information you provided for your booking to fulfill your reservation. Hilton channels include Hilton’s website, the Hilton Honors application, and Hilton’s Mini Programs. Genting may also process your personal information in accordance with Genting’s privacy policies and as permitted by applicable law. You can access Genting’s privacy policy here.

• Reservations with Hilton's third-party operator: Genting receives booking information from US guests Sharing & Disclosure

Reservations with Hilton Principal

• Reservations with Hilton Principal: BRE Hotels & Resorts receives booking information from US guests Sharing & Disclosure

If you are a guest who lives in the United States, when you make a reservation at the Waldorf Astoria Grand Wailea, Hilton will provide BRE Hotels & Resorts (or “Hilton Principal”), the hotel’s owner, with your booking information. BRE may process your personal information in accordance with its privacy policy and as permitted by applicable law. You can access BRE’s privacy policy here.

• Reservations with Hilton Principal: BRE Hotels & Resorts receives booking information from US guests Sharing & Disclosure

Reservations with Select by Hilton

• Reservations with Select by Hilton: YOTEL receives booking information Sharing & Disclosure

YOTEL: When you make a reservation with YOTEL through a Hilton channel, Hilton will provide YOTEL with your booking information. YOTEL may process your personal information in accordance with its privacy policy and as permitted by applicable law. You can access YOTEL’s privacy policy here.

• Reservations with Select by Hilton: YOTEL receives booking information Sharing & Disclosure

Back to Top

8. International Transfers

• International transfers: sharing across the Portfolio, and transfer of reservation data to the United States Sharing & Disclosure

As a global company, we endeavor to provide you with the same level of service that you have come to expect at Hilton whether you are in San Francisco, London or Tokyo. To provide this service, you acknowledge that we may share your personal information among members of the Hilton Portfolio of Brands, our service providers, and other third parties, which may be located in countries outside of your own.

• International transfers: sharing across the Portfolio, and transfer of reservation data to the United States Sharing & Disclosure

When you stay at a Hilton property outside the United States, the data controller for that property transfers the personal information relating to your reservation to Hilton in the United States pursuant to data transfer agreements when required by applicable laws or regulations. The data controller may also maintain a local copy of your personal information, and in some cases this is required by applicable laws or regulations. Although the data protection laws of various countries may differ from those in your own country, we will take appropriate steps to ensure that your personal information is handled as described in this Statement and in accordance with the law.

• International transfers: sharing across the Portfolio, and transfer of reservation data to the United States Sharing & Disclosure

Back to Top

9. Data Retention Periods

• Data retention periods: kept as long as the purpose requires, then destroyed beyond reconstruction Retention & Deletion

We retain personal information about you for the time necessary to fulfill the purpose for which that information was collected, usually for the duration of any contractual relationship and for any period thereafter as legally required or permitted by law. Our retention policies reflect applicable statute of limitation periods and legal requirements. When we destroy your personal information, we do so in a way that prevents that information from being restored or reconstructed.

• Data retention periods: kept as long as the purpose requires, then destroyed beyond reconstruction Retention & Deletion

Back to Top

10. Contact Information for Questions or Concerns

• Contact information for questions or concerns: the Data Protection Office Legal Rights & Agreement Rules

If you have any questions or concerns, please contact Hilton’s Data Protection Office.

• Contact information for questions or concerns: the Data Protection Office Legal Rights & Agreement Rules

Email: DataProtectionOffice@hilton.com

• Contact information for questions or concerns: the Data Protection Office Legal Rights & Agreement Rules

Address: Attn: Hilton Data Protection Office, 7930 Jones Branch Drive, McLean, VA 22102

• Contact information for questions or concerns: the Data Protection Office Legal Rights & Agreement Rules

Phone number: (800) 413-7470

• Contact information for questions or concerns: the Data Protection Office Legal Rights & Agreement Rules

Data Subject Rights Requests Portal: datarights.hilton.com

• Contact information for questions or concerns: the Data Protection Office Legal Rights & Agreement Rules

Back to Top

11. Changes to this Statement

• Changes to this Statement: changes take effect on posting, and continued use means acceptance Legal Rights & Agreement Rules

We may modify this Statement from time to time. You can tell when this Statement was last updated by looking at the date at the top of the Statement. Any changes to our Statement will become effective upon posting of the revised Statement on the site. Use of the site, any of our products and services, consenting to and/or having the opportunity to review the updated Statement following such changes constitutes your acceptance of the revised Statement then in effect.

• Changes to this Statement: changes take effect on posting, and continued use means acceptance Legal Rights & Agreement Rules

Summary of Material Changes to this Statement

• Summary of material changes: August 2026 Legal Rights & Agreement Rules

Last update: August 2026

• Summary of material changes: August 2026 Legal Rights & Agreement Rules

August 2026 Updates

• Summary of material changes: August 2026 Legal Rights & Agreement Rules

Updated the Marketing Communications Choices section to include additional details on SMS messaging and short code.

• Summary of material changes: August 2026 Legal Rights & Agreement Rules

Updated Appendix A-6: China Residents to include updated information on collection and entrusted processing of personal information.

• Summary of material changes: August 2026 Legal Rights & Agreement Rules

May 2026 Updates

• Summary of material changes: May and April 2026 Legal Rights & Agreement Rules

Added the Appendix A-11: Mexico Residents and A-12: Albania Residents sections.

• Summary of material changes: May and April 2026 Legal Rights & Agreement Rules

April 2026 Updates

• Summary of material changes: May and April 2026 Legal Rights & Agreement Rules

Updated the Introduction section to reflect additional Hilton Portfolio of Brands: Apartment Collection by Hilton and Select by Hilton.

• Summary of material changes: May and April 2026 Legal Rights & Agreement Rules

Updated the Reservations with Hilton’s Third-Party Partner section to include Placemakr.

• Summary of material changes: May and April 2026 Legal Rights & Agreement Rules

Updated the How We Disclose Personal Information section to include information on the e-Folio Program and Reservations with Select by Hilton.

• Summary of material changes: May and April 2026 Legal Rights & Agreement Rules

Updated Appendix A-10 to align with the Personal Information Protection Act.

• Summary of material changes: May and April 2026 Legal Rights & Agreement Rules

Updated the Changes to this Statement section to include a summary of material changes.

• Summary of material changes: May and April 2026 Legal Rights & Agreement Rules

Back to Top

Appendix A: Additional Provisions Applicable to Residents of Certain Countries and US States

• Appendix A: additional provisions for residents of certain countries and US states, which override the main body on Legal Rights & Agreement Rules

This Appendix provides additional information for individuals residing in countries and U.S. states that have enacted privacy laws giving certain additional rights to residents of those jurisdictions. Once effective, the U.S. states include, but are not limited to, Alabama, California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Louisiana, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Nevada, Oklahoma, Oregon, Rhode Island, Tennessee, Texas, Utah, Vermont, and Virginia. These countries include, but are not limited to, those in the European Economic Area (EEA), the United Kingdom and Switzerland, as well as Australia, Bermuda, Brazil, Canada, China, Korea, Hong Kong, Monaco, Israel, Japan, Nigeria, and Türkiye. This Appendix outlines certain additional information that Hilton is obligated to provide to you, as well as certain rights you have with respect to the processing of your personal information, pursuant to applicable local laws. This Appendix will control to the extent it conflicts with any provision in the main body of this Statement.

• Appendix A: additional provisions for residents of certain countries and US states, which override the main body on Legal Rights & Agreement Rules

Controller: Please refer to the Data Protection Office at dataprotectionoffice@hilton.com for the contact information of other entities that may receive your personal data.

• Appendix A: how to reach the controller and the Data Protection Office Legal Rights & Agreement Rules

Data Protection Office: Hilton’s Data Protection Office may be contacted by email at DataProtectionOffice@Hilton.com, or at the following address:

• Appendix A: how to reach the controller and the Data Protection Office Legal Rights & Agreement Rules

Attn: Data Protection Office 7930 Jones Branch Drive McLean, VA 22102 USA

• Appendix A: how to reach the controller and the Data Protection Office Legal Rights & Agreement Rules

Purposes and Legal Basis for Processing

• Purposes and legal basis: the five stated bases, and the basis follows the purpose Legal Rights & Agreement Rules

Hilton processes your personal information for the purposes set forth in the section titled Personal Information We Collect of the main body of this Statement.

• Purposes and legal basis: the five stated bases, and the basis follows the purpose Legal Rights & Agreement Rules

The legal bases for Hilton’s processing activities include processing such information as necessary to comply with our contractual obligations, compliance with our legal obligations, protecting the safety of our employees, guests and others, for our legitimate business interests, and pursuant to your consent.

• Purposes and legal basis: the five stated bases, and the basis follows the purpose Legal Rights & Agreement Rules

The particular legal basis for the processing of your personal information is based on the purpose for which such information was provided or collected.

• Purposes and legal basis: the five stated bases, and the basis follows the purpose Legal Rights & Agreement Rules

Hilton Honors Participation: We process the personal information obtained in connection with your participation in the Hilton Honors program on the basis of our contractual relationship with you, consent if legally required, and for pursuing our legitimate business interests, including to personalize your use of our services and applications, to communicate news and promotional items, and to deliver personalized advertising and content.

• Legal basis for Hilton Honors participation: contract, consent where required, legitimate interests Legal Rights & Agreement Rules

Surveys: We may send post-stay surveys via SMS or email. Completion of surveys is voluntary – we process the information obtained from surveys on the basis of your consent and in furtherance of our business interests, including marketing, service improvements, and analytics.

• Legal basis for post-stay surveys: voluntary, consent plus business interests Legal Rights & Agreement Rules

On-Property Collection: When you make a reservation and when you stay at one of our hotel properties, we process your name, address, contact information, along with the details of your stay (arrival and departure day and time, vehicle information and information regarding others traveling or staying with you), on the basis of our contractual relationship with you.

• Legal basis for on-property collection: contract, legitimate interests, and legal obligations at registration Legal Rights & Agreement Rules

We also process such data for pursuing our legitimate business interests, with your consent if legally required, including for marketing, service improvements, administration of our e-Folio program, and analytics and service personalization, as described in the sections referenced above of our Global Privacy Statement.

• Legal basis for on-property collection: contract, legitimate interests, and legal obligations at registration Legal Rights & Agreement Rules

We collect certain additional personal information during registration/check-in at our properties (such as national ID or passport information), as necessary to comply with our legal obligations.

• Legal basis for on-property collection: contract, legitimate interests, and legal obligations at registration Legal Rights & Agreement Rules

We use closed circuit television and other security measures at our properties that may capture or record images of guests and visitors in public areas, as well as information related to your location while on our properties (via keycards and other technologies) for the protection of our staff, guests and visitors to our properties.

• Legal basis for on-property CCTV and location monitoring: protection of staff, guests and visitors Legal Rights & Agreement Rules

We process personal information in connection with on-property services (such as concierge services, health clubs, spas, activities, child care services, equipment rental, and our Digital Key functionality), in order to provide the services to you and for our business interests including for marketing, service improvements, administration of our e-Folio program, and analytics and service personalization, as described in the sections referenced above of our Global Privacy Statement.

• Legal basis for on-property services: concierge, spas, childcare, equipment rental and Digital Key Legal Rights & Agreement Rules

Event Profiles: We process the personal information obtained in connection with your event on the basis of our contractual relationship with you and for pursuing our legitimate business interests, with your consent if legally required, including for marketing, service improvements, and analytics and service personalization, as described in the sections referenced above of our Global Privacy Statement.

• Legal basis for event profiles: contract plus legitimate interests, with consent where required Legal Rights & Agreement Rules

Social Media: Participation in Hilton-sponsored social media activities and offerings is voluntary - we process information obtained from social media participation on the basis of your consent if legally required and for pursuing our legitimate business interests, including for marketing, service improvements, and analytics and service personalization, as described in the sections mentioned above of our Global Privacy Statement.

• Legal basis for social media participation: voluntary, consent where required plus legitimate interests Legal Rights & Agreement Rules

Promotions and Sweepstakes: Participation in sweepstakes, contests and other promotional offerings is voluntary – we process the information obtained from such participation based on your consent and as necessary to administer the offering. We also use certain data for our business purposes, including for marketing, service improvements, administration of our e-Folio program, and analytics and service personalization, as described in the sections mentioned above of our Global Privacy Statement.

• Legal basis for promotions and sweepstakes: voluntary, consent and administration of the offering Legal Rights & Agreement Rules

Direct Marketing: We use your personal information to send you marketing messages on the basis of your consent. You may withdraw your consent for direct marketing communications at any time by contacting us at DataProtectionOffice@hilton.com, following the unsubscribe instructions in the marketing message you received, or by logging in to your Hilton Honors account and updating your communication preferences.

• Direct marketing: sent on consent, withdrawable by email, unsubscribe or account preferences Legal Rights & Agreement Rules

Franchise and Ownership Opportunities: We process this information on the basis of our contractual relationship with you and for our related legitimate business interests, including maintaining and promoting the Hilton brand and facilitating direct communication between properties within the Hilton Portfolio of Brands.

• Legal bases for franchise and ownership opportunities and for the supplier diversity programme Legal Rights & Agreement Rules

WMBE Suppliers: Participation in Hilton's Supplier Diversity Program is voluntary – we process this information based on your consent and for our related legitimate business interests, including maintaining and enhancing our diversity program.

• Legal bases for franchise and ownership opportunities and for the supplier diversity programme Legal Rights & Agreement Rules

Retention: We retain personal information about you for the time necessary to accomplish the purpose for which such information was collected, usually for the duration of any contractual relationship and for any period thereafter as legally required or permitted by applicable law. Our retention policies reflect applicable statute of limitation periods and legal requirements.

• Appendix A: retention of personal information for the purpose collected and any legal period Retention & Deletion

Data Subject Rights

• Data Subject Rights: some regional, national and state laws confer rights, shown in the portal Legal Rights & Agreement Rules

Some regional, national, and state laws confer rights relating to personal data as indicated in the Personal Data Requests Portal. Residents of certain jurisdictions may have the following rights.

• Data Subject Rights: some regional, national and state laws confer rights, shown in the portal Legal Rights & Agreement Rules

Access, Correction and Erasure Requests: You have the right to:

• Data Subject Rights: some regional, national and state laws confer rights, shown in the portal Legal Rights & Agreement Rules

ask us to confirm whether we are processing your personal information and receive information on how your data is processed

• Access, correction and erasure requests Legal Rights & Agreement Rules

obtain a copy of your personal information

• Access, correction and erasure requests Legal Rights & Agreement Rules

request that we update or correct your personal information

• Access, correction and erasure requests Legal Rights & Agreement Rules

request that we delete personal information in certain circumstances

• Access, correction and erasure requests Legal Rights & Agreement Rules

Right to Object to Processing: You have the right to request that Hilton cease processing of your personal information:

• Right to object to processing, including marketing, profiling and legitimate-interest processing Legal Rights & Agreement Rules

for marketing activities, including profiling

• Right to object to processing, including marketing, profiling and legitimate-interest processing Legal Rights & Agreement Rules

for statistical purposes

• Right to object to processing, including marketing, profiling and legitimate-interest processing Legal Rights & Agreement Rules

where such processing is based on our legitimate business interests, unless we are able to demonstrate a compelling legitimate basis for such processing or we need to process your personal information for the establishment, exercise or defense of a legal claim

• Right to object to processing, including marketing, profiling and legitimate-interest processing Legal Rights & Agreement Rules

Right to Restrict Processing: You have the right to request that Hilton limit the processing of your personal information:

• Right to restrict processing, and notice before processing resumes Legal Rights & Agreement Rules

while Hilton is evaluating or in the process of responding to a request by you to update or correct your personal information where such processing is unlawful and you do not want Hilton to delete your data

• Right to restrict processing, and notice before processing resumes Legal Rights & Agreement Rules

where Hilton no longer requires such data, but you want us to retain the data for the establishment, exercise or defense of a legal claim

• Right to restrict processing, and notice before processing resumes Legal Rights & Agreement Rules

where you have submitted an objection to processing based on our legitimate business interests, pending our response to such request

• Right to restrict processing, and notice before processing resumes Legal Rights & Agreement Rules

Where we limit the processing of your personal information pursuant to your request, we will inform you prior to re-engaging in such processing.

• Right to restrict processing, and notice before processing resumes Legal Rights & Agreement Rules

Right to Opt Out of Sale and Sharing: You have the right to request that Hilton not sell or share your personal information. If you would like to opt out of the sale or sharing of your personal information, you may submit your request by visiting our website at Hilton Opt-out request, clicking the "Your Privacy Choices | Cookie Information" link that appears at the bottom of the Hilton.com website when you access that site from an IP address that indicates your presence in a region that has enacted a privacy law, or visiting datarights.hilton.com. You also may call our toll-free telephone number: (800) 413-7470, email the Data Protection Office (“DPO”) at DataProtectionOffice@hilton.com, or send a letter to the Data Protection Office at 7930 Jones Branch Drive, McLean, Virginia, USA 22102.

• Right to opt out of sale and sharing, and the device scope of a cookie opt-out Legal Rights & Agreement Rules

Please note that when you opt out of Cookies, tags, and pixels, that opt out only pertains to the device and the browser that you are using when you opt out. If you wish to opt out for other devices or browsers, you must opt out again when you are using those devices or browsers. Note, if you have a legally-recognized browser-based opt-out preference signal turned on via your device browser, we recognize such preference in accordance with applicable law.

• Right to opt out of sale and sharing, and the device scope of a cookie opt-out Legal Rights & Agreement Rules

Data Portability Requests: You have the right to request that we provide you or a third party that you designate with certain of your personal information in a commonly used, machine readable format. Please note, however, that data portability rights apply only to personal information that we have obtained directly from you and only where our processing is based on consent or the performance of a contract.

• Data portability: a copy in a machine-readable format, limited to directly obtained data and consent or contract Legal Rights & Agreement Rules

Submitting Requests: Your requests may be submitted by accessing the Data Subject Rights Request Portal at datarights.hilton.com or in writing to DataProtectionOffice@hilton.com, or the Hilton Data Protection Office, 7930 Jones Branch Drive, McLean, VA 22102, USA. You may also update your personal information as provided in section titled Your Rights and Choices of the main body of this Global Privacy Statement.

• Submitting requests in Appendix A, identity verification, and the effect of a deletion request on services Legal Rights & Agreement Rules

We will take reasonable steps to verify your identity and requests, including by verifying your account information, residency or the email address you provide. If you are an authorized agent submitting a request on behalf of another individual, we may require proof of your written authorization before processing the request. We will not respond to any request unless we are able to appropriately verify the requester’s identity.

• Submitting requests in Appendix A, identity verification, and the effect of a deletion request on services Legal Rights & Agreement Rules

We will respond to all such requests within the time period permitted by law. Applicable law may further provide you with the right to not be discriminated against for exercising your rights. Please note, however, that certain personal information may be exempt from such rights pursuant to applicable data protection laws, such as information we retain for legal compliance and to secure our services. We may need certain information in order to provide the services to you; if you ask us to delete it, you may no longer be able to use the services. In addition, we may charge you a reasonable fee for subsequent copies of data that you request.

• Submitting requests in Appendix A, identity verification, and the effect of a deletion request on services Legal Rights & Agreement Rules
• Appendix A rights: response time, exemptions from the rights, service limits and copy fees Legal Rights & Agreement Rules

If you want to present a complaint or have concerns about our data practices or the exercise of your rights, you may either contact Hilton at DataProtectionOffice@Hilton.com or the supervisory authority in the Member State of your residence. For the EEA, the supervisory authorities are available here. For the UK, the supervisory authority is available here.

• Complaining about data practices or the exercise of rights: Hilton or the supervisory authority Legal Rights & Agreement Rules

Additionally, Colorado, Connecticut, Delaware, Iowa, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, and Virginia residents may appeal the denial of a request by emailing us at DataProtectionOffice@hilton.com or mailing us at Hilton Data Protection Office, 7930 Jones Branch Drive, McLean, VA 22102, USA.

• Appeal rights in thirteen US states Legal Rights & Agreement Rules

Right to Withdraw Consent: You have the right to withdraw your consent to any processing that we conduct solely based on your consent (such as sending direct marketing materials to your personal email account). You may withdraw your consent to marketing activities by following the instructions on any marketing emails you receive, or contacting DataProtectionOffice@hilton.com.

• Right to withdraw consent, including for direct marketing Legal Rights & Agreement Rules

Right to Object to Profiling and Automated Decision Making: You have the right to object to profiling and automated decision making. We use personal information to divide large groups of consumers into sub-groups of consumers (known as segments) based on some type of shared characteristics such as geography, behavior, or demographics.

• Right to object to profiling and automated decision making Legal Rights & Agreement Rules

With your consent, we make automated decisions, meaning without human interference, to offer you certain benefits based on your characteristics (such as discounted room rates or other special offers based on your geography, behavior, or demographics). For example, if you travel frequently during the week to hotels in France, we may send you special offers for Hilton hotels in France.

• Right to object to profiling and automated decision making Legal Rights & Agreement Rules

International Data Transfers: We may transfer the personal information we collect about you pursuant to the purposes described in this Statement to countries that have not been found to provide adequate protection of data pursuant to a country-specific law. In particular, we transfer your personal information to the United States.

• Appendix A: international transfers of personal information, to the United States, with safeguards Sharing & Disclosure

We use appropriate safeguards for the transfer of personal information among our affiliates in various jurisdictions, and where required, we have implemented data transfer agreements, such as the European Commission standard contractual clauses or other similar safeguards for such purposes. To obtain a copy of theses clauses or additional information on transfers, you may send your request to privacy@hilton.com.

• Appendix A: international transfers of personal information, to the United States, with safeguards Sharing & Disclosure

Back to Top

Appendix A-1: California Residents

• Appendix A-1: California residents — CCPA information and the sections it cross-refers to Legal Rights & Agreement Rules

This Appendix provides additional information for individuals residing in California. The law in California requires us to provide you with some additional information regarding how we collect, use, and disclose your “personal information” as defined in the California Consumer Privacy Act (“CCPA”). We describe the categories of information we collect, our business purposes for collecting such information, the sources and uses of such information and the entities with which we disclose such information in the "Collection of Personal Information – Generally," "Collection of Personal Information – Notice at Point of Collection," "Cookies and Other Technologies," and "How We Disclose Personal Information" sections of this Statement.

• Appendix A-1: California residents — CCPA information and the sections it cross-refers to Legal Rights & Agreement Rules

Sale or Sharing of Personal Information

• California: the categories shared for targeted advertising, which may constitute a sale Sharing & Disclosure

We engage in targeted (or cross context behavioral) advertising on our services or on other sites and when we advertise our services elsewhere. In connection with such advertising, we may share the following categories of information with advertising networks and providers, advertisers, and social media networks, which may be considered a sale under California law and is the processing of personal information for targeted advertising: device information and identifiers, such as IP address, and unique advertising identifiers and cookies; hashed identifiers such as contact information, usage information, such as browsing history or app usage; location information, such as city; and inference data.

• California: the categories shared for targeted advertising, which may constitute a sale Sharing & Disclosure

We do not “sell” or “share” personal information (as those terms are defined under the CCPA) if we have actual knowledge that the consumer is less than 16 years of age.

• California: no sale or sharing of a consumer's information where Hilton knows they are under 16 Legal Rights & Agreement Rules

The Right to Know, The Right to Delete, and the Right to Opt-Out of the Sale or Sharing of Personal Information

• California: the three CCPA rights, in addition to the Appendix A rights Legal Rights & Agreement Rules

In addition to certain rights described below in Appendix A (“for Residents of Certain Countries and US States”),the California Consumer Privacy Act (“CCPA”) affords California consumers (1) the right to know what personal information we collect, use, disclose, and/or sell; (2) the right to request that we delete their personal information; and (3) the right to request that we no longer sell or share their personal information.

• California: the three CCPA rights, in addition to the Appendix A rights Legal Rights & Agreement Rules

If you would like information about the personal information that we collect, or if you would like to make a request for us to correct or delete your personal information, please visit Data Subject Rights Portal at datarights.hilton.com. You also may call our toll-free telephone number: (800) 413-7470, email the Data Protection Office (“DPO”) at DataProtectionOffice@hilton.com, send a letter to the Data Protection Office at 7930 Jones Branch Drive, McLean, Virginia, USA 22102.

• California: where to send a request for information, correction or deletion Legal Rights & Agreement Rules

When the DPO receives your request, the DPO will first verify your identity. If you are a Hilton Honors member, the DPO will verify your identity by asking you to provide your name, Hilton Honors account number, and the email address and phone number associated with your Hilton Honors account. If you are not a Hilton Honors member, the DPO will verify your identity by asking you to provide your name, the email address and/or phone number associated with a past stay, and potentially a confirmation number from one of your stays at a Hilton property. Once the DPO has verified your identity, the DPO will promptly fulfill your request.

• California: identity verification before a request is fulfilled, and how to appoint an agent Legal Rights & Agreement Rules

If you would like, you may designate an authorized agent to make a request on your behalf. To designate an authorized agent, please submit an order issued by a court, a document submitted by a barred attorney, or a formal certified document issued by an official governmental agency.

• California: identity verification before a request is fulfilled, and how to appoint an agent Legal Rights & Agreement Rules

If you would like to opt out of the sale or sharing of your personal information, you may submit a request by clicking the “ Your Privacy Choices| Cookie Information” link at the bottom of the Hilton.com website when you access that site from an IP address that indicates your presence in a state that has enacted a privacy law. Please note that when you opt out of cookies, tags, and pixels, that opt out only pertains to the device and the browser that you are using when you opt out. If you wish to opt out for other devices or browsers, you must opt out again when you are using those devices or browsers. Additionally, California residents can also turn on the Global Privacy Control (GPC) to opt out of the “sale” or “sharing” of your personal information that is browser based for each participating browser system that you use. Learn more at the Global Privacy Control website. If you use a cookie blocker such as Ghostery, it may block visibility of the Your Privacy Choices tool or link, including in your web footer. In addition, California consumers may request that we no longer sell or share non-cookie based personal information by making a Hilton Opt-out request.

• California: opting out of sale or sharing, and the Global Privacy Control Legal Rights & Agreement Rules

Sensitive Personal Information

• California: use of sensitive personal information is limited to what the services or the law require Legal Rights & Agreement Rules

We limit the use of your sensitive personal information to that use which is necessary to perform reasonably expected services or as required by law, to which California’s right to limit the use and disclosure of sensitive personal information does not apply.

• California: use of sensitive personal information is limited to what the services or the law require Legal Rights & Agreement Rules

Direct Marketing/Shine the Light Disclosure

• California: requesting information about disclosures for direct marketing, once a year Legal Rights & Agreement Rules

California consumers also may request information about our disclosures of certain categories of personal information to third parties for their direct marketing purposes. Such requests must be submitted to us at one of the following addresses: CA_Privacy@Hilton.com or DataProtectionOffice@Hilton.com, send a letter to the Data Protection Office at 7930 Jones Branch Drive, McLean, Virginia, USA 22102. Within thirty days of receiving such a request, we will provide a list of the categories of personal information disclosed to third parties for third-party direct marketing purposes during the immediately preceding calendar year, along with the names and addresses of these third parties. This request may be made no more than once per calendar year. We reserve our right not to respond to requests submitted to addresses other than the addresses specified in this paragraph.

• California: requesting information about disclosures for direct marketing, once a year Legal Rights & Agreement Rules

The Right to Non-Discrimination

• California: no discrimination for exercising CCPA rights Legal Rights & Agreement Rules

The CCPA prohibits a business from treating a consumer differently because the consumer exercised a right conferred on him/her by the CCPA. We welcome you to exercise your rights under the CCPA, and we will not discriminate against you for doing so.

• California: no discrimination for exercising CCPA rights Legal Rights & Agreement Rules

Financial Incentive Notice

• California: no financial incentive for collecting, selling or deleting personal information Legal Rights & Agreement Rules

Hilton does not offer a financial incentive for the collection, sale, or deletion of personal information. As detailed in this Statement, Hilton primarily collects personal data from guests in order to fulfill guest reservations and from Honors members in order to operate the Hilton Honors loyalty program. Hilton also collects personal data for marketing and other purposes as permitted by applicable law.

• California: no financial incentive for collecting, selling or deleting personal information Legal Rights & Agreement Rules

As set forth in the Hilton Honors Terms and Conditions, Hilton Honors members have the ability to accumulate points and access discounted rates. The ability to accumulate points and to access discounted rates is not directly related to the value provided to the business of members’ data.

• California: accumulating Honors points and discounted rates are not a financial incentive Legal Rights & Agreement Rules

Removal of Content

• California: request to remove publicly posted content if you are under 18 Legal Rights & Agreement Rules

If you are a California resident under the age of 18, and a registered user of any site where this policy is posted, California Business and Professions Code Section 22581 permits you to request and obtain removal of content or information you have publicly posted. To make such a request, please send an email with a detailed description of the specific content or information to CA_Privacy@Hilton.com. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

• California: request to remove publicly posted content if you are under 18 Legal Rights & Agreement Rules

Retention of Your Personal Information

• California: retention is governed by the main body's Data Retention Periods section Retention & Deletion

Please refer to the section titled Data Retention Periods in the main body of this Statement.

• California: retention is governed by the main body's Data Retention Periods section Retention & Deletion

Do Not Track (“DNT”)

• California: Do Not Track signals are not responded to Legal Rights & Agreement Rules

California law requires us to let you know how we respond to web browser Do Not Track (“DNT”) signals. Because there currently isn’t an industry or legal standard for recognizing or honoring DNT signals, we don’t respond to them at this time.

• California: Do Not Track signals are not responded to Legal Rights & Agreement Rules

Generative Artificial Intelligence Training Data Transparency

• Generative AI training data: the Digital Assistant, its training data and the sources used Use & Processing

California’s Generative Artificial Intelligence (GenAI) Training Data Transparency Act requires developers of GenAI systems available to California residents to post details on the data used for training their systems on their websites.

• Generative AI training data: the Digital Assistant, its training data and the sources used Use & Processing

Hilton Digital Assistant is a GenAI chatbot that is available to the public on our website (Hilton.com), through the Hilton Honors App, and through guest messaging channels at certain hotels. The Hilton Digital Assistant can assist with customer support tasks and generate context-aware chatbot answers regarding account support, reservation details, hotel information, and general inquiries about Hilton.

• Generative AI training data: the Digital Assistant, its training data and the sources used Use & Processing

Hilton developed the Hilton Digital Assistant using Hilton proprietary datasets. The data used to train the Hilton Digital Assistant is internally sourced and collected on an ongoing basis. We do not use synthetic data generation. The datasets do not include personal information or aggregated consumer information as defined in the CCPA.

• Generative AI training data: the Digital Assistant, its training data and the sources used Use & Processing

The following summarizes the datasets we use to develop the Hilton Digital Assistant. We began using this data to develop the Hilton Digital Assistant on August 1, 2021.

• Generative AI training data: the Digital Assistant, its training data and the sources used Use & Processing

Collapse All

Policy and General Knowledgebase

• GenAI training data: the Policy and General Knowledgebase dataset Use & Processing

Source/Owner of Datasets

• GenAI training data: the Policy and General Knowledgebase dataset Use & Processing

Hilton

• GenAI training data: the Policy and General Knowledgebase dataset Use & Processing

Description of Data Type

• GenAI training data: the Policy and General Knowledgebase dataset Use & Processing

Support content aimed to answer questions about Hilton programs and support for managing reservations.

• GenAI training data: the Policy and General Knowledgebase dataset Use & Processing

Estimated Volume

• GenAI training data: the Policy and General Knowledgebase dataset Use & Processing

10,000

• GenAI training data: the Policy and General Knowledgebase dataset Use & Processing

Intellectual Property Status

• GenAI training data: the Policy and General Knowledgebase dataset Use & Processing

Hilton Proprietary

• GenAI training data: the Policy and General Knowledgebase dataset Use & Processing

Hotel Information System

• GenAI training data: the Hotel Information System dataset Use & Processing

Source/Owner of Datasets

• GenAI training data: the Hotel Information System dataset Use & Processing

Hilton

• GenAI training data: the Hotel Information System dataset Use & Processing

Description of Data Type

• GenAI training data: the Hotel Information System dataset Use & Processing

Hotel amenities and policies. E.g. Pool Availability, Parking Cost, Pet Policies.

• GenAI training data: the Hotel Information System dataset Use & Processing

Estimated Volume

• GenAI training data: the Hotel Information System dataset Use & Processing

1 million

• GenAI training data: the Hotel Information System dataset Use & Processing

Intellectual Property Status

• GenAI training data: the Hotel Information System dataset Use & Processing

Hilton Proprietary

• GenAI training data: the Hotel Information System dataset Use & Processing

Appendix A-2: Nevada Residents

• Nevada residents: requesting that Hilton stop selling certain categories of personal information Legal Rights & Agreement Rules

This Appendix provides additional information for individuals residing in Nevada. If you are a Nevada resident, you may request that we stop selling certain categories of personal information that we collect. To submit a request, please visit our website at https://www.hilton.com/en/hilton-honors/opt-out-request. You also may call our toll-free telephone number: (800) 413-7470, email the Data Protection Office (“DPO”) at DataProtectionOffice@Hilton.com, send a letter to the Data Protection Office at 7930 Jones Branch Drive, McLean, Virginia, USA 22102. When the DPO receives your request, the DPO will first verify your identity.

• Nevada residents: requesting that Hilton stop selling certain categories of personal information Legal Rights & Agreement Rules

If you are a Hilton Honors member, the DPO will verify your identity by asking you to provide your name, Hilton Honors account number, and the email address and phone number associated with your Hilton Honors account. If you are not a Hilton Honors member, the DPO will verify your identity by asking you to provide your name, the email address and/or phone number associated with a past stay, and potentially a confirmation number from one of your stays at a Hilton property. Once the DPO has verified your identity, the DPO will promptly fulfill your request.

• Nevada residents: requesting that Hilton stop selling certain categories of personal information Legal Rights & Agreement Rules

Back to Top

Appendix A-3: French Residents

• French residents: phone number collection, no telemarketing, and the telephone canvassing opposition list Legal Rights & Agreement Rules

This Appendix provides additional information for individuals residing in France.

• French residents: phone number collection, no telemarketing, and the telephone canvassing opposition list Legal Rights & Agreement Rules

French residents, as disclosed in this Statement, we may collect your phone number to fulfill guest reservations, send guests communications relating to their reservations, provide customer service and support, verify identity, send marketing communications via SMS, process transactions with partners, share data with Hilton’s Third-Party Partner, authenticate mobile accounts, send service-related SMS communications, detect and prevent fraud, and engage in sales activities for group bookings. We will not use your phone number for telemarketing. Nonetheless, if you would like to register on the list of opposition to telephone canvassing, you may do so at www.bloctel.gouv.fr.

• French residents: phone number collection, no telemarketing, and the telephone canvassing opposition list Legal Rights & Agreement Rules

Back to Top

Appendix A-4: Hong Kong Residents

• Hong Kong residents: consent before marketing messages, and unsubscribe at any time Legal Rights & Agreement Rules

This Appendix provides additional information for individuals residing in Hong Kong SAR, China. If you are based in Hong Kong SAR, China, we will obtain your consent on or before sending you any marketing messages. You may opt out of receiving marketing messages from us at any time by using the unsubscribe link found in our marketing messages.

• Hong Kong residents: consent before marketing messages, and unsubscribe at any time Legal Rights & Agreement Rules

If you would like to access or correct your personal information, please contact the Data Protection Office (“DPO”) at DataProtectionOffice@hilton.com, or by visiting the Data Subject Rights Portal at datarights.hilton.com. We may require further information from you in order to verify your identity before processing your request. In certain circumstances where permitted to do so under applicable law, we may refuse to fulfil your request.

• Hong Kong: access or correction requests, further information for verification, and refusal Legal Rights & Agreement Rules

Back to Top

Appendix A-5: Türkiye Residents

• Türkiye appendix: additional information and rights under local law, controlling over the main body Legal Rights & Agreement Rules

For data subjects in Türkiye, this Appendix outlines certain additional information that Hilton is obligated to provide to you, as well as certain rights you have with respect to the processing of your personal information, pursuant to applicable local laws. This Appendix will control to the extent it conflicts with any provision in the main body of this Statement, or Appendix A, as applicable.

• Türkiye appendix: additional information and rights under local law, controlling over the main body Legal Rights & Agreement Rules

Data Controller. Hilton Domestic Operating Company Inc. is the Hilton entity for all guest data and Hilton's marketing activities.

• Türkiye: the data controller for guest data, and local entities that may also be controllers Legal Rights & Agreement Rules

Your personal data may be processed by other Hilton entities in Türkiye who act as a data controller based on the Hilton property you stay at. In such cases, the relevant Hilton entity will act as the data controller for your personal data, who will provide you with a separate privacy notice, where necessary.

• Türkiye: the data controller for guest data, and local entities that may also be controllers Legal Rights & Agreement Rules

Data Controller Representative. You may contact our data controller representative in Türkiye by email or mail to handle questions and complaints in connection with the processing of your personal data if you are in Türkiye.

• Türkiye: the data controller representative for questions and complaints Legal Rights & Agreement Rules

Esin Attorney Partnership

• Türkiye: the data controller representative for questions and complaints Legal Rights & Agreement Rules

info@esin.av.tr

• Türkiye: the data controller representative for questions and complaints Legal Rights & Agreement Rules

Akatlar Mah. Ebulula Mardin Cad. Gül Sok. No. 2

• Türkiye: the data controller representative for questions and complaints Legal Rights & Agreement Rules

Legal bases for the processing of your personal data. Hilton relies on the following legal bases while processing your personal data for the purposes indicated in the Global Privacy Statement in accordance with Article 5 of the Law No. 6698 on Protection of Personal Data (“Data Protection Law”):

• Türkiye: the four legal bases relied on for the purposes in the Statement Legal Rights & Agreement Rules

processing of your personal data is necessary provided that it is directly related to the conclusion or fulfillment of the contract between you and Hilton;

• Türkiye: the four legal bases relied on for the purposes in the Statement Legal Rights & Agreement Rules

processing is mandatory for Hilton to be able to comply with our legal obligations;

• Türkiye: the four legal bases relied on for the purposes in the Statement Legal Rights & Agreement Rules

processing is mandatory for Hilton’s legitimate interests, provided that it does not violate your fundamental rights and freedoms; or

• Türkiye: the four legal bases relied on for the purposes in the Statement Legal Rights & Agreement Rules

your explicit consent. (Please note that we rely on your explicit consent only when we require your consent for the processing and we do not rely on this legal basis if and when we rely on one of the other legal grounds above.)

• Türkiye: the four legal bases relied on for the purposes in the Statement Legal Rights & Agreement Rules

We have collected personal data for the following purposes:

• Türkiye: fulfilling guest reservations — data categories and legal basis Legal Rights & Agreement Rules

Collapse All

Fulfill guest reservations

• Türkiye: fulfilling guest reservations — data categories and legal basis Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: fulfilling guest reservations — data categories and legal basis Legal Rights & Agreement Rules

Name

• Türkiye: fulfilling guest reservations — data categories and legal basis Legal Rights & Agreement Rules

Telephone and fax numbers

• Türkiye: fulfilling guest reservations — data categories and legal basis Legal Rights & Agreement Rules

Email address

• Türkiye: fulfilling guest reservations — data categories and legal basis Legal Rights & Agreement Rules

Home address

• Türkiye: fulfilling guest reservations — data categories and legal basis Legal Rights & Agreement Rules

Hilton Honors number

• Türkiye: fulfilling guest reservations — data categories and legal basis Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: fulfilling guest reservations — data categories and legal basis Legal Rights & Agreement Rules

Contract

• Türkiye: fulfilling guest reservations — data categories and legal basis Legal Rights & Agreement Rules

Send guests communications about reservations

• Türkiye: reservation communications — data categories and legal bases Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: reservation communications — data categories and legal bases Legal Rights & Agreement Rules

Name

• Türkiye: reservation communications — data categories and legal bases Legal Rights & Agreement Rules

Telephone and fax numbers

• Türkiye: reservation communications — data categories and legal bases Legal Rights & Agreement Rules

Email address

• Türkiye: reservation communications — data categories and legal bases Legal Rights & Agreement Rules

Hilton Honors number

• Türkiye: reservation communications — data categories and legal bases Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: reservation communications — data categories and legal bases Legal Rights & Agreement Rules

Contract

• Türkiye: reservation communications — data categories and legal bases Legal Rights & Agreement Rules

Legitimate interests

• Türkiye: reservation communications — data categories and legal bases Legal Rights & Agreement Rules

Administer Hilton Honors membership and activity

• Türkiye: administering Hilton Honors membership — data categories and legal bases Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: administering Hilton Honors membership — data categories and legal bases Legal Rights & Agreement Rules

Name

• Türkiye: administering Hilton Honors membership — data categories and legal bases Legal Rights & Agreement Rules

Email address

• Türkiye: administering Hilton Honors membership — data categories and legal bases Legal Rights & Agreement Rules

Home address

• Türkiye: administering Hilton Honors membership — data categories and legal bases Legal Rights & Agreement Rules

Hilton Honors number

• Türkiye: administering Hilton Honors membership — data categories and legal bases Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: administering Hilton Honors membership — data categories and legal bases Legal Rights & Agreement Rules

Contract

• Türkiye: administering Hilton Honors membership — data categories and legal bases Legal Rights & Agreement Rules

Legitimate interests

• Türkiye: administering Hilton Honors membership — data categories and legal bases Legal Rights & Agreement Rules

Provide customer service and support

• Türkiye: customer service and support — data categories and legal bases Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: customer service and support — data categories and legal bases Legal Rights & Agreement Rules

Name

• Türkiye: customer service and support — data categories and legal bases Legal Rights & Agreement Rules

Telephone and fax numbers

• Türkiye: customer service and support — data categories and legal bases Legal Rights & Agreement Rules

Email address

• Türkiye: customer service and support — data categories and legal bases Legal Rights & Agreement Rules

Home address

• Türkiye: customer service and support — data categories and legal bases Legal Rights & Agreement Rules

Hilton Honors number

• Türkiye: customer service and support — data categories and legal bases Legal Rights & Agreement Rules

WeChat name and profile photo

• Türkiye: customer service and support — data categories and legal bases Legal Rights & Agreement Rules

Arrival time

• Türkiye: customer service and support — data categories and legal bases Legal Rights & Agreement Rules

Corporate travel planner contact information (name, title, company, business phone, email and address)

• Türkiye: customer service and support — data categories and legal bases Legal Rights & Agreement Rules

Booking engine

• Türkiye: customer service — partner account indicators and the legal bases Legal Rights & Agreement Rules

Whether you have a Hilton and American Express Co-Branded Credit Card

• Türkiye: customer service — partner account indicators and the legal bases Legal Rights & Agreement Rules

Whether your Hilton and Amazon accounts are linked

• Türkiye: customer service — partner account indicators and the legal bases Legal Rights & Agreement Rules

Whether your Hilton and Lyft accounts are linked

• Türkiye: customer service — partner account indicators and the legal bases Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: customer service — partner account indicators and the legal bases Legal Rights & Agreement Rules

Contract

• Türkiye: customer service — partner account indicators and the legal bases Legal Rights & Agreement Rules

Legitimate interests

• Türkiye: customer service — partner account indicators and the legal bases Legal Rights & Agreement Rules

Verify identity

• Türkiye: verifying identity — data categories collected Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: verifying identity — data categories collected Legal Rights & Agreement Rules

Name

• Türkiye: verifying identity — data categories collected Legal Rights & Agreement Rules

Telephone and fax numbers

• Türkiye: verifying identity — data categories collected Legal Rights & Agreement Rules

Email address

• Türkiye: verifying identity — data categories collected Legal Rights & Agreement Rules

Home address

• Türkiye: verifying identity — data categories collected Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: legal basis for verifying identity is legitimate interests Legal Rights & Agreement Rules

Legitimate interests

• Türkiye: legal basis for verifying identity is legitimate interests Legal Rights & Agreement Rules

Send email, direct mail, and social media marketing communications

• Türkiye: sending marketing communications — data categories and legal basis Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: sending marketing communications — data categories and legal basis Legal Rights & Agreement Rules

Name

• Türkiye: sending marketing communications — data categories and legal basis Legal Rights & Agreement Rules

Hilton Honors number

• Türkiye: sending marketing communications — data categories and legal basis Legal Rights & Agreement Rules

Corporate travel planner contact information (name, title, company, business phone, email and address)

• Türkiye: sending marketing communications — data categories and legal basis Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: sending marketing communications — data categories and legal basis Legal Rights & Agreement Rules

Consent

• Türkiye: sending marketing communications — data categories and legal basis Legal Rights & Agreement Rules

Perform analytics for personalized offers and content

• Türkiye: analytics for personalised offers and content — data categories Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: analytics for personalised offers and content — data categories Legal Rights & Agreement Rules

Name

• Türkiye: analytics for personalised offers and content — data categories Legal Rights & Agreement Rules

Hilton Honors number

• Türkiye: analytics for personalised offers and content — data categories Legal Rights & Agreement Rules

Home address

• Türkiye: analytics for personalised offers and content — data categories Legal Rights & Agreement Rules

Preferred language

• Türkiye: analytics for personalised offers and content — data categories Legal Rights & Agreement Rules

Room preference

• Türkiye: analytics for personalised offers and content — data categories Legal Rights & Agreement Rules

Internet or other electronic network activity information, including information regarding a customer's interaction with Hilton websites, applications, or advertisements

• Türkiye: analytics for personalised offers and content — data categories Legal Rights & Agreement Rules

IP addresses

• Türkiye: analytics for personalised offers and content — data categories Legal Rights & Agreement Rules

Session IDs

• Türkiye: analytics for personalised offers and content — data categories Legal Rights & Agreement Rules

Geolocation information

• Türkiye: analytics for personalised offers and content — data categories Legal Rights & Agreement Rules

Device information (including MAC addresses)

• Türkiye: analytics for personalised offers and content — data categories Legal Rights & Agreement Rules

Social media information; publicly available online information (including through social media platforms)

• Türkiye: analytics for personalised offers and content — data categories Legal Rights & Agreement Rules

Demographic data

• Türkiye: legal bases for personalization analytics are legitimate interests and consent Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: legal bases for personalization analytics are legitimate interests and consent Legal Rights & Agreement Rules

Legitimate interests

• Türkiye: legal bases for personalization analytics are legitimate interests and consent Legal Rights & Agreement Rules

Consent

• Türkiye: legal bases for personalization analytics are legitimate interests and consent Legal Rights & Agreement Rules

Perform analytics to improve business operations

• Türkiye: analytics to improve business operations — data categories and legal basis Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: analytics to improve business operations — data categories and legal basis Legal Rights & Agreement Rules

Name

• Türkiye: analytics to improve business operations — data categories and legal basis Legal Rights & Agreement Rules

Home address

• Türkiye: analytics to improve business operations — data categories and legal basis Legal Rights & Agreement Rules

Hilton Honors number

• Türkiye: analytics to improve business operations — data categories and legal basis Legal Rights & Agreement Rules

Room preference

• Türkiye: analytics to improve business operations — data categories and legal basis Legal Rights & Agreement Rules

Internet or other electronic network activity information, including information regarding a customer's interaction with Hilton websites, applications, or advertisements

• Türkiye: analytics to improve business operations — data categories and legal basis Legal Rights & Agreement Rules

IP addresses

• Türkiye: analytics to improve business operations — data categories and legal basis Legal Rights & Agreement Rules

Session IDs

• Türkiye: analytics to improve business operations — data categories and legal basis Legal Rights & Agreement Rules

Booking engine

• Türkiye: analytics to improve business operations — data categories and legal basis Legal Rights & Agreement Rules

Whether you have a Hilton and American Express Co-branded Credit Card

• Türkiye: analytics to improve business operations — data categories and legal basis Legal Rights & Agreement Rules

Whether your Hilton and Amazon accounts are linked

• Türkiye: analytics to improve business operations — data categories and legal basis Legal Rights & Agreement Rules

Whether your Hilton and Lyft accounts are linked

• Türkiye: analytics to improve business operations — data categories and legal basis Legal Rights & Agreement Rules

Spending amount

• Türkiye: analytics to improve business operations — data categories and legal basis Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: analytics to improve business operations — data categories and legal basis Legal Rights & Agreement Rules

Legitimate interests

• Türkiye: analytics to improve business operations — data categories and legal basis Legal Rights & Agreement Rules

Determine guests' eligibility for special or promotional rates

• Türkiye: eligibility for special or promotional rates — data categories and legal basis Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: eligibility for special or promotional rates — data categories and legal basis Legal Rights & Agreement Rules

Name

• Türkiye: eligibility for special or promotional rates — data categories and legal basis Legal Rights & Agreement Rules

Hilton Honors number

• Türkiye: eligibility for special or promotional rates — data categories and legal basis Legal Rights & Agreement Rules

Corporate number and name

• Türkiye: eligibility for special or promotional rates — data categories and legal basis Legal Rights & Agreement Rules

Travel agent number and name

• Türkiye: eligibility for special or promotional rates — data categories and legal basis Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: eligibility for special or promotional rates — data categories and legal basis Legal Rights & Agreement Rules

Legitimate interests

• Türkiye: eligibility for special or promotional rates — data categories and legal basis Legal Rights & Agreement Rules

Process payments, including strong customer authentication when required by law

• Türkiye: processing payments and strong customer authentication — data categories and legal bases Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: processing payments and strong customer authentication — data categories and legal bases Legal Rights & Agreement Rules

Name

• Türkiye: processing payments and strong customer authentication — data categories and legal bases Legal Rights & Agreement Rules

Home address

• Türkiye: processing payments and strong customer authentication — data categories and legal bases Legal Rights & Agreement Rules

Payment card information

• Türkiye: processing payments and strong customer authentication — data categories and legal bases Legal Rights & Agreement Rules

IP addresses

• Türkiye: processing payments and strong customer authentication — data categories and legal bases Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: processing payments and strong customer authentication — data categories and legal bases Legal Rights & Agreement Rules

Contract

• Türkiye: processing payments and strong customer authentication — data categories and legal bases Legal Rights & Agreement Rules

Legal obligations

• Türkiye: processing payments and strong customer authentication — data categories and legal bases Legal Rights & Agreement Rules

Process transactions with partners

• Türkiye: transactions with partners — data categories and legal basis Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: transactions with partners — data categories and legal basis Legal Rights & Agreement Rules

Name

• Türkiye: transactions with partners — data categories and legal basis Legal Rights & Agreement Rules

Telephone and fax numbers

• Türkiye: transactions with partners — data categories and legal basis Legal Rights & Agreement Rules

Email address

• Türkiye: transactions with partners — data categories and legal basis Legal Rights & Agreement Rules

Home address

• Türkiye: transactions with partners — data categories and legal basis Legal Rights & Agreement Rules

Hilton Honors number

• Türkiye: transactions with partners — data categories and legal basis Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: transactions with partners — data categories and legal basis Legal Rights & Agreement Rules

Contract

• Türkiye: transactions with partners — data categories and legal basis Legal Rights & Agreement Rules

Administer contests and sweepstakes

• Türkiye: administering contests and sweepstakes — data categories and legal bases Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: administering contests and sweepstakes — data categories and legal bases Legal Rights & Agreement Rules

Name

• Türkiye: administering contests and sweepstakes — data categories and legal bases Legal Rights & Agreement Rules

Email address

• Türkiye: administering contests and sweepstakes — data categories and legal bases Legal Rights & Agreement Rules

Home address

• Türkiye: administering contests and sweepstakes — data categories and legal bases Legal Rights & Agreement Rules

Hilton Honors number

• Türkiye: administering contests and sweepstakes — data categories and legal bases Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: administering contests and sweepstakes — data categories and legal bases Legal Rights & Agreement Rules

Consent

• Türkiye: administering contests and sweepstakes — data categories and legal bases Legal Rights & Agreement Rules

Legitimate interests

• Türkiye: administering contests and sweepstakes — data categories and legal bases Legal Rights & Agreement Rules

Optimize our websites and mobile apps

• Türkiye: optimizing websites and mobile apps — data categories and legal bases Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: optimizing websites and mobile apps — data categories and legal bases Legal Rights & Agreement Rules

Name

• Türkiye: optimizing websites and mobile apps — data categories and legal bases Legal Rights & Agreement Rules

Internet or other electronic network activity information, including information regarding a customer's interaction with Hilton websites, applications, or advertisements

• Türkiye: optimizing websites and mobile apps — data categories and legal bases Legal Rights & Agreement Rules

IP addresses

• Türkiye: optimizing websites and mobile apps — data categories and legal bases Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: optimizing websites and mobile apps — data categories and legal bases Legal Rights & Agreement Rules

Consent

• Türkiye: optimizing websites and mobile apps — data categories and legal bases Legal Rights & Agreement Rules

Legitimate interests

• Türkiye: optimizing websites and mobile apps — data categories and legal bases Legal Rights & Agreement Rules

Detect and prevent fraud

• Türkiye: detecting and preventing fraud — data categories and legal basis Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: detecting and preventing fraud — data categories and legal basis Legal Rights & Agreement Rules

Name

• Türkiye: detecting and preventing fraud — data categories and legal basis Legal Rights & Agreement Rules

Telephone and fax numbers

• Türkiye: detecting and preventing fraud — data categories and legal basis Legal Rights & Agreement Rules

Email address

• Türkiye: detecting and preventing fraud — data categories and legal basis Legal Rights & Agreement Rules

Home address

• Türkiye: detecting and preventing fraud — data categories and legal basis Legal Rights & Agreement Rules

Payment card information

• Türkiye: detecting and preventing fraud — data categories and legal basis Legal Rights & Agreement Rules

Hilton Honors number

• Türkiye: detecting and preventing fraud — data categories and legal basis Legal Rights & Agreement Rules

Internet or other electronic network activity information, including information regarding a customer's interaction with Hilton websites, applications, or advertisements

• Türkiye: detecting and preventing fraud — data categories and legal basis Legal Rights & Agreement Rules

IP addresses

• Türkiye: detecting and preventing fraud — data categories and legal basis Legal Rights & Agreement Rules

Session IDs

• Türkiye: detecting and preventing fraud — data categories and legal basis Legal Rights & Agreement Rules

Geolocation information

• Türkiye: detecting and preventing fraud — data categories and legal basis Legal Rights & Agreement Rules

Device information (including MAC addresses)

• Türkiye: detecting and preventing fraud — data categories and legal basis Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: detecting and preventing fraud — data categories and legal basis Legal Rights & Agreement Rules

Legitimate interests

• Türkiye: detecting and preventing fraud — data categories and legal basis Legal Rights & Agreement Rules

Send marketing communications via SMS

• Türkiye: SMS marketing communications — the data category collected Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: SMS marketing communications — the data category collected Legal Rights & Agreement Rules

Telephone and fax numbers

• Türkiye: SMS marketing communications — the data category collected Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: legal basis for SMS marketing is consent Legal Rights & Agreement Rules

Consent

• Türkiye: legal basis for SMS marketing is consent Legal Rights & Agreement Rules

Authenticate mobile account

• Türkiye: authenticating a mobile account — data categories and legal basis Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: authenticating a mobile account — data categories and legal basis Legal Rights & Agreement Rules

Telephone and fax numbers

• Türkiye: authenticating a mobile account — data categories and legal basis Legal Rights & Agreement Rules

Email address

• Türkiye: authenticating a mobile account — data categories and legal basis Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: authenticating a mobile account — data categories and legal basis Legal Rights & Agreement Rules

Legitimate interests

• Türkiye: authenticating a mobile account — data categories and legal basis Legal Rights & Agreement Rules

Send service-related SMS communications

• Türkiye: service-related SMS communications — data category and legal basis Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: service-related SMS communications — data category and legal basis Legal Rights & Agreement Rules

Telephone and fax numbers

• Türkiye: service-related SMS communications — data category and legal basis Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: service-related SMS communications — data category and legal basis Legal Rights & Agreement Rules

Legitimate interests

• Türkiye: service-related SMS communications — data category and legal basis Legal Rights & Agreement Rules

Engage in sales activity for group booking, meetings, and events

• Türkiye: group bookings, meetings and events — data categories and legal bases Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: group bookings, meetings and events — data categories and legal bases Legal Rights & Agreement Rules

Telephone and fax numbers

• Türkiye: group bookings, meetings and events — data categories and legal bases Legal Rights & Agreement Rules

Email address

• Türkiye: group bookings, meetings and events — data categories and legal bases Legal Rights & Agreement Rules

Home address

• Türkiye: group bookings, meetings and events — data categories and legal bases Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: group bookings, meetings and events — data categories and legal bases Legal Rights & Agreement Rules

Legitimate interests

• Türkiye: group bookings, meetings and events — data categories and legal bases Legal Rights & Agreement Rules

Consent

• Türkiye: group bookings, meetings and events — data categories and legal bases Legal Rights & Agreement Rules

Send marketing communications via email

• Türkiye: email marketing — data category and legal basis Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: email marketing — data category and legal basis Legal Rights & Agreement Rules

Email address

• Türkiye: email marketing — data category and legal basis Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: email marketing — data category and legal basis Legal Rights & Agreement Rules

Consent

• Türkiye: email marketing — data category and legal basis Legal Rights & Agreement Rules

Send marketing communications via direct mail

• Türkiye: direct mail marketing — data category and legal basis Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: direct mail marketing — data category and legal basis Legal Rights & Agreement Rules

Home address

• Türkiye: direct mail marketing — data category and legal basis Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: direct mail marketing — data category and legal basis Legal Rights & Agreement Rules

Consent

• Türkiye: direct mail marketing — data category and legal basis Legal Rights & Agreement Rules

Comply with applicable laws requiring this information in some jurisdictions

• Türkiye: compliance with laws requiring information in some jurisdictions — data categories and legal basis Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: compliance with laws requiring information in some jurisdictions — data categories and legal basis Legal Rights & Agreement Rules

Nationality

• Türkiye: compliance with laws requiring information in some jurisdictions — data categories and legal basis Legal Rights & Agreement Rules

Date of birth

• Türkiye: compliance with laws requiring information in some jurisdictions — data categories and legal basis Legal Rights & Agreement Rules

Gender

• Türkiye: compliance with laws requiring information in some jurisdictions — data categories and legal basis Legal Rights & Agreement Rules

Images of footage captured by closed circuit television (CCTV)

• Türkiye: compliance with laws requiring information in some jurisdictions — data categories and legal basis Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: compliance with laws requiring information in some jurisdictions — data categories and legal basis Legal Rights & Agreement Rules

Legal obligations

• Türkiye: compliance with laws requiring information in some jurisdictions — data categories and legal basis Legal Rights & Agreement Rules

Maintain books and records for business reporting, auditing, tax, and income reconciliation

• Türkiye: books and records for reporting, auditing, tax and income reconciliation Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: books and records for reporting, auditing, tax and income reconciliation Legal Rights & Agreement Rules

Payment card information

• Türkiye: books and records for reporting, auditing, tax and income reconciliation Legal Rights & Agreement Rules

Spending amount

• Türkiye: books and records for reporting, auditing, tax and income reconciliation Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: books and records for reporting, auditing, tax and income reconciliation Legal Rights & Agreement Rules

Legal obligations

• Türkiye: books and records for reporting, auditing, tax and income reconciliation Legal Rights & Agreement Rules

Enable login to Hilton Honors account

• Türkiye: logging in to the Hilton Honors account — data category and legal basis Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: logging in to the Hilton Honors account — data category and legal basis Legal Rights & Agreement Rules

WeChat ID

• Türkiye: logging in to the Hilton Honors account — data category and legal basis Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: logging in to the Hilton Honors account — data category and legal basis Legal Rights & Agreement Rules

Consent

• Türkiye: logging in to the Hilton Honors account — data category and legal basis Legal Rights & Agreement Rules

Provide superior guest experience

• Türkiye: superior guest experience — data category and legal basis Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: superior guest experience — data category and legal basis Legal Rights & Agreement Rules

Preferred language

• Türkiye: superior guest experience — data category and legal basis Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: superior guest experience — data category and legal basis Legal Rights & Agreement Rules

Legitimate interests

• Türkiye: superior guest experience — data category and legal basis Legal Rights & Agreement Rules

Send Hilton Honors communications

• Türkiye: Hilton Honors communications — data category and legal basis Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: Hilton Honors communications — data category and legal basis Legal Rights & Agreement Rules

Preferred language

• Türkiye: Hilton Honors communications — data category and legal basis Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: Hilton Honors communications — data category and legal basis Legal Rights & Agreement Rules

Consent

• Türkiye: Hilton Honors communications — data category and legal basis Legal Rights & Agreement Rules

Send marketing communications

• Türkiye: marketing communications — preferred language and consent Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: marketing communications — preferred language and consent Legal Rights & Agreement Rules

Preferred language

• Türkiye: marketing communications — preferred language and consent Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: marketing communications — preferred language and consent Legal Rights & Agreement Rules

Consent

• Türkiye: marketing communications — preferred language and consent Legal Rights & Agreement Rules

Better serve guests

• Türkiye: better serving guests — the widest list of data categories Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: better serving guests — the widest list of data categories Legal Rights & Agreement Rules

Preferred language

• Türkiye: better serving guests — the widest list of data categories Legal Rights & Agreement Rules

Room preference

• Türkiye: better serving guests — the widest list of data categories Legal Rights & Agreement Rules

Room selection and assignment

• Türkiye: better serving guests — the widest list of data categories Legal Rights & Agreement Rules

Arrival time

• Türkiye: better serving guests — the widest list of data categories Legal Rights & Agreement Rules

Departure date

• Türkiye: better serving guests — the widest list of data categories Legal Rights & Agreement Rules

MyWay preferences

• Türkiye: better serving guests — the widest list of data categories Legal Rights & Agreement Rules

Email and consent preferences (such as opt-out or opt-in as applicable)

• Türkiye: better serving guests — the widest list of data categories Legal Rights & Agreement Rules

Description of an incident that occurs at a Hilton property or involves a Hilton employee, including incidents related to safety and security, and violation of law, applicable policy, or contractual obligation

• Türkiye: better serving guests — the widest list of data categories Legal Rights & Agreement Rules

Description of a complaint that you make to us, including your free form textual feedback if you are a Hilton Honors member

• Türkiye: better serving guests — the widest list of data categories Legal Rights & Agreement Rules

Spa and wellness service or treatment details (such as date, time, and type of service)

• Türkiye: better serving guests — the widest list of data categories Legal Rights & Agreement Rules

Spending amount

• Türkiye: better serving guests — the widest list of data categories Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: better serving guests — the widest list of data categories Legal Rights & Agreement Rules

Legitimate interests

• Türkiye: better serving guests — the widest list of data categories Legal Rights & Agreement Rules

Personalize guest experience

• Türkiye: personalizing the guest experience — data categories and legal basis Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: personalizing the guest experience — data categories and legal basis Legal Rights & Agreement Rules

Arrival time

• Türkiye: personalizing the guest experience — data categories and legal basis Legal Rights & Agreement Rules

Departure date

• Türkiye: personalizing the guest experience — data categories and legal basis Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: personalizing the guest experience — data categories and legal basis Legal Rights & Agreement Rules

Legitimate interests

• Türkiye: personalizing the guest experience — data categories and legal basis Legal Rights & Agreement Rules

Fulfill corporate travel reservations

• Türkiye: fulfilling corporate travel reservations — data category and legal basis Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: fulfilling corporate travel reservations — data category and legal basis Legal Rights & Agreement Rules

Corporate travel planner contact information (name, title, company, business phone, email and address)

• Türkiye: fulfilling corporate travel reservations — data category and legal basis Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: fulfilling corporate travel reservations — data category and legal basis Legal Rights & Agreement Rules

Contract

• Türkiye: fulfilling corporate travel reservations — data category and legal basis Legal Rights & Agreement Rules

Contact the media and social influencers

• Türkiye: contacting media and social influencers — data category and legal basis Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: contacting media and social influencers — data category and legal basis Legal Rights & Agreement Rules

Business contact data for members of the media and social media influencers

• Türkiye: contacting media and social influencers — data category and legal basis Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: contacting media and social influencers — data category and legal basis Legal Rights & Agreement Rules

Consent

• Türkiye: contacting media and social influencers — data category and legal basis Legal Rights & Agreement Rules

Attribute reservations to travel agents

• Türkiye: attributing reservations to travel agents — data category and legal basis Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: attributing reservations to travel agents — data category and legal basis Legal Rights & Agreement Rules

Travel agent number and name

• Türkiye: attributing reservations to travel agents — data category and legal basis Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: attributing reservations to travel agents — data category and legal basis Legal Rights & Agreement Rules

Contract

• Türkiye: attributing reservations to travel agents — data category and legal basis Legal Rights & Agreement Rules

Attribute Points to airline loyalty participants

• Türkiye: attributing Points to airline loyalty participants — data category and legal basis Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: attributing Points to airline loyalty participants — data category and legal basis Legal Rights & Agreement Rules

Airline partner number and name

• Türkiye: attributing Points to airline loyalty participants — data category and legal basis Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: attributing Points to airline loyalty participants — data category and legal basis Legal Rights & Agreement Rules

Contract

• Türkiye: attributing Points to airline loyalty participants — data category and legal basis Legal Rights & Agreement Rules

Enable parking at properties

• Türkiye: enabling parking at properties — data category and legal basis Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: enabling parking at properties — data category and legal basis Legal Rights & Agreement Rules

Vehicle information

• Türkiye: enabling parking at properties — data category and legal basis Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: enabling parking at properties — data category and legal basis Legal Rights & Agreement Rules

Legitimate interests

• Türkiye: enabling parking at properties — data category and legal basis Legal Rights & Agreement Rules

Enable safety and security

• Türkiye: enabling safety and security — data category and legal basis Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: enabling safety and security — data category and legal basis Legal Rights & Agreement Rules

Vehicle information

• Türkiye: enabling safety and security — data category and legal basis Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: enabling safety and security — data category and legal basis Legal Rights & Agreement Rules

Legitimate interests

• Türkiye: enabling safety and security — data category and legal basis Legal Rights & Agreement Rules

Protect people on property

• Türkiye: protecting people on property — data category and legal basis Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: protecting people on property — data category and legal basis Legal Rights & Agreement Rules

Images or footage captured by closed circuit television

• Türkiye: protecting people on property — data category and legal basis Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: protecting people on property — data category and legal basis Legal Rights & Agreement Rules

Legitimate interests

• Türkiye: protecting people on property — data category and legal basis Legal Rights & Agreement Rules

Support internal and external promotions

• Türkiye: supporting internal and external promotions — data category and legal basis Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: supporting internal and external promotions — data category and legal basis Legal Rights & Agreement Rules

Promotional images or footage captured by on-property photographers

• Türkiye: supporting internal and external promotions — data category and legal basis Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: supporting internal and external promotions — data category and legal basis Legal Rights & Agreement Rules

Consent

• Türkiye: supporting internal and external promotions — data category and legal basis Legal Rights & Agreement Rules

Support marketing efforts

• Türkiye: supporting marketing efforts — data categories and legal bases Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: supporting marketing efforts — data categories and legal bases Legal Rights & Agreement Rules

Booking engine

• Türkiye: supporting marketing efforts — data categories and legal bases Legal Rights & Agreement Rules

Whether you have a Hilton and American Express Co-Branded Credit Card

• Türkiye: supporting marketing efforts — data categories and legal bases Legal Rights & Agreement Rules

Whether your Hilton and Amazon accounts are linked

• Türkiye: supporting marketing efforts — data categories and legal bases Legal Rights & Agreement Rules

Whether your Hilton and Lyft accounts are linked

• Türkiye: supporting marketing efforts — data categories and legal bases Legal Rights & Agreement Rules

Spending amount

• Türkiye: supporting marketing efforts — data categories and legal bases Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: supporting marketing efforts — data categories and legal bases Legal Rights & Agreement Rules

Legitimate interests

• Türkiye: supporting marketing efforts — data categories and legal bases Legal Rights & Agreement Rules

Consent

• Türkiye: supporting marketing efforts — data categories and legal bases Legal Rights & Agreement Rules

Share data with personalized ad networks

• Türkiye: sharing data with personalized ad networks — data categories and legal bases Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: sharing data with personalized ad networks — data categories and legal bases Legal Rights & Agreement Rules

Internet or other electronic network activity information, including information regarding a customer's interaction with Hilton websites, applications, or advertisements

• Türkiye: sharing data with personalized ad networks — data categories and legal bases Legal Rights & Agreement Rules

IP addresses

• Türkiye: sharing data with personalized ad networks — data categories and legal bases Legal Rights & Agreement Rules

Session IDs

• Türkiye: sharing data with personalized ad networks — data categories and legal bases Legal Rights & Agreement Rules

Device information (including MAC address)

• Türkiye: sharing data with personalized ad networks — data categories and legal bases Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: sharing data with personalized ad networks — data categories and legal bases Legal Rights & Agreement Rules

Legitimate interests

• Türkiye: sharing data with personalized ad networks — data categories and legal bases Legal Rights & Agreement Rules

Consent

• Türkiye: sharing data with personalized ad networks — data categories and legal bases Legal Rights & Agreement Rules

Solve website issues

• Türkiye: solving website issues — data categories and legal basis Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: solving website issues — data categories and legal basis Legal Rights & Agreement Rules

IP addresses

• Türkiye: solving website issues — data categories and legal basis Legal Rights & Agreement Rules

Customer ratings and survey responses

• Türkiye: solving website issues — data categories and legal basis Legal Rights & Agreement Rules

Free form textual feedback

• Türkiye: solving website issues — data categories and legal basis Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: solving website issues — data categories and legal basis Legal Rights & Agreement Rules

Legitimate interests

• Türkiye: solving website issues — data categories and legal basis Legal Rights & Agreement Rules

Show targeted advertisements on media

• Türkiye: showing targeted advertisements on media — data categories and legal bases Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: showing targeted advertisements on media — data categories and legal bases Legal Rights & Agreement Rules

Booking engine

• Türkiye: showing targeted advertisements on media — data categories and legal bases Legal Rights & Agreement Rules

Whether you have a Hilton and American Express Co-Branded Credit Card

• Türkiye: showing targeted advertisements on media — data categories and legal bases Legal Rights & Agreement Rules

Whether your Hilton and Amazon accounts are linked

• Türkiye: showing targeted advertisements on media — data categories and legal bases Legal Rights & Agreement Rules

Whether your Hilton and Lyft accounts are linked

• Türkiye: showing targeted advertisements on media — data categories and legal bases Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: showing targeted advertisements on media — data categories and legal bases Legal Rights & Agreement Rules

Legitimate interests

• Türkiye: showing targeted advertisements on media — data categories and legal bases Legal Rights & Agreement Rules

Consent

• Türkiye: showing targeted advertisements on media — data categories and legal bases Legal Rights & Agreement Rules

Evaluate streaming services use

• Türkiye: evaluating streaming service use — data category and legal basis Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: evaluating streaming service use — data category and legal basis Legal Rights & Agreement Rules

Streaming service usages (including service used, hours of use, launch method, and logout method)

• Türkiye: evaluating streaming service use — data category and legal basis Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: evaluating streaming service use — data category and legal basis Legal Rights & Agreement Rules

Legitimate interests

• Türkiye: evaluating streaming service use — data category and legal basis Legal Rights & Agreement Rules

Provide co-branded card benefits

• Türkiye: co-branded card benefits — data category and legal basis Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: co-branded card benefits — data category and legal basis Legal Rights & Agreement Rules

Whether you have a Hilton and American Express Co-Branded Credit Card

• Türkiye: co-branded card benefits — data category and legal basis Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: co-branded card benefits — data category and legal basis Legal Rights & Agreement Rules

Contract

• Türkiye: co-branded card benefits — data category and legal basis Legal Rights & Agreement Rules

Facilitate Amazon's Shop with Points

• Türkiye: Amazon's Shop with Points — data category and legal basis Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: Amazon's Shop with Points — data category and legal basis Legal Rights & Agreement Rules

Whether your Hilton and Amazon accounts are linked

• Türkiye: Amazon's Shop with Points — data category and legal basis Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: Amazon's Shop with Points — data category and legal basis Legal Rights & Agreement Rules

Contract

• Türkiye: Amazon's Shop with Points — data category and legal basis Legal Rights & Agreement Rules

Enable access to hotel room and facilities

• Türkiye: access to hotel room and facilities — data category and legal basis Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: access to hotel room and facilities — data category and legal basis Legal Rights & Agreement Rules

Geolocation information

• Türkiye: access to hotel room and facilities — data category and legal basis Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: access to hotel room and facilities — data category and legal basis Legal Rights & Agreement Rules

Legitimate interests

• Türkiye: access to hotel room and facilities — data category and legal basis Legal Rights & Agreement Rules

Fulfill Digital Key sharing

• Türkiye: Digital Key sharing — data category and legal basis Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: Digital Key sharing — data category and legal basis Legal Rights & Agreement Rules

Geolocation information

• Türkiye: Digital Key sharing — data category and legal basis Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: Digital Key sharing — data category and legal basis Legal Rights & Agreement Rules

Consent

• Türkiye: Digital Key sharing — data category and legal basis Legal Rights & Agreement Rules

Respond to service concerns

• Türkiye: responding to service concerns — the data category collected Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: responding to service concerns — the data category collected Legal Rights & Agreement Rules

Social media information; publicly available online information (including through social media platforms)

• Türkiye: responding to service concerns — the data category collected Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: legal bases for responding to service concerns are legitimate interests and consent Legal Rights & Agreement Rules

Legitimate interests

• Türkiye: legal bases for responding to service concerns are legitimate interests and consent Legal Rights & Agreement Rules

Consent

• Türkiye: legal bases for responding to service concerns are legitimate interests and consent Legal Rights & Agreement Rules

Provide personalized experience

• Türkiye: providing a personalized experience — data category and legal basis Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: providing a personalized experience — data category and legal basis Legal Rights & Agreement Rules

Social media information; publicly available online information (including through social media platforms)

• Türkiye: providing a personalized experience — data category and legal basis Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: providing a personalized experience — data category and legal basis Legal Rights & Agreement Rules

Legitimate interests

• Türkiye: providing a personalized experience — data category and legal basis Legal Rights & Agreement Rules

Link with customer information on file

• Türkiye: linking with customer information on file — data category and legal basis Linking & Identification

We collected the following categories of personal data for this purpose:

• Türkiye: linking with customer information on file — data category and legal basis Linking & Identification

Demographics data

• Türkiye: linking with customer information on file — data category and legal basis Linking & Identification

We rely on the following legal bases to process personal data:

• Türkiye: linking with customer information on file — data category and legal basis Linking & Identification

Consent

• Türkiye: linking with customer information on file — data category and legal basis Linking & Identification

Send requested communications

• Türkiye: sending requested communications — data category and legal basis Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: sending requested communications — data category and legal basis Legal Rights & Agreement Rules

MyWay preferences

• Türkiye: sending requested communications — data category and legal basis Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: sending requested communications — data category and legal basis Legal Rights & Agreement Rules

Consent

• Türkiye: sending requested communications — data category and legal basis Legal Rights & Agreement Rules

Respond to safety and security concerns

• Türkiye: responding to safety and security concerns — data categories and legal basis Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: responding to safety and security concerns — data categories and legal basis Legal Rights & Agreement Rules

Description of an incident that occurs at a Hilton property or involves a Hilton employee, including incidents related to safety and security, and violation of law, applicable policy, or contractual obligation

• Türkiye: responding to safety and security concerns — data categories and legal basis Legal Rights & Agreement Rules

Description of a complaint that you make to us, including your free form textual feedback if you are a Hilton Honors member

• Türkiye: responding to safety and security concerns — data categories and legal basis Legal Rights & Agreement Rules

Spa and wellness service or treatment details (such as date, time, and type of service)

• Türkiye: responding to safety and security concerns — data categories and legal basis Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: responding to safety and security concerns — data categories and legal basis Legal Rights & Agreement Rules

Legitimate interests

• Türkiye: responding to safety and security concerns — data categories and legal basis Legal Rights & Agreement Rules

Comply with legal or contractual obligations

• Türkiye: complying with legal or contractual obligations — data categories and legal basis Legal Rights & Agreement Rules

We collected the following categories of personal data for this purpose:

• Türkiye: complying with legal or contractual obligations — data categories and legal basis Legal Rights & Agreement Rules

Description of an incident that occurs at a Hilton property or involves a Hilton employee, including incidents related to safety and security, and violation of law, applicable policy, or contractual obligation

• Türkiye: complying with legal or contractual obligations — data categories and legal basis Legal Rights & Agreement Rules

Description of a complaint that you make to us, including your free form textual feedback if you are a Hilton Honors member

• Türkiye: complying with legal or contractual obligations — data categories and legal basis Legal Rights & Agreement Rules

Spa and wellness service or treatment details (such as date, time, and type of service)

• Türkiye: complying with legal or contractual obligations — data categories and legal basis Legal Rights & Agreement Rules

We rely on the following legal bases to process personal data:

• Türkiye: complying with legal or contractual obligations — data categories and legal basis Legal Rights & Agreement Rules

Legal obligations

• Türkiye: complying with legal or contractual obligations — data categories and legal basis Legal Rights & Agreement Rules

Your rights. You have the rights under Article 11 of the Data Protection Law and may exercise your rights by contacting us at: DataProtectionOffice@hilton.com or Data Protection Office, Hilton, 7930 Jones Branch Drive, McLean, VA 22102, USA.

• Türkiye: rights under Article 11, and the thirty-day response with a possible fee Legal Rights & Agreement Rules

The requests found in your application will be resolved as soon as possible according to the nature of your request and within thirty days at the latest free of charge. However, if your request incurs additional cost to our company, then you may be charged over the tariff fee determined by the Turkish Personal Data Protection Board.

• Türkiye: rights under Article 11, and the thirty-day response with a possible fee Legal Rights & Agreement Rules

Amendments. The following sections of the Global Privacy Statement do not apply to individuals in Türkiye:

• Türkiye: two sentences of the main Statement do not apply in Türkiye Legal Rights & Agreement Rules

The following sentence at the second paragraph: By using any of our products or services and/or by agreeing to this Statement, e.g., in the context of registering for any of our products or services, you understand and acknowledge that we will collect and use personal information as described in this Statement.

• Türkiye: two sentences of the main Statement do not apply in Türkiye Legal Rights & Agreement Rules

The following sentence in the International Personal Data Transfers section: To provide this service, you acknowledge that we may share your personal information among members of the Hilton Portfolio of Brands, our service providers, and other third parties, which may be located in countries outside of your own.

• Türkiye: two sentences of the main Statement do not apply in Türkiye Legal Rights & Agreement Rules

Language. This Statement is available in English and Turkish. If there is any inconsistency or different interpretation between the English and Turkish versions, the Turkish text shall prevail.

• Türkiye: the Turkish version prevails over the English version Legal Rights & Agreement Rules

International Data Transfers. Hilton is required to transfer your personal data to its affiliates outside of Türkiye, which includes Hilton Domestic Operating Company Inc., all resident in the United States, as well as their in-country suppliers, in order to complete reservations, process Hilton Honors memberships and conduct promotion activities through its website, whose servers are located abroad. Without your consent, Hilton is unable to provide you with its services through this website. Therefore, we ask for your consent when you access this website for the cross-border transfer of your data.

• Türkiye: consent for cross-border transfers, described as a temporary practice Legal Rights & Agreement Rules

This consent practice is only temporary, and Hilton is working on effecting an undertaking letter, which is one of the alternative legal mechanisms for cross-border data transfers. Accordingly, the consent practice will be terminated once the undertaking letter is prepared and approved by the Personal Data Protection Authority.

• Türkiye: consent for cross-border transfers, described as a temporary practice Legal Rights & Agreement Rules

Back to Top

Appendix A-6: China Residents

• China appendix: who it covers, and that it prevails over the main body on conflict Legal Rights & Agreement Rules

1. Introduction

• China appendix: who it covers, and that it prevails over the main body on conflict Legal Rights & Agreement Rules

For individuals who reside in the People's Republic of China (for the purposes of this Privacy Statement, excluding Hong Kong Special Administrative Region, Macau Special Administrative Region and Taiwan) ("China") or citizens of the People's Republic of China, we understand that privacy is important to you. Therefore, in this Appendix, we provide you with an introduction to how Hilton collects, uses, discloses, and otherwise processes your personal information (including sensitive personal information, where applicable) that we receive or collect from you. Please read this Statement carefully before using any of Hilton's services or products.

• China appendix: who it covers, and that it prevails over the main body on conflict Legal Rights & Agreement Rules

This Appendix does not replace the main body of this Statement, but supplements the main body of this Statement, and should be read together with the main body and Appendix A, as applicable. In the event of any conflict or inconsistency between this Appendix and the main body of this statement, this Appendix shall prevail.

• China appendix: who it covers, and that it prevails over the main body on conflict Legal Rights & Agreement Rules

“Personal Information” shall have the same meaning as defined in the Personal Information Protection Law of the People's Republic of China (as revised from time to time). Such information can be recorded electronically or in other ways and can identify the identity or reflect the activity of a specific natural person alone or in combination with other information, including sensitive personal information. "Personal Information" or "Information" used in the main body of this Statement and in this Appendix also includes sensitive personal information (where applicable). “Sensitive personal information” shall have the same meaning as defined in the Personal Information Protection Law of the People’ Republic of China (as revised from time to time). The sensitive personal information involved in this Statement may include passport or ID card information, payment card information, spending amount, accommodation information (such as arrival and departure time), interaction with Hilton websites, and precise positioning information. We only process your sensitive personal information where such processing is strictly necessary for the relevant purposes identified in the Personal Information We Collect section in the main body of this Statement. Our processing of your sensitive personal information will adhere to the safeguards mandated by applicable laws and regulations. However, depending on the specific type of sensitive personal information involved, such processing may result in various impacts, including potential harm to your reputation, property, or personal safety in the event of a data breach. You agree that the sensitive personal information will be processed in accordance with the purposes and methods set forth in this Statement.

• China: the meaning of personal information and sensitive personal information, and the strict-necessity limit Legal Rights & Agreement Rules

2. Collection and Use of Personal Information

• China: the main body's collection section is incorporated, plus additional categories shared with third parties Data Access & Collection

Regarding the following issues, please refer to the Personal Information We Collect section in the main body of this Statement.

• China: the main body's collection section is incorporated, plus additional categories shared with third parties Data Access & Collection

The types of personal information that we collect from you (including sensitive personal information)

• China: the main body's collection section is incorporated, plus additional categories shared with third parties Data Access & Collection

How we collect and use your personal information, the purposes for which we use it, and how we share or disclose your personal information.

• China: the main body's collection section is incorporated, plus additional categories shared with third parties Data Access & Collection

In addition to the information provided in the Personal Information We Collect section of this Statement, we may collect, process, or share the following personal information with third parties for the purposes set out below:

• China: the main body's collection section is incorporated, plus additional categories shared with third parties Data Access & Collection

Collapse All

Gender

• China: gender — source, purpose and sharing Data Access & Collection

We have obtained this personal information from the following sources

• China: gender — source, purpose and sharing Data Access & Collection

Directly from consumers themselves

• China: gender — source, purpose and sharing Data Access & Collection

We collected this personal information for the following business or commercial purposes

• China: gender — source, purpose and sharing Data Access & Collection

Provide customer service

• China: gender — source, purpose and sharing Data Access & Collection

We have shared this personal information with the following categories of third parties

• China: gender — source, purpose and sharing Data Access & Collection

Government agencies pursuant to legal requirements in some countries

• China: gender — source, purpose and sharing Data Access & Collection

Telephone

• China: telephone — sources of collection Data Access & Collection

We have obtained this personal information from the following sources

• China: telephone — sources of collection Data Access & Collection

Directly from consumers themselves

• China: telephone — sources of collection Data Access & Collection

From third parties such as travel booking platforms and credit card providers

• China: telephone — sources of collection Data Access & Collection

From demographics companies

• China: telephone — sources of collection Data Access & Collection

We collected this personal information for the following business or commercial purposes

• China: telephone — purposes and third-party sharing Data Access & Collection

Executing marketing communications

• China: telephone — purposes and third-party sharing Data Access & Collection

Perform analytics to provide guests with personalized offers and content

• China: telephone — purposes and third-party sharing Data Access & Collection

We have shared this personal information with the following categories of third parties

• China: telephone — purposes and third-party sharing Data Access & Collection

Service providers who perform tasks on behalf of Hilton, which may include those who send marketing communications on our behalf

• China: telephone — purposes and third-party sharing Data Access & Collection

Hilton's Third-Party Partner

• China: telephone — purposes and third-party sharing Data Access & Collection

Employers pursuant to corporate agreements, employee consent, and as permitted by law

• China: telephone — purposes and third-party sharing Data Access & Collection

The third-party travel booking platform or travel agent through which a guest made a reservation

• China: telephone — purposes and third-party sharing Data Access & Collection

Third-party advertisers, for optimization and personalization on their platforms

• China: telephone — purposes and third-party sharing Data Access & Collection

Hilton's Third-Party Operator

• China: telephone — purposes and third-party sharing Data Access & Collection

Hilton Principal

• China: telephone — purposes and third-party sharing Data Access & Collection

Arrival Time

• China: arrival time — source and purposes Data Access & Collection

We have obtained this personal information from the following sources

• China: arrival time — source and purposes Data Access & Collection

Directly from consumers themselves

• China: arrival time — source and purposes Data Access & Collection

We collected this personal information for the following business or commercial purposes

• China: arrival time — source and purposes Data Access & Collection

Better serve our guests

• China: arrival time — source and purposes Data Access & Collection

Fulfill reservations

• China: arrival time — source and purposes Data Access & Collection

Personalize guest experience

• China: arrival time — source and purposes Data Access & Collection

Provide customer service and support

• China: arrival time — source and purposes Data Access & Collection

We have shared this personal information with the following categories of third parties

• China: arrival time — sharing with service providers Sharing & Disclosure

Service providers who perform tasks on behalf of Hilton

• China: arrival time — sharing with service providers Sharing & Disclosure

Departure Date

• China: departure date — source, purposes and sharing Data Access & Collection

We have obtained this personal information from the following sources

• China: departure date — source, purposes and sharing Data Access & Collection

Directly from consumers themselves

• China: departure date — source, purposes and sharing Data Access & Collection

We collected this personal information for the following business or commercial purposes

• China: departure date — source, purposes and sharing Data Access & Collection

Better serve our guests

• China: departure date — source, purposes and sharing Data Access & Collection

Fulfill reservations

• China: departure date — source, purposes and sharing Data Access & Collection

Personalize guest experience

• China: departure date — source, purposes and sharing Data Access & Collection

We have shared this personal information with the following categories of third parties

• China: departure date — source, purposes and sharing Data Access & Collection

Service providers who perform tasks on behalf of Hilton

• China: departure date — source, purposes and sharing Data Access & Collection

Spending Amount

• China: spending amount — source, purposes and sharing Data Access & Collection

We have obtained this personal information from the following sources

• China: spending amount — source, purposes and sharing Data Access & Collection

Directly from consumers themselves

• China: spending amount — source, purposes and sharing Data Access & Collection

We collected this personal information for the following business or commercial purposes

• China: spending amount — source, purposes and sharing Data Access & Collection

Better serve our guests

• China: spending amount — source, purposes and sharing Data Access & Collection

Perform analytics to improve business operations

• China: spending amount — source, purposes and sharing Data Access & Collection

Support marketing efforts

• China: spending amount — source, purposes and sharing Data Access & Collection

Fulfill obligations for business reporting, auditing, tax, and income reconciliation

• China: spending amount — source, purposes and sharing Data Access & Collection

We have shared this personal information with the following categories of third parties

• China: spending amount — source, purposes and sharing Data Access & Collection

Service providers who perform tasks on behalf of Hilton

• China: spending amount — source, purposes and sharing Data Access & Collection

WeChat Union ID

• China: WeChat Union ID — source, purpose and sharing Data Access & Collection

We have obtained this personal information from the following sources

• China: WeChat Union ID — source, purpose and sharing Data Access & Collection

Directly from consumers themselves

• China: WeChat Union ID — source, purpose and sharing Data Access & Collection

We collected this personal information for the following business or commercial purposes

• China: WeChat Union ID — source, purpose and sharing Data Access & Collection

Perform analytics to provide guests with personalized offers and content

• China: WeChat Union ID — source, purpose and sharing Data Access & Collection

We have shared this personal information with the following categories of third parties

• China: WeChat Union ID — source, purpose and sharing Data Access & Collection

Service providers who perform tasks on behalf of Hilton

• China: WeChat Union ID — source, purpose and sharing Data Access & Collection

Hilton’s Third-Party Partners

• China: WeChat Union ID — source, purpose and sharing Data Access & Collection

WeChat Open ID

• China: WeChat Open ID — source, purpose and sharing Data Access & Collection

We have obtained this personal information from the following sources

• China: WeChat Open ID — source, purpose and sharing Data Access & Collection

Directly from consumers themselves

• China: WeChat Open ID — source, purpose and sharing Data Access & Collection

We collected this personal information for the following business or commercial purposes

• China: WeChat Open ID — source, purpose and sharing Data Access & Collection

Perform analytics to provide guests with personalized offers and content

• China: WeChat Open ID — source, purpose and sharing Data Access & Collection

We have shared this personal information with the following categories of third parties

• China: WeChat Open ID — source, purpose and sharing Data Access & Collection

Service providers who perform tasks on behalf of Hilton

• China: WeChat Open ID — source, purpose and sharing Data Access & Collection

Binding relationship between Hilton Honors accounts and partners' accounts, including Hilton Honors account number and partners’ account number

• China: linking Hilton Honors and partner accounts for targeted campaigns and promotions Linking & Identification

We have obtained this personal information from the following sources

• China: linking Hilton Honors and partner accounts for targeted campaigns and promotions Linking & Identification

From both Hilton and partners’ platforms

• China: linking Hilton Honors and partner accounts for targeted campaigns and promotions Linking & Identification

We collected this personal information for the following business or commercial purposes

• China: linking Hilton Honors and partner accounts for targeted campaigns and promotions Linking & Identification

Linking the accounts to participate in targeted campaigns and promotions

• China: linking Hilton Honors and partner accounts for targeted campaigns and promotions Linking & Identification

We have shared this personal information with the following categories of third parties

• China: linking Hilton Honors and partner accounts for targeted campaigns and promotions Linking & Identification

Hilton’s Third-Party Partners

• China: linking Hilton Honors and partner accounts for targeted campaigns and promotions Linking & Identification

Hilton will not knowingly collect or disclose personal information from minors under the age of 14. When we collect personal information from an individual under the age of 14, we need to obtain consent from their parent or guardian, and we will process such information in accordance with the safeguards set out in applicable laws and regulations.

• China: no knowing collection or disclosure from children under 14 Legal Rights & Agreement Rules

We will use your personal information with your consent or as otherwise required or permitted by applicable law (e.g., where the processing is necessary for concluding or performing a contract with you, where the processing is necessary to perform legal obligations, etc.). If we want to use your personal information for other purposes, we will obtain your further consent unless the further use without your new consent is required or permitted by applicable law. Where we rely on your consent to process your personal information and you refuse to give consent, we might not be able to provide all of our services.

• China: consent for processing, further consent for other purposes, and the consequence of refusal Legal Rights & Agreement Rules

3. Entrusted Processing, Sharing, Transfer, and Disclosure of Personal Information

• China: who personal information may be shared with, with express consent where required Sharing & Disclosure

With your express consent, where required, we may share your personal information for the purposes described in this Statement with members of the Hilton worldwide brand portfolio, our service providers, and other third parties as follows:

• China: who personal information may be shared with, with express consent where required Sharing & Disclosure

Hilton Worldwide Holdings Inc. and its subsidiaries, and members of the Hilton brand portfolio, including franchised and managed hotels,

• China: who personal information may be shared with, with express consent where required Sharing & Disclosure

Service providers providing services on Hilton’s behalf,

• China: who personal information may be shared with, with express consent where required Sharing & Disclosure

Payment card providers and processors

• China: who personal information may be shared with, with express consent where required Sharing & Disclosure

Employers specified in the company agreements,

• China: who personal information may be shared with, with express consent where required Sharing & Disclosure

Advertising networks and analytics providers for Hilton’s website and mobile applications.

• China: who personal information may be shared with, with express consent where required Sharing & Disclosure

The processing of your personal information by members of the Hilton Portfolio of Brands, including purposes and means of processing and categories of personal information processed, is governed by this Statement. Please refer to the Data Protection Office at dataprotectionoffice@hilton.com for the contact information of other entities that may receive your personal data.

• China: Portfolio brands' own processing is governed by the Statement, and third-party controllers apply their own Sharing & Disclosure

Some of the third parties listed above may also process your personal information for their own purposes as data controllers, in which case their own privacy policies will apply, including as to the purposes and means of processing and categories of personal information processed.

• China: Portfolio brands' own processing is governed by the Statement, and third-party controllers apply their own Sharing & Disclosure

3.1 Entrusted Processing of Your Personal Information

• China: section 3.1 on entrusted processing of personal information Use & Processing

To achieve the purposes described in this Statement, we may entrust third-party service providers to assist us in providing relevant operational and service support. During such entrusted processing, your personal information may be processed to enable the functions of our products and/or services, including but not limited to the following:

• China: entrusted processing by third-party service providers Use & Processing

SMS and MMS service providers

• China: entrusted processing by third-party service providers Use & Processing

Marketing, research, advertisement, and data analytics service providers

• China: entrusted processing by third-party service providers Use & Processing

Website and system server hosting service providers

• China: entrusted processing by third-party service providers Use & Processing

Software and system technical service providers

• China: entrusted processing by third-party service providers Use & Processing

Invoice service providers

• China: entrusted processing by third-party service providers Use & Processing

3.2 Sharing Your Personal Information with Third-Parties

• China: sharing with third parties for media campaigns, with their own privacy policies Sharing & Disclosure

To optimize media campaigns, we may share your personal information with partners and other third parties. Below we provide information on the third parties with whom we currently cooperate, including their names, the types of personal information collected, and the purposes of collection and use. For details regarding the collection and processing of your personal information by the following third parties, please refer to the privacy policies of such third parties.

• China: sharing with third parties for media campaigns, with their own privacy policies Sharing & Disclosure

Collapse All

Shenzhen Tencent Computer Systems Company Limited

• China: Shenzhen Tencent — media campaign sharing of hashed phone numbers and WeChat Union ID Sharing & Disclosure

Purpose of personal information processing

• China: Shenzhen Tencent — media campaign sharing of hashed phone numbers and WeChat Union ID Sharing & Disclosure

Optimize media campaigns

• China: Shenzhen Tencent — media campaign sharing of hashed phone numbers and WeChat Union ID Sharing & Disclosure

Method of personal information processing

• China: Shenzhen Tencent — media campaign sharing of hashed phone numbers and WeChat Union ID Sharing & Disclosure

Share personal information with third-party advertising platforms through backend API integrations (such as hashed/encrypted mobile phone numbers, WeChat Union ID) to recommend or display content, products, or services that may be relevant to users based on their personal information and preferences.

• China: Shenzhen Tencent — media campaign sharing of hashed phone numbers and WeChat Union ID Sharing & Disclosure

Types of personal information shared with third party

• China: Shenzhen Tencent — media campaign sharing of hashed phone numbers and WeChat Union ID Sharing & Disclosure

Hashed mobile phone number

• China: Shenzhen Tencent — media campaign sharing of hashed phone numbers and WeChat Union ID Sharing & Disclosure

WeChat Union ID

• China: Shenzhen Tencent — media campaign sharing of hashed phone numbers and WeChat Union ID Sharing & Disclosure

Contact of third party

• China: Shenzhen Tencent — media campaign sharing of hashed phone numbers and WeChat Union ID Sharing & Disclosure

ads_service@tencent.com

• China: Shenzhen Tencent — media campaign sharing of hashed phone numbers and WeChat Union ID Sharing & Disclosure

We may also collaborate with certain third-party partners to offer co-branded membership programs. Where you choose to participate in such programs, we and the relevant partner may independently process your personal information. We may share your Hilton Honors number with the relevant partner to link your membership accounts and to provide, operate, and administer the applicable co-branded membership program and related benefits.

• China: co-branded membership programmes and the sharing of the Honors number Sharing & Disclosure

3.3 Third-Party SDKs:

• China: third-party SDKs embedded in the applications, with their own privacy policies Data Access & Collection

To provide and optimize our services, third-party SDKs are embedded in our applications (including WeChat Mini Programs). The following lists the names of the third-party SDKs we currently embed, the types of personal information collected, and the purpose of collection and use. If you have questions about the collection of your personal information by the third parties through the SDKs, please refer to the privacy policies of such third parties.

• China: third-party SDKs embedded in the applications, with their own privacy policies Data Access & Collection

Collapse All

Alipay "App Payment" SDK

• Third-party SDK: Alipay App Payment Data Access & Collection

Provider of the SDK

• Third-party SDK: Alipay App Payment Data Access & Collection

Alipay (China) Network Technology Co., Ltd.

• Third-party SDK: Alipay App Payment Data Access & Collection

Purposes of the SDK

• Third-party SDK: Alipay App Payment Data Access & Collection

Payment

• Third-party SDK: Alipay App Payment Data Access & Collection

Application where the SDK is embedded

• Third-party SDK: Alipay App Payment Data Access & Collection

iOS, Android

• Third-party SDK: Alipay App Payment Data Access & Collection

Types of personal information collected by the SDK

• Third-party SDK: Alipay App Payment Data Access & Collection

Common device information (IMEI/IMSI, SIM card serial number/MAC address, android_id (only for Android devices), network information

• Third-party SDK: Alipay App Payment Data Access & Collection

Link to the privacy policy of the SDK

• Third-party SDK: Alipay App Payment Data Access & Collection

https://opendocs.alipay.com/open/01g6qm

• Third-party SDK: Alipay App Payment Data Access & Collection

WeChat Pay

• Third-party SDK: WeChat Pay Data Access & Collection

Provider of the SDK

• Third-party SDK: WeChat Pay Data Access & Collection

Tencent

• Third-party SDK: WeChat Pay Data Access & Collection

Purposes of the SDK

• Third-party SDK: WeChat Pay Data Access & Collection

Payment

• Third-party SDK: WeChat Pay Data Access & Collection

Application where the SDK is embedded

• Third-party SDK: WeChat Pay Data Access & Collection

iOS, Android, WeChat Mini-Program

• Third-party SDK: WeChat Pay Data Access & Collection

Types of personal information collected by the SDK

• Third-party SDK: WeChat Pay Data Access & Collection

WeChat User OpenId

• Third-party SDK: WeChat Pay Data Access & Collection

Link to the privacy policy of the SDK

• Third-party SDK: WeChat Pay Data Access & Collection

https://weixin.qq.com/cgi-bin/readtemplate?t=weixin_business_pay

• Third-party SDK: WeChat Pay Data Access & Collection

Adobe Analytics SDK for WeChat Mini-Program

• Third-party SDK: Adobe Analytics for the WeChat Mini-Program Data Access & Collection

Provider of the SDK

• Third-party SDK: Adobe Analytics for the WeChat Mini-Program Data Access & Collection

Adobe

• Third-party SDK: Adobe Analytics for the WeChat Mini-Program Data Access & Collection

Purposes of the SDK

• Third-party SDK: Adobe Analytics for the WeChat Mini-Program Data Access & Collection

User clicks and usage records

• Third-party SDK: Adobe Analytics for the WeChat Mini-Program Data Access & Collection

Application where the SDK is embedded

• Third-party SDK: Adobe Analytics for the WeChat Mini-Program Data Access & Collection

WeChat Mini-Program

• Third-party SDK: Adobe Analytics for the WeChat Mini-Program Data Access & Collection

Types of personal information collected by the SDK

• Third-party SDK: Adobe Analytics for the WeChat Mini-Program Data Access & Collection

Location information, device information, version of operating system

• Third-party SDK: Adobe Analytics for the WeChat Mini-Program Data Access & Collection

Link to the privacy policy of the SDK

• Third-party SDK: Adobe Analytics for the WeChat Mini-Program Data Access & Collection

https://github.com/NJRojas/aep-sdks-documentation/tree/master/resources/adobe-experience-platform-mini-programs-sdk

• Third-party SDK: Adobe Analytics for the WeChat Mini-Program Data Access & Collection

Adobe Analytics SDK

• Third-party SDK: Adobe Analytics Data Access & Collection

Provider of the SDK

• Third-party SDK: Adobe Analytics Data Access & Collection

Adobe

• Third-party SDK: Adobe Analytics Data Access & Collection

Purposes of the SDK

• Third-party SDK: Adobe Analytics Data Access & Collection

User clicks and usage records

• Third-party SDK: Adobe Analytics Data Access & Collection

Application where the SDK is embedded

• Third-party SDK: Adobe Analytics Data Access & Collection

iOS, Android

• Third-party SDK: Adobe Analytics Data Access & Collection

Types of personal information collected by the SDK

• Third-party SDK: Adobe Analytics Data Access & Collection

Location information, device information, version of operating system

• Third-party SDK: Adobe Analytics Data Access & Collection

Link to the privacy policy of the SDK

• Third-party SDK: Adobe Analytics Data Access & Collection

https://www.adobe.com/cn/privacy/policy.html

• Third-party SDK: Adobe Analytics Data Access & Collection

Baidu Maps SDK

• Third-party SDK: Baidu Maps Data Access & Collection

Provider of the SDK

• Third-party SDK: Baidu Maps Data Access & Collection

Baidu

• Third-party SDK: Baidu Maps Data Access & Collection

Purposes of the SDK

• Third-party SDK: Baidu Maps Data Access & Collection

Displaying hotels nearby on the map

• Third-party SDK: Baidu Maps Data Access & Collection

Application where the SDK is embedded

• Third-party SDK: Baidu Maps Data Access & Collection

Android

• Third-party SDK: Baidu Maps Data Access & Collection
• Third-party SDK: Baidu Maps — the data types collected Data Access & Collection

Types of personal information collected by the SDK

• Third-party SDK: Baidu Maps — the data types collected Data Access & Collection

Geolocation and Device Environment Information, including latitude and longitude coordinates, Android ID, GNSS information, Wi-Fi gateway address, BSSID, SSID, Wi-Fi signal strength, Wi-Fi status, Wi-Fi configuration data, available Wi-Fi network information, cellular base station data, mobile carrier information, device signal strength data, IP address, Bluetooth information, and sensor data (such as accelerometer, gyroscope, orientation, pressure, rotation vector, ambient light, and magnetometer data).

• Third-party SDK: Baidu Maps — the data types collected Data Access & Collection

Link to the privacy policy of the SDK

• Third-party SDK: Baidu Maps — the data types collected Data Access & Collection

https://lbsyun.baidu.com/index.php?title=open/law

• Third-party SDK: Baidu Maps — the data types collected Data Access & Collection

Google Maps SDK

• Third-party SDK: Google Maps Data Access & Collection

Provider of the SDK

• Third-party SDK: Google Maps Data Access & Collection

Google

• Third-party SDK: Google Maps Data Access & Collection

Purposes of the SDK

• Third-party SDK: Google Maps Data Access & Collection

Displaying hotels nearby on the map

• Third-party SDK: Google Maps Data Access & Collection

Application where the SDK is embedded

• Third-party SDK: Google Maps Data Access & Collection

Android

• Third-party SDK: Google Maps Data Access & Collection

Types of personal information collected by the SDK

• Third-party SDK: Google Maps Data Access & Collection

Location information (domestic users)

• Third-party SDK: Google Maps Data Access & Collection

Link to the privacy policy of the SDK

• Third-party SDK: Google Maps Data Access & Collection

https://developers.google.cn/maps/faq?hl=zh-cn#tos_logging

• Third-party SDK: Google Maps Data Access & Collection

Workspace one

• Third-party SDK: Workspace one Data Access & Collection

Provider of the SDK

• Third-party SDK: Workspace one Data Access & Collection

VMWare

• Third-party SDK: Workspace one Data Access & Collection

Purposes of the SDK

• Third-party SDK: Workspace one Data Access & Collection

Recording app crashes and error messages

• Third-party SDK: Workspace one Data Access & Collection

Application where the SDK is embedded

• Third-party SDK: Workspace one Data Access & Collection

iOS, Android

• Third-party SDK: Workspace one Data Access & Collection

Types of personal information collected by the SDK

• Third-party SDK: Workspace one Data Access & Collection

Device information, version of operating system

• Third-party SDK: Workspace one Data Access & Collection

Link to the privacy policy of the SDK

• Third-party SDK: Workspace one Data Access & Collection

https://www.broadcom.com/company/legal/privacy

• Third-party SDK: Workspace one Data Access & Collection

Xiaomi Push SDK

• Third-party SDK: Xiaomi Push Data Access & Collection

Provider of the SDK

• Third-party SDK: Xiaomi Push Data Access & Collection

Xiaomi Singapore Pte. Ltd.

• Third-party SDK: Xiaomi Push Data Access & Collection

Purposes of the SDK

• Third-party SDK: Xiaomi Push Data Access & Collection

Push notification services

• Third-party SDK: Xiaomi Push Data Access & Collection

Application where the SDK is embedded

• Third-party SDK: Xiaomi Push Data Access & Collection

Android

• Third-party SDK: Xiaomi Push Data Access & Collection

Types of personal information collected by the SDK

• Third-party SDK: Xiaomi Push Data Access & Collection

OAID (Open Anonymous Device Identifier) and encrypted Android ID

• Third-party SDK: Xiaomi Push Data Access & Collection

Link to the privacy policy of the SDK

• Third-party SDK: Xiaomi Push Data Access & Collection

https://dev.mi.com/distribute/doc/details?pId=1534

• Third-party SDK: Xiaomi Push Data Access & Collection

OPPO Push SDK

• Third-party SDK: OPPO Push Data Access & Collection

Provider of the SDK

• Third-party SDK: OPPO Push Data Access & Collection

Guangdong Heytap Technology Co., Ltd.

• Third-party SDK: OPPO Push Data Access & Collection

Purposes of the SDK

• Third-party SDK: OPPO Push Data Access & Collection

Push notification services

• Third-party SDK: OPPO Push Data Access & Collection

Application where the SDK is embedded

• Third-party SDK: OPPO Push Data Access & Collection

Android

• Third-party SDK: OPPO Push Data Access & Collection

Types of personal information collected by the SDK

• Third-party SDK: OPPO Push Data Access & Collection

Device-related information (e.g., IMEI, OAID, serial number, IMSI, user ID, Android ID, Google Advertising ID, device region settings, device model, battery level, operating system version, and language settings); application information (e.g., APP package name, version, and running status); Push SDK version; network-related information (e.g., IP address or domain name connection results, and network type); message delivery results; notification status information (e.g., notification permissions and user interaction data); and lock screen status information (e.g., lock status and lock-screen notification settings).

• Third-party SDK: OPPO Push Data Access & Collection

Link to the privacy policy of the SDK

• Third-party SDK: OPPO Push Data Access & Collection

https://open.oppomobile.com/new/developmentDoc/info?id=10288

• Third-party SDK: OPPO Push Data Access & Collection

Geetest Captcha SDK

• Third-party SDK: Geetest Captcha — anti-robot data collected Data Access & Collection

Provider of the SDK

• Third-party SDK: Geetest Captcha — anti-robot data collected Data Access & Collection

Geetest

• Third-party SDK: Geetest Captcha — anti-robot data collected Data Access & Collection

Purposes of the SDK

• Third-party SDK: Geetest Captcha — anti-robot data collected Data Access & Collection

Anti-robot attack

• Third-party SDK: Geetest Captcha — anti-robot data collected Data Access & Collection

Application where the SDK is embedded

• Third-party SDK: Geetest Captcha — anti-robot data collected Data Access & Collection

iOS, Android, WeChat Mini Program

• Third-party SDK: Geetest Captcha — anti-robot data collected Data Access & Collection

Types of personal information collected by the SDK

• Third-party SDK: Geetest Captcha — anti-robot data collected Data Access & Collection

Device Information: Information such as device operating system information, device manufacturer information, device model, and device brand. After de-identification, such information is used to establish abnormal traffic detection models and support traffic anti-fraud technologies.

• Third-party SDK: Geetest Captcha — anti-robot data collected Data Access & Collection

Device Network Information: Information such as the device's network connection status and network type. After de-identification, such information is used to establish abnormal activity and virtual device detection models and support traffic anti-fraud technologies.

• Third-party SDK: Geetest Captcha — anti-robot data collected Data Access & Collection

Device Environment Information: Information such as device screen size, battery charging status, battery level, device jailbreak/root indicators, device debugging indicators, and mobile network operator name. After de-identification, such information is used to establish abnormal activity and virtual device detection models and support traffic anti-fraud technologies.

• Third-party SDK: Geetest Captcha — anti-robot data collected Data Access & Collection

User Behavioral Trajectory Information: This category of information does not refer to business process navigation data generated when a user moves from one page to another. Rather, it refers to interaction trajectory data generated during the verification process, such as swipe patterns, click patterns, and mouse movement trajectories. After de-identification, such information is used to establish models for detecting simulated, brute-force, and forged interaction trajectories and to support traffic anti-fraud technologies.

• Third-party SDK: Geetest Captcha — anti-robot data collected Data Access & Collection

Other Information: Information such as verification timestamps and application package names. Such information is used to establish baseline auxiliary models for abnormal activity detection and to support traffic anti-fraud technologies.

• Third-party SDK: Geetest Captcha — anti-robot data collected Data Access & Collection

Link to the privacy policy of the SDK

• Third-party SDK: Geetest Captcha — anti-robot data collected Data Access & Collection
• Third-party SDK: Geetest Captcha privacy policy link Data Access & Collection

https://www.geetest.com/Private

• Third-party SDK: Geetest Captcha — anti-robot data collected Data Access & Collection
• Third-party SDK: Geetest Captcha privacy policy link Data Access & Collection

DeepZero DeepTrack SDK

• Third-party SDK: DeepZero DeepTrack Data Access & Collection

Provider of the SDK

• Third-party SDK: DeepZero DeepTrack Data Access & Collection

DeepZero

• Third-party SDK: DeepZero DeepTrack Data Access & Collection

Purposes of the SDK

• Third-party SDK: DeepZero DeepTrack Data Access & Collection

Campaign Performance Tracking

• Third-party SDK: DeepZero DeepTrack Data Access & Collection

Application where the SDK is embedded

• Third-party SDK: DeepZero DeepTrack Data Access & Collection

iOS, Android, WeChat Mini-Program

• Third-party SDK: DeepZero DeepTrack Data Access & Collection

Types of personal information collected by the SDK

• Third-party SDK: DeepZero DeepTrack Data Access & Collection

Location Information, Device Information, Version of Operating System, User identity identifier, Behavioral information, Channel promotion information

• Third-party SDK: DeepZero DeepTrack Data Access & Collection

Link to the privacy policy of the SDK

• Third-party SDK: DeepZero DeepTrack Data Access & Collection

https://deeptrack.deepzero.com/docs/privacy

• Third-party SDK: DeepZero DeepTrack Data Access & Collection

3.4 Transfer of Personal Information

• China: transfer of personal information to third parties with consent and safeguards Sharing & Disclosure

With your consent, we may transfer your personal information to third parties for the purposes as described in this Statement. Prior to the transfer of your personal information, we will ensure that appropriate notice and safeguards are in place.

• China: transfer of personal information to third parties with consent and safeguards Sharing & Disclosure

3.5 Disclosure of Personal Information

• China: disclosure of personal information to third parties for five stated reasons Sharing & Disclosure

Despite the above situations, we may disclose personal information to third parties to: comply with applicable laws or effective legal procedures; respond to enquiries of the governments or requests of the public and/or the government authorities; protect rights, privacy, security or property of Hilton, site visitors, guests, employees or the public; pursue or exercise our rights; or respond to emergencies.

• China: disclosure of personal information to third parties for five stated reasons Sharing & Disclosure

4. Mobile and Location Services

• China: mobile and location services, and the device setting that limits the collection Data Access & Collection

We may collect your personal information if you download and use our mobile applications or use other digital platforms such as our WeChat Mini-Programs. We will obtain your consent and collect, use, disclose and otherwise process this information in accordance with this Statement. If you allow us to access the location information on your device to provide you with our application features and services, such information may include geolocation information. We also collect device information, such as your phone brand, model, operating system, operating system version, to direct you to the appropriate APP store to download our mobile apps.

• China: mobile and location services, and the device setting that limits the collection Data Access & Collection

You can prevent or limit the collection of this information by changing the settings in the Hilton Honors APP or by changing the settings in your device.

• China: mobile and location services, and the device setting that limits the collection Data Access & Collection

5. Analytics and Interest-Based Advertisements

• China: targeted advertising with third parties, and the opt-out Sharing & Disclosure

We also cooperate with third parties to serve targeted advertising based on your online activities across different websites, mobile applications, and devices over time. Our advertising partners may collect information about your activities related to our services on your current device and combine it with information about your activities on other websites, mobile applications, and devices. They may collect this information using server logs, cookies, web beacons, tags, pixels, mobile advertising IDs, cross-device linking and similar technologies. This may include your personal information.

• China: targeted advertising with third parties, and the opt-out Sharing & Disclosure

You can opt out of interest-based advertising and cross-device linking in the current browser or the web browsers and mobile apps on your device. We do not currently respond to "do not track" signals. For more information, please see the Online and Mobile Information We Collect section in the main body of this Statement.

• China: targeted advertising with third parties, and the opt-out Sharing & Disclosure

6. Changing and Accessing Your Personal Information, and Deregistration of Accounts

• China: rights over personal information and the 15-day deregistration response Legal Rights & Agreement Rules

You have the right to access, correct and/or (in certain circumstances) delete your personal information, withdraw consent to our processing of your personal information, deregister your membership account (if any), object to the use of your personal information in automated decision making and make complaints about how we process your personal information. You may have other rights under other applicable laws. Please see the contact information in Section 11 below, or the section titled Your Rights and Choices in the main text of this Statement, to learn how to contact us. We seek to handle these requests within the legally required period in accordance with the applicable laws. Particularly, we will respond to your request to deregister within 15 days of our receipt of the request, unless there are extenuating circumstances, in which we will inform you of the anticipated timeline if we expect our response to take longer than 15 days. Please note that if you request to deregister your membership account, you will no longer be able to enjoy any membership benefits from the date of deregistration. After you deregistered your membership account, your personal information will be deleted or anonymized unless the applicable laws require us to retain this information.

• China: rights over personal information and the 15-day deregistration response Legal Rights & Agreement Rules

7. How We Protect Personal Information

• China: reasonable steps to protect personal information, as in the main body Security & Safeguards

We take reasonable steps to: (i) protect personal information from unauthorized access, disclosure, alteration, or destruction, and (ii) keep personal information appropriately accurate and current by using appropriate technical and organizational measures. For more information, please see the section titled How We Protect Personal Information in the main body of this Statement.

• China: reasonable steps to protect personal information, as in the main body Security & Safeguards

We are not responsible for the collection, use, disclosure, or otherwise processing of personal information by our third-party websites or applications. Please read the privacy policies and terms of use of these websites and applications. This applies to: (1) in-hotel internet services we may offer; (2) third-party websites and applications to which the links in our websites and mobile applications may direct; and (3) third-party digital messaging applications or platforms which we use to communicate with you.

• China: Hilton is not responsible for third-party websites and applications Sharing & Disclosure

8. International Transfers of Personal Information

• China: transfers outside China, to the global reservation system in the United States Sharing & Disclosure

As Hilton operates globally, with your express consent where required, we may transfer your personal information (including your sensitive personal information, if applicable) to jurisdictions outside of China, including United States, Europe, and other jurisdictions where we, our service providers, and other relevant third parties conduct business. In particular, your personal information may be transferred to Hilton Domestic Operating Company Inc. for storage and processing in accordance with this Statement via Hilton's global centralized reservation system, which is deployed in the United States. The personal information stored in Hilton's global centralized reservation system may be further transferred to properties in different countries based on your reservations in accordance with this Statement. Please refer to the Data Protection Office at dataprotectionoffice@hilton.com for the contact information of other entities that may receive your personal information.

• China: transfers outside China, to the global reservation system in the United States Sharing & Disclosure

We will take appropriate steps to protect the integrity and confidentiality of your information and to ensure that your personal information is processed in accordance with the main body of this Statement and in accordance with the applicable laws.

• China: transfers outside China, to the global reservation system in the United States Sharing & Disclosure

9. Data Retention Period

• China: retention for the collection purpose or as the law requires, with destruction under the retention procedures Retention & Deletion

We will retain personal information about you for as long as necessary to complete the purpose for which it was collected, or as required or permitted by the applicable laws. We will destroy your personal information in accordance with our retention and records management procedures. For more information, please see the section titled Data Retention Period in the main body of this Statement.

• China: retention for the collection purpose or as the law requires, with destruction under the retention procedures Retention & Deletion

10. Changes to This Statement

• China: publication of material changes, and notice or consent where local law requires Legal Rights & Agreement Rules

If we make material changes to this Statement, we will publish these changes. For more information, please see the section titled Changes to Statement Content in the main body of this Statement. If required by the local laws, we will notify you and/or seek your consent.

• China: publication of material changes, and notice or consent where local law requires Legal Rights & Agreement Rules

11. Contact Information for Questions or Concerns

• China: contact the Data Protection Office or the China privacy contact Legal Rights & Agreement Rules

You can contact us if you have any questions, requests, or complaints regarding the protection of personal information. You can contact our Data Protection Office at DataProtectionOffice@hilton.com, or, if you would like to get in touch with the contact in China, please contact: China_Privacy@hilton.com.

• China: contact the Data Protection Office or the China privacy contact Legal Rights & Agreement Rules

Back to Top

Appendix A-7: Brazil Residents

• Brazil: the LGPD appendix applies to people in Brazil, and leaves the rest of the Statement in force Legal Rights & Agreement Rules

To the extent you are located within Brazil or are in any form subject to the Brazilian General Data Protection Law – Federal Law nº 13709/18 (“LGPD”), the provisions indicated below should be read and applied to the processing of your personal data accordingly. Unless stated otherwise in this Appendix, the remainder of the Policy, including Appendix A as applicable, shall not vary and shall remain in full force and effect.

• Brazil: the LGPD appendix applies to people in Brazil, and leaves the rest of the Statement in force Legal Rights & Agreement Rules

1. Data Subjects Rights

• Brazil: the data subject rights under the LGPD Legal Rights & Agreement Rules

Under certain circumstances, you have the following rights under the LGPD in relation to your personal data:

• Brazil: the data subject rights under the LGPD Legal Rights & Agreement Rules

Right to Information: right to obtain clear, transparent and understandable information on how we use your personal data;

• Brazil: the data subject rights under the LGPD Legal Rights & Agreement Rules

Right of confirmation and access: right to receive confirmation and access your personal data held by us about you;

• Brazil: the data subject rights under the LGPD Legal Rights & Agreement Rules

Right of rectification: right to have your personal data corrected if they are outdated, inaccurate or incorrect and/or to complete them;

• Brazil: the data subject rights under the LGPD Legal Rights & Agreement Rules

Right of anonymization, blocking or deletion: Anonymize, block or eliminate any unnecessary or excessive data or data processed in noncompliance with the applicable law;

• Brazil: the data subject rights under the LGPD Legal Rights & Agreement Rules

Right to withdraw consent at any time for consent-based data processing: right to withdraw your consent to the processing of your personal data when such processing is based on consent;

• Brazil: the data subject rights under the LGPD Legal Rights & Agreement Rules

Right to data portability: right to request copying, transferring your personal data to another database in accordance with further regulation of the local authority;

• Brazil: the data subject rights under the LGPD Legal Rights & Agreement Rules

Right to receive information about public and privacy entities: right to receive information about public and private entities with which your personal data is shared;

• Brazil: the data subject rights under the LGPD Legal Rights & Agreement Rules

Right to object: right to oppose any processing activity based on a legal basis other than consent in case there is violation of the LGPD;

• Brazil: the data subject rights under the LGPD Legal Rights & Agreement Rules

Right to review automated decisions: right to review of decisions, whenever they are based only on automated processing of personal data, by a natural person, whenever it affects your interests;

• Brazil: the data subject rights under the LGPD Legal Rights & Agreement Rules

Right to file a complaint with your local Data Protection Authority or consumer protection entities.

• Brazil: the data subject rights under the LGPD Legal Rights & Agreement Rules

2. Legal Bases

• Brazil: the legal bases relied on under Article 7 of the LGPD Legal Rights & Agreement Rules

Hilton usually relies on one of the following legal bases when processing your personal data for the purposes indicated in the Global Privacy Statement in accordance with Article 7 of the LGPD:

• Brazil: the legal bases relied on under Article 7 of the LGPD Legal Rights & Agreement Rules

Data subject’s consent (art. 7, I);

• Brazil: the legal bases relied on under Article 7 of the LGPD Legal Rights & Agreement Rules

For compliance of a legal or regulatory obligation (Article 7, II);

• Brazil: the legal bases relied on under Article 7 of the LGPD Legal Rights & Agreement Rules

Whenever necessary for the performance of a contract or preliminary procedures relating to contracts in which the data subject is a party (Article 7, V);

• Brazil: the legal bases relied on under Article 7 of the LGPD Legal Rights & Agreement Rules

Whenever necessary for the legitimate interests of the controller or of third parties, except in the prevalence of fundamental rights of the data subject (Article 7, IX).

• Brazil: the legal bases relied on under Article 7 of the LGPD Legal Rights & Agreement Rules

However, depending on the concrete situation, other legal bases set forth in the LGPD may apply.

• Brazil: the legal bases relied on under Article 7 of the LGPD Legal Rights & Agreement Rules

3. International Transfers

• Brazil: how transfers out of Brazil are managed Sharing & Disclosure

Where we transfer information that originates in Brazil to a country outside of Brazil, we will take steps to make sure such transfer is carefully managed to protect your privacy rights:

• Brazil: how transfers out of Brazil are managed Sharing & Disclosure

transfers within the Hilton Group of Companies may be covered by an agreement entered into by members of Hilton (an intra-group agreement) which contractually obliges each member to ensure that your information receives an adequate and consistent level of protection wherever it is transferred within Hilton in accordance with the LGPD;

• Brazil: how transfers out of Brazil are managed Sharing & Disclosure

where we transfer your data outside of the Hilton Group of Companies, including to other companies providing us with a service, we will obtain contractual commitments and assurances from them to protect your information, such as standard contractual clauses or binding corporate rules. In the lack of instructions from the local supervisory authority, we may follow the standard models adopted under the European Union or by other competent authorities until then;

• Brazil: how transfers out of Brazil are managed Sharing & Disclosure

we are also able to transfer personal information to countries which are recognized as providing an adequate level of legal protection or where we can be satisfied that alternative arrangements are in place to protect your privacy rights; and

• Brazil: how transfers out of Brazil are managed Sharing & Disclosure

Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of Brazil.

• Brazil: how transfers out of Brazil are managed Sharing & Disclosure

Back to Top

Appendix A-8: Monaco Residents

• Monaco: the appendix for data subjects in the Principality, controlling over the main body on conflict Legal Rights & Agreement Rules

For data subjects in the Principality of Monaco, this Appendix outlines certain additional information that Hilton is obligated to provide to you, as well as certain rights you have with respect to the processing of your personal data, pursuant to applicable local laws. This Appendix will control to the extent it conflicts with any provision in the main body of this Statement or Appendix A, as applicable.

• Monaco: the appendix for data subjects in the Principality, controlling over the main body on conflict Legal Rights & Agreement Rules

1. Legal Bases for the Processing Of Your Personal Data

• Monaco: legal bases under Act No. 1.054 Legal Rights & Agreement Rules

Hilton relies on legal bases while processing your personal data for the purposes indicated in the main body of the Global Privacy Statement in accordance with Act No. 1.054 on the Protection of Personal Data ("Act No. 1.054").

• Monaco: legal bases under Act No. 1.054 Legal Rights & Agreement Rules

2. Personal Data Access and Customer Rights

• Monaco: rights under Act No. 1.054 and the route to the Personal Data Protection Authority Legal Rights & Agreement Rules

In accordance with Act No. 1.054, you have a right of access to and a right to the rectification, erasure and portability of your personal data as well as a right to object and restrict the processing of this personal data. With proof of your identity, you may exercise your rights by contacting the Data Protection Office ("DPO") by email at DataProtectionOffice@hilton.com. If, after contacting the DPO, you do not feel that your rights have been observed, you may make a claim with the Personal Data Protection Authority ("APDP")

• Monaco: rights under Act No. 1.054 and the route to the Personal Data Protection Authority Legal Rights & Agreement Rules

3. Personal Data Security

• Monaco: notification and mitigation for a high-risk personal data breach Security & Safeguards

In case of breach of your personal data liable to pose a high risk to your rights and freedoms, Hilton shall inform you as soon as possible and take all necessary measures to limit the risks related to this breach. Whether your data is processed by Hilton or by its subcontractors and partners, the same security and privacy requirements apply to your personal data.

• Monaco: notification and mitigation for a high-risk personal data breach Security & Safeguards

4. International Transfers of Personal Data

• Monaco: transfers to affiliates outside Monaco and the transfer authorization form Sharing & Disclosure

Hilton is required to transfer your personal data to its affiliates outside of the Principality of Monaco which includes Hilton Domestic Operating Company Inc., all resident in the United States, as well as their in-country suppliers, in order to complete reservations, process Hilton Honors memberships and conduct promotion activities through its website, whose servers are located abroad.

• Monaco: transfers to affiliates outside Monaco and the transfer authorization form Sharing & Disclosure

When a subcontractor or partner is located in a country that has not been recognized as having an adequate level of protection as the one offered by Act No. 1.054 (which is the case for the United States), Hilton must fulfill a transfer authorization form in order to comply with Act No. 1.054’s own requirements on the security and privacy of personal data and the subcontractors should ensure a satisfactory protection of your personal data.

• Monaco: transfers to affiliates outside Monaco and the transfer authorization form Sharing & Disclosure

5. Language

• Monaco: the English text prevails over the French text Legal Rights & Agreement Rules

This statement is available in English and French. If there is any inconsistency or different interpretation between the English and French versions, the English text shall prevail.

• Monaco: the English text prevails over the French text Legal Rights & Agreement Rules

Back to Top

Appendix A-9: Nigeria Residents

• Nigeria: the NDPA appendix applies to people in Nigeria and controls over the main body Legal Rights & Agreement Rules

To the extent you are located within Nigeria or are in any form subject to the Nigeria Data Protection Act 2023 (NDPA), the provisions indicated below should be read and applied to the processing or your personal information accordingly. This Appendix will control to the extent it conflicts with any provision in the main body of this Statement or Appendix A, as applicable.

• Nigeria: the NDPA appendix applies to people in Nigeria and controls over the main body Legal Rights & Agreement Rules

1. Legal Basis for Processing

• Nigeria: the legal grounds relied on under the NDPA Legal Rights & Agreement Rules

In accordance with the NDPA, we process your personal information for the purposes indicated in the Global Privacy Statement based on the following legal grounds:

• Nigeria: the legal grounds relied on under the NDPA Legal Rights & Agreement Rules

Consent: Where you have provided explicit consent for specific processing activities.

• Nigeria: the legal grounds relied on under the NDPA Legal Rights & Agreement Rules

Contractual Necessity: To fulfill our obligations under a contract with you, such as processing reservations and providing requested services.

• Nigeria: the legal grounds relied on under the NDPA Legal Rights & Agreement Rules

Legal Obligation: To comply with applicable Nigerian laws and regulatory requirements.

• Nigeria: the legal grounds relied on under the NDPA Legal Rights & Agreement Rules

Legitimate Interests: To pursue our legitimate business interests, provided that such processing does not override your fundamental rights and freedoms.

• Nigeria: the legal grounds relied on under the NDPA Legal Rights & Agreement Rules

2. Rights of Nigerian Data Subjects

• Nigeria: the rights of Nigerian data subjects Legal Rights & Agreement Rules

As a resident of Nigeria, you are entitled to the following rights under the NDPA:

• Nigeria: the rights of Nigerian data subjects Legal Rights & Agreement Rules

Right to Access: You may request confirmation as to whether your personal information is being processed and, if so, access to that information.

• Nigeria: the rights of Nigerian data subjects Legal Rights & Agreement Rules

Right to Rectification: You have the right to request the correction of inaccurate or incomplete personal information.

• Nigeria: the rights of Nigerian data subjects Legal Rights & Agreement Rules

Right to Erasure: You can request the deletion of your personal information under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

• Nigeria: the rights of Nigerian data subjects Legal Rights & Agreement Rules

Right to Restrict Processing: You may request that we limit the processing of your personal information in specific situations.

• Nigeria: the rights of Nigerian data subjects Legal Rights & Agreement Rules

Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that data to another data controller.

• Nigeria: the rights of Nigerian data subjects Legal Rights & Agreement Rules

Right to Object: You can object to the processing of your personal information based on legitimate interests or for direct marketing purposes.

• Nigeria: the rights of Nigerian data subjects Legal Rights & Agreement Rules

Right to Withdraw Consent: If processing is based on consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

• Nigeria: the rights of Nigerian data subjects Legal Rights & Agreement Rules

Right to Lodge Complaint: You have a right to lodge complaints with the Nigeria Data Protection Commission (NDPC).

• Nigeria: the rights of Nigerian data subjects Legal Rights & Agreement Rules

3. Data Transfer and Sharing

• Nigeria: transfers to third parties and safeguards on transfer outside Nigeria Sharing & Disclosure

We may transfer your personal information to third parties, including entities within the Hilton group and external service providers, for the purposes described in this Privacy Statement. When transferring personal information outside Nigeria, we ensure that appropriate safeguards are in place to protect your data in accordance with the NDPA.

• Nigeria: transfers to third parties and safeguards on transfer outside Nigeria Sharing & Disclosure

4. How We Protect Your Personal Data

• Nigeria: reasonable steps to protect personal information, as in the main body Security & Safeguards

We take reasonable steps to: (i) protect personal information from unauthorized access, disclosure, alteration, or destruction, and (ii) keep personal information appropriately accurate and current by using appropriate technical and organizational measures. For more information, please refer to the How We Protect Personal Information section in the main body of this Statement.

• Nigeria: reasonable steps to protect personal information, as in the main body Security & Safeguards

5. Data Retention

• Nigeria: retention limited to the collection purposes or Nigerian law, then destruction Retention & Deletion

Your personal information will be retained only for as long as necessary to fulfill the purposes for which it was collected or as required by Nigerian law. When we destroy your personal information, we do so in a way that prevents that information from being restored or reconstructed.

• Nigeria: retention limited to the collection purposes or Nigerian law, then destruction Retention & Deletion

6. Cookies and Other Technologies

• Nigeria: cookies and other technologies, as described in the main body Data Access & Collection

Our site may use "Cookies" or "Other Technologies" (such as "pixel tags," "web beacons," "clear GIFs", links in emails, JavaScript, device IDs assigned by Google or Apple, or similar technologies). For more information, please refer to the Online and Mobile Information We Collect section in the main body of this Statement.

• Nigeria: cookies and other technologies, as described in the main body Data Access & Collection

7. Contact Information

• Nigeria: contact the Data Protection Office for questions under Nigerian law Legal Rights & Agreement Rules

If you have any questions, concerns, or requests regarding the processing of your personal information under Nigerian law, please contact our Data Protection Office at:

• Nigeria: contact the Data Protection Office for questions under Nigerian law Legal Rights & Agreement Rules

Email: DataProtectionOffice@hilton.com

• Nigeria: contact the Data Protection Office for questions under Nigerian law Legal Rights & Agreement Rules

We are committed to addressing your inquiries promptly and in accordance with the NDPA.

• Nigeria: contact the Data Protection Office for questions under Nigerian law Legal Rights & Agreement Rules

8. Changes to this Statement

• Nigeria: how changes to the Statement are published and take effect Legal Rights & Agreement Rules

We may modify this Statement from time to time. When we make material changes to this Statement we will post a link to the revised Statement on the homepage of our site. You can tell when this Statement was last updated by looking at the date at the top of the Statement. Any changes to our Statement will become effective upon posting of the revised Statement on the site.

• Nigeria: how changes to the Statement are published and take effect Legal Rights & Agreement Rules

Back to Top

Appendix A-10: Korea Privacy Policy

• Korea: PIPA compliance, the published processing policy, and the appendix's priority Legal Rights & Agreement Rules

Hilton complies with the Personal Information Protection Act (PIPA) and other applicable laws to protect the freedom and the rights of data subjects, and handles personal information in a lawful manner and manages it safely. In accordance with Article 30 of the PIPA, we establish and disclose the following personal information processing policy to guide data subjects on the procedures and standards for the processing and protection of personal information, and to ensure that grievances are promptly and accurately resolved. This Appendix will control to the extent it conflicts with any provision in the main body of this Statement or Appendix A, as applicable.

• Korea: PIPA compliance, the published processing policy, and the appendix's priority Legal Rights & Agreement Rules

To the extent you are located in South Korea or is any form subject to the PIPA, the provisions below should be read and applied to the processing of personal information accordingly.

• Korea: PIPA compliance, the published processing policy, and the appendix's priority Legal Rights & Agreement Rules

Contact Information: In accordance with Article 32-5 of the Information and Communications Network Act, A domestic representative (local person) in charge of information and communication services is designated as follows:

• Korea: the domestic local representative for information and communication services Legal Rights & Agreement Rules

Local Representative Agent: You may contact our Local Agent below by phone, email or mail to handle questions and complaints in connection with the processing of your personal data if you are in Korea.

• Korea: the domestic local representative for information and communication services Legal Rights & Agreement Rules

Local Agent: Jung Byung-hyuk (Brad Jeong), Managing Director, Conrad Seoul

• Korea: the domestic local representative for information and communication services Legal Rights & Agreement Rules

Telephone: 02-6137-7600

• Korea: the domestic local representative for information and communication services Legal Rights & Agreement Rules

Email: Brad.jeong@conradhotels.com

• Korea: the domestic local representative for information and communication services Legal Rights & Agreement Rules

Address: 10 Gukjegeumyuong-ro Yeouido, Seoul, 07326, South Korea

• Korea: the domestic local representative for information and communication services Legal Rights & Agreement Rules

Data Protection Office: You may also contact Hilton’s Data Protection Office.

• Korea: the Data Protection Office contact details and the rights portal Legal Rights & Agreement Rules

Telephone: 070-4732-6767

• Korea: the Data Protection Office contact details and the rights portal Legal Rights & Agreement Rules

Email: DataProtectionOffice@hilton.com

• Korea: the Data Protection Office contact details and the rights portal Legal Rights & Agreement Rules

Address: 7930 Jones Branch Drive, McLean, VA 22102 USA

• Korea: the Data Protection Office contact details and the rights portal Legal Rights & Agreement Rules

Data Subject Rights Portal at datarights.hilton.com

• Korea: the Data Protection Office contact details and the rights portal Legal Rights & Agreement Rules

1. Processing and Retention of Personal Information

• Korea: processing on consent or as the PIPA permits, and no knowing collection from under-14s Legal Rights & Agreement Rules

We will use your personal information with your consent or as permitted by the PIPA. If we want to use your personal information for other purposes, we will obtain your consent unless the new use is permitted by applicable law.

• Korea: processing on consent or as the PIPA permits, and no knowing collection from under-14s Legal Rights & Agreement Rules

Hilton does not knowingly collect, disclose, or sell personal information of minors under the age of 14.

• Korea: processing on consent or as the PIPA permits, and no knowing collection from under-14s Legal Rights & Agreement Rules

Retention Period: We retain personal information as necessary to fulfill the purpose for which that information was collected in accordance with our internal retention policies, usually for the period the data subject consented to at the time the personal information was collected, or for the duration of any contractual relationship, and any period thereafter as legally required under applicable laws and regulations. This information is stored and managed in the United States.

• Korea: retention period, storage in the United States, and destruction Retention & Deletion

Destruction and Disposal: We will promptly destroy personal information at the end of the retention period, as described above. When we destroy personal information, we do so in a way that prevents that information from being restored or reconstructed.

• Korea: retention period, storage in the United States, and destruction Retention & Deletion

Personal information processed with the data subject’s consent. Hilton processes the following items of personal information with the data subject’s consent

• Korea: the list of personal information processed with the data subject's consent Legal Rights & Agreement Rules

Collapse All

Perform analytics in order to provide guests with personalized offers and content

• Korea: personalization analytics — legal basis, sources and first items processed Legal Rights & Agreement Rules

Legal Basis

• Korea: personalization analytics — legal basis, sources and first items processed Legal Rights & Agreement Rules

Article 15(1)(1) (Consent) of the PIPA)

• Korea: personalization analytics — legal basis, sources and first items processed Legal Rights & Agreement Rules

Source

• Korea: personalization analytics — legal basis, sources and first items processed Legal Rights & Agreement Rules

Directly from consumers

• Korea: personalization analytics — legal basis, sources and first items processed Legal Rights & Agreement Rules

From third parties such as travel booking platforms and credit card providers

• Korea: personalization analytics — legal basis, sources and first items processed Legal Rights & Agreement Rules

From demographics companies

• Korea: personalization analytics — legal basis, sources and first items processed Legal Rights & Agreement Rules

Items of Personal Information Processed

• Korea: personalization analytics — legal basis, sources and first items processed Legal Rights & Agreement Rules

Name

• Korea: personalization analytics — legal basis, sources and first items processed Legal Rights & Agreement Rules

Hilton Honors number

• Korea: personalization analytics — legal basis, sources and first items processed Legal Rights & Agreement Rules

Home address

• Korea: personalization analytics — legal basis, sources and first items processed Legal Rights & Agreement Rules

Preferred language

• Korea: personalization analytics — legal basis, sources and first items processed Legal Rights & Agreement Rules

Room preference

• Korea: personalization analytics — legal basis, sources and first items processed Legal Rights & Agreement Rules

Internet or other electronic network activity information, including information regarding a customer’s interaction with Hilton websites, applications, or advertisements

• Korea: personalization analytics — online activity, device and demographic items processed Legal Rights & Agreement Rules

IP addresses

• Korea: personalization analytics — online activity, device and demographic items processed Legal Rights & Agreement Rules

Session IDs

• Korea: personalization analytics — online activity, device and demographic items processed Legal Rights & Agreement Rules

Device information (including MAC addresses)

• Korea: personalization analytics — online activity, device and demographic items processed Legal Rights & Agreement Rules

Social media information; publicly available online information (including through social media platforms)

• Korea: personalization analytics — online activity, device and demographic items processed Legal Rights & Agreement Rules

Demographic data

• Korea: personalization analytics — online activity, device and demographic items processed Legal Rights & Agreement Rules

Administer contests and sweepstakes

• Korea: administering contests and sweepstakes — legal basis, sources and items processed Legal Rights & Agreement Rules

Legal Basis

• Korea: administering contests and sweepstakes — legal basis, sources and items processed Legal Rights & Agreement Rules

Article 15(1)(1) (Consent) of the PIPA)

• Korea: administering contests and sweepstakes — legal basis, sources and items processed Legal Rights & Agreement Rules

Source

• Korea: administering contests and sweepstakes — legal basis, sources and items processed Legal Rights & Agreement Rules

Directly from consumers themselves

• Korea: administering contests and sweepstakes — legal basis, sources and items processed Legal Rights & Agreement Rules

From third parties such as travel booking platforms and credit card providers

• Korea: administering contests and sweepstakes — legal basis, sources and items processed Legal Rights & Agreement Rules

From demographics companies

• Korea: administering contests and sweepstakes — legal basis, sources and items processed Legal Rights & Agreement Rules

Items of Personal Information Processed

• Korea: administering contests and sweepstakes — legal basis, sources and items processed Legal Rights & Agreement Rules

Name

• Korea: administering contests and sweepstakes — legal basis, sources and items processed Legal Rights & Agreement Rules

Email address

• Korea: administering contests and sweepstakes — legal basis, sources and items processed Legal Rights & Agreement Rules

Home address

• Korea: administering contests and sweepstakes — legal basis, sources and items processed Legal Rights & Agreement Rules

Hilton Honors number

• Korea: administering contests and sweepstakes — legal basis, sources and items processed Legal Rights & Agreement Rules

Perform analytics to improve business operations

• Korea: business analytics — legal basis, sources and first items processed Legal Rights & Agreement Rules

Legal Basis

• Korea: business analytics — legal basis, sources and first items processed Legal Rights & Agreement Rules

Article 15(1)(6) Legitimate Interest

• Korea: business analytics — legal basis, sources and first items processed Legal Rights & Agreement Rules

Source

• Korea: business analytics — legal basis, sources and first items processed Legal Rights & Agreement Rules

Directly from consumers

• Korea: business analytics — legal basis, sources and first items processed Legal Rights & Agreement Rules

From third parties such as travel booking platforms and credit card providers

• Korea: business analytics — legal basis, sources and first items processed Legal Rights & Agreement Rules

From demographics companies

• Korea: business analytics — legal basis, sources and first items processed Legal Rights & Agreement Rules

Items of Personal Information Processed

• Korea: business analytics — legal basis, sources and first items processed Legal Rights & Agreement Rules

Name

• Korea: business analytics — legal basis, sources and first items processed Legal Rights & Agreement Rules

Home address

• Korea: business analytics — legal basis, sources and first items processed Legal Rights & Agreement Rules

Hilton Honors number

• Korea: business analytics — legal basis, sources and first items processed Legal Rights & Agreement Rules

Room preference

• Korea: business analytics — legal basis, sources and first items processed Legal Rights & Agreement Rules

Internet or other electronic network activity information, including information regarding a customer's interaction with Hilton websites, applications, or advertisements

• Korea: business analytics — legal basis, sources and first items processed Legal Rights & Agreement Rules

IP addresses

• Korea: business analytics — remaining items processed Legal Rights & Agreement Rules

Session IDs

• Korea: business analytics — remaining items processed Legal Rights & Agreement Rules

Booking engine

• Korea: business analytics — remaining items processed Legal Rights & Agreement Rules

Whether you have a Hilton and American Express Co-Branded Credit Card

• Korea: business analytics — remaining items processed Legal Rights & Agreement Rules

Whether your Hilton and Amazon accounts are linked

• Korea: business analytics — remaining items processed Legal Rights & Agreement Rules

Whether your Hilton and Lyft accounts are linked

• Korea: business analytics — remaining items processed Legal Rights & Agreement Rules

Spending amount

• Korea: business analytics — remaining items processed Legal Rights & Agreement Rules

Determine guests' eligibility for special or promotional rates

• Korea: eligibility for special or promotional rates — legal basis, sources and items processed Legal Rights & Agreement Rules

Legal Basis

• Korea: eligibility for special or promotional rates — legal basis, sources and items processed Legal Rights & Agreement Rules

Article 15(1)(6) Legitimate Interest

• Korea: eligibility for special or promotional rates — legal basis, sources and items processed Legal Rights & Agreement Rules

Source

• Korea: eligibility for special or promotional rates — legal basis, sources and items processed Legal Rights & Agreement Rules

Directly from consumers

• Korea: eligibility for special or promotional rates — legal basis, sources and items processed Legal Rights & Agreement Rules

From third parties such as travel booking platforms and credit card providers

• Korea: eligibility for special or promotional rates — legal basis, sources and items processed Legal Rights & Agreement Rules

From demographics companies

• Korea: eligibility for special or promotional rates — legal basis, sources and items processed Legal Rights & Agreement Rules

Items of Personal Information Processed

• Korea: eligibility for special or promotional rates — legal basis, sources and items processed Legal Rights & Agreement Rules

Name

• Korea: eligibility for special or promotional rates — legal basis, sources and items processed Legal Rights & Agreement Rules

Hilton Honors number

• Korea: eligibility for special or promotional rates — legal basis, sources and items processed Legal Rights & Agreement Rules

Corporate number and name

• Korea: eligibility for special or promotional rates — legal basis, sources and items processed Legal Rights & Agreement Rules

Travel agent number and name

• Korea: eligibility for special or promotional rates — legal basis, sources and items processed Legal Rights & Agreement Rules

Authenticate mobile account

• Korea: authenticating a mobile account — legal basis and source Legal Rights & Agreement Rules

Legal Basis

• Korea: authenticating a mobile account — legal basis and source Legal Rights & Agreement Rules

Article 15(1)(6) Legitimate Interest

• Korea: authenticating a mobile account — legal basis and source Legal Rights & Agreement Rules

Source

• Korea: authenticating a mobile account — legal basis and source Legal Rights & Agreement Rules

Directly from consumers

• Korea: authenticating a mobile account — legal basis and source Legal Rights & Agreement Rules

From third parties such as travel booking platforms and credit card providers

• Korea: authenticating a mobile account — sources and items processed Legal Rights & Agreement Rules

Items of Personal Information Processed

• Korea: authenticating a mobile account — sources and items processed Legal Rights & Agreement Rules

Telephone and fax numbers

• Korea: authenticating a mobile account — sources and items processed Legal Rights & Agreement Rules

Email address

• Korea: authenticating a mobile account — sources and items processed Legal Rights & Agreement Rules

Process payments, including conducting strong customer authentication (SCA) when required by law

• Korea: processing payments and strong customer authentication Legal Rights & Agreement Rules

Legal Basis

• Korea: processing payments and strong customer authentication Legal Rights & Agreement Rules

Article 15(1)4 of the PIPA (Execution and Performance of a Contract)

• Korea: processing payments and strong customer authentication Legal Rights & Agreement Rules

Source

• Korea: processing payments and strong customer authentication Legal Rights & Agreement Rules

Directly from consumers

• Korea: processing payments and strong customer authentication Legal Rights & Agreement Rules

From third parties such as travel booking platforms and credit card providers

• Korea: processing payments and strong customer authentication Legal Rights & Agreement Rules

Items of Personal Information Processed

• Korea: processing payments and strong customer authentication Legal Rights & Agreement Rules

Name

• Korea: processing payments and strong customer authentication Legal Rights & Agreement Rules

Home address

• Korea: processing payments and strong customer authentication Legal Rights & Agreement Rules

Payment card information

• Korea: processing payments and strong customer authentication Legal Rights & Agreement Rules

IP addresses

• Korea: processing payments and strong customer authentication Legal Rights & Agreement Rules

Process transactions with partners

• Korea: processing transactions with partners Legal Rights & Agreement Rules

Legal Basis

• Korea: processing transactions with partners Legal Rights & Agreement Rules

Article 15(1)4 of the PIPA (Execution and Performance of a Contract)

• Korea: processing transactions with partners Legal Rights & Agreement Rules

Source

• Korea: processing transactions with partners Legal Rights & Agreement Rules

Directly from consumers

• Korea: processing transactions with partners Legal Rights & Agreement Rules

From third parties such as travel booking platforms and credit card providers

• Korea: processing transactions with partners Legal Rights & Agreement Rules

Items of Personal Information Processed

• Korea: processing transactions with partners Legal Rights & Agreement Rules

Name

• Korea: processing transactions with partners Legal Rights & Agreement Rules

Telephone and fax numbers

• Korea: processing transactions with partners Legal Rights & Agreement Rules

Email address

• Korea: processing transactions with partners Legal Rights & Agreement Rules

Home address

• Korea: processing transactions with partners Legal Rights & Agreement Rules

Hilton Honors number

• Korea: processing transactions with partners Legal Rights & Agreement Rules

Optimize our websites and mobile apps

• Korea: optimizing the websites and mobile apps Legal Rights & Agreement Rules

Legal Basis

• Korea: optimizing the websites and mobile apps Legal Rights & Agreement Rules

Article 15(1)(6) Legitimate Interest

• Korea: optimizing the websites and mobile apps Legal Rights & Agreement Rules

Source

• Korea: optimizing the websites and mobile apps Legal Rights & Agreement Rules

Directly from consumers

• Korea: optimizing the websites and mobile apps Legal Rights & Agreement Rules

From third parties such as travel booking platforms and credit card providers

• Korea: optimizing the websites and mobile apps Legal Rights & Agreement Rules

From demographics companies

• Korea: optimizing the websites and mobile apps Legal Rights & Agreement Rules

Items of Personal Information Processed

• Korea: optimizing the websites and mobile apps Legal Rights & Agreement Rules

Name

• Korea: optimizing the websites and mobile apps Legal Rights & Agreement Rules

Internet or other electronic network activity information, including information regarding a customer's interaction with Hilton websites, applications, or advertisements

• Korea: optimizing the websites and mobile apps Legal Rights & Agreement Rules

IP addresses

• Korea: optimizing the websites and mobile apps Legal Rights & Agreement Rules

Detect and prevent fraud

• Korea: detecting and preventing fraud — legal basis, sources and first items Legal Rights & Agreement Rules

Legal Basis

• Korea: detecting and preventing fraud — legal basis, sources and first items Legal Rights & Agreement Rules

Article 15(1)(6) Legitimate Interest

• Korea: detecting and preventing fraud — legal basis, sources and first items Legal Rights & Agreement Rules

Source

• Korea: detecting and preventing fraud — legal basis, sources and first items Legal Rights & Agreement Rules

Directly from consumers

• Korea: detecting and preventing fraud — legal basis, sources and first items Legal Rights & Agreement Rules

From third parties such as travel booking platforms and credit card providers

• Korea: detecting and preventing fraud — legal basis, sources and first items Legal Rights & Agreement Rules

Items of Personal Information Processed

• Korea: detecting and preventing fraud — legal basis, sources and first items Legal Rights & Agreement Rules

Name

• Korea: detecting and preventing fraud — legal basis, sources and first items Legal Rights & Agreement Rules

Telephone and fax numbers

• Korea: detecting and preventing fraud — legal basis, sources and first items Legal Rights & Agreement Rules

Email address

• Korea: detecting and preventing fraud — legal basis, sources and first items Legal Rights & Agreement Rules

Home address

• Korea: detecting and preventing fraud — remaining items processed Legal Rights & Agreement Rules

Payment card information

• Korea: detecting and preventing fraud — remaining items processed Legal Rights & Agreement Rules

Hilton Honors number

• Korea: detecting and preventing fraud — remaining items processed Legal Rights & Agreement Rules

Internet or other electronic network activity information, including information regarding a customer's interaction with Hilton websites, applications, or advertisements

• Korea: detecting and preventing fraud — remaining items processed Legal Rights & Agreement Rules

IP addresses

• Korea: detecting and preventing fraud — remaining items processed Legal Rights & Agreement Rules

Session IDs

• Korea: detecting and preventing fraud — remaining items processed Legal Rights & Agreement Rules

Geolocation information

• Korea: detecting and preventing fraud — remaining items processed Legal Rights & Agreement Rules

Device information (including MAC address)

• Korea: detecting and preventing fraud — remaining items processed Legal Rights & Agreement Rules

Send marketing communications via SMS, service-related SMS communications, and communications relating to Hilton Honors

• Korea: SMS, service-related SMS and Hilton Honors communications Legal Rights & Agreement Rules

Legal Basis

• Korea: SMS, service-related SMS and Hilton Honors communications Legal Rights & Agreement Rules

Article 15(1)(1) (Consent) of the PIPA)

• Korea: SMS, service-related SMS and Hilton Honors communications Legal Rights & Agreement Rules

Source

• Korea: SMS, service-related SMS and Hilton Honors communications Legal Rights & Agreement Rules

Directly from consumers

• Korea: SMS, service-related SMS and Hilton Honors communications Legal Rights & Agreement Rules

From third parties such as travel booking platforms and credit card providers

• Korea: SMS, service-related SMS and Hilton Honors communications Legal Rights & Agreement Rules

From demographics companies

• Korea: SMS, service-related SMS and Hilton Honors communications Legal Rights & Agreement Rules

Items of Personal Information Processed

• Korea: SMS, service-related SMS and Hilton Honors communications Legal Rights & Agreement Rules

Telephone and fax numbers

• Korea: SMS, service-related SMS and Hilton Honors communications Legal Rights & Agreement Rules

Preferred language

• Korea: SMS, service-related SMS and Hilton Honors communications Legal Rights & Agreement Rules

Engage in sales activity for group bookings, meetings and events

• Korea: sales activity for group bookings, meetings and events Legal Rights & Agreement Rules

Legal Basis

• Korea: sales activity for group bookings, meetings and events Legal Rights & Agreement Rules

Article 15(1)(1) (Consent) of the PIPA)

• Korea: sales activity for group bookings, meetings and events Legal Rights & Agreement Rules

Source

• Korea: sales activity for group bookings, meetings and events Legal Rights & Agreement Rules

Directly from consumers

• Korea: sales activity for group bookings, meetings and events Legal Rights & Agreement Rules

From third parties such as travel booking platforms and credit card providers

• Korea: sales activity for group bookings, meetings and events Legal Rights & Agreement Rules

Items of Personal Information Processed

• Korea: sales activity for group bookings, meetings and events Legal Rights & Agreement Rules

Telephone and fax numbers

• Korea: sales activity for group bookings, meetings and events Legal Rights & Agreement Rules

Email address

• Korea: sales activity for group bookings, meetings and events Legal Rights & Agreement Rules

Home address

• Korea: sales activity for group bookings, meetings and events Legal Rights & Agreement Rules

Send marketing communications via email

• Korea: marketing communications via email Legal Rights & Agreement Rules

Legal Basis

• Korea: marketing communications via email Legal Rights & Agreement Rules

Article 15(1)(1) (Consent) of the PIPA)

• Korea: marketing communications via email Legal Rights & Agreement Rules

Source

• Korea: marketing communications via email Legal Rights & Agreement Rules

Directly from consumers

• Korea: marketing communications via email Legal Rights & Agreement Rules

From third parties such as travel booking platforms and credit card providers

• Korea: marketing communications via email Legal Rights & Agreement Rules

From demographics companies

• Korea: marketing communications via email Legal Rights & Agreement Rules

Items of Personal Information Processed

• Korea: marketing communications via email Legal Rights & Agreement Rules

Email address

• Korea: marketing communications via email Legal Rights & Agreement Rules

Send marketing communications via direct mail

• Korea: marketing communications via direct mail Legal Rights & Agreement Rules

Legal Basis

• Korea: marketing communications via direct mail Legal Rights & Agreement Rules

Article 15(1)(1) (Consent) of the PIPA)

• Korea: marketing communications via direct mail Legal Rights & Agreement Rules

Source

• Korea: marketing communications via direct mail Legal Rights & Agreement Rules

Directly from consumers

• Korea: marketing communications via direct mail Legal Rights & Agreement Rules

From third parties such as travel booking platforms and credit card providers

• Korea: marketing communications via direct mail Legal Rights & Agreement Rules

From demographics companies

• Korea: marketing communications via direct mail Legal Rights & Agreement Rules

Items of Personal Information Processed

• Korea: marketing communications via direct mail Legal Rights & Agreement Rules

Home address

• Korea: marketing communications via direct mail Legal Rights & Agreement Rules

Maintain books and records to comply with legal obligations for business reporting, auditing, tax, and income reconciliation

• Korea: books and records for legal obligations — legal basis and sources Legal Rights & Agreement Rules

Legal Basis

• Korea: books and records for legal obligations — legal basis and sources Legal Rights & Agreement Rules

Article 15(1)(6) Legitimate Interest

• Korea: books and records for legal obligations — legal basis and sources Legal Rights & Agreement Rules

Source

• Korea: books and records for legal obligations — legal basis and sources Legal Rights & Agreement Rules

Directly from consumers

• Korea: books and records for legal obligations — legal basis and sources Legal Rights & Agreement Rules

From third parties such as travel booking platforms and credit card providers

• Korea: books and records for legal obligations — legal basis and sources Legal Rights & Agreement Rules

Items of Personal Information Processed

• Korea: books and records for legal obligations — items processed Legal Rights & Agreement Rules

Payment card information

• Korea: books and records for legal obligations — items processed Legal Rights & Agreement Rules

Spending amount

• Korea: books and records for legal obligations — items processed Legal Rights & Agreement Rules

Enable guests to log into Hilton Honors Account

• Korea: enabling guests to log into the Hilton Honors account Legal Rights & Agreement Rules

Legal Basis

• Korea: enabling guests to log into the Hilton Honors account Legal Rights & Agreement Rules

Article 15(1)(1) (Consent) of the PIPA)

• Korea: enabling guests to log into the Hilton Honors account Legal Rights & Agreement Rules

Source

• Korea: enabling guests to log into the Hilton Honors account Legal Rights & Agreement Rules

Directly from consumers

• Korea: enabling guests to log into the Hilton Honors account Legal Rights & Agreement Rules

From third parties such as travel booking platforms and credit card providers

• Korea: enabling guests to log into the Hilton Honors account Legal Rights & Agreement Rules

From demographics companies

• Korea: enabling guests to log into the Hilton Honors account Legal Rights & Agreement Rules

Items of Personal Information Processed

• Korea: enabling guests to log into the Hilton Honors account Legal Rights & Agreement Rules

Preferred language

• Korea: enabling guests to log into the Hilton Honors account Legal Rights & Agreement Rules

Room preference

• Korea: items processed for Hilton Honors account login Legal Rights & Agreement Rules

Room selection and assignment

• Korea: items processed for Hilton Honors account login Legal Rights & Agreement Rules

Arrival time

• Korea: items processed for Hilton Honors account login Legal Rights & Agreement Rules

Departure date

• Korea: items processed for Hilton Honors account login Legal Rights & Agreement Rules

Your MyWay preferences

• Korea: items processed for Hilton Honors account login Legal Rights & Agreement Rules

Your email and consent preferences (such as opt-out or opt-in, as applicable)

• Korea: items processed for Hilton Honors account login Legal Rights & Agreement Rules

Description of an incident that occurs at a Hilton property or involves a Hilton employee, including incidents related to safety, security, violation of law, violation of applicable policy, or violation of contractual obligation

• Korea: items processed for Hilton Honors account login Legal Rights & Agreement Rules

Description of a complaint that you make to us, including your free form textual feedback if you are a Hilton Honors member

• Korea: items processed for Hilton Honors account login Legal Rights & Agreement Rules

Spa and wellness service or treatment details (such as date, time, and type of service)

• Korea: items processed for Hilton Honors account login Legal Rights & Agreement Rules

Spending amount

• Korea: items processed for Hilton Honors account login Legal Rights & Agreement Rules

Fulfill and manage corporate travel reservations

• Korea: fulfilling and managing corporate travel reservations Legal Rights & Agreement Rules

Legal Basis

• Korea: fulfilling and managing corporate travel reservations Legal Rights & Agreement Rules

Article 15(1)4 of the PIPA (Execution and Performance of a Contract)

• Korea: fulfilling and managing corporate travel reservations Legal Rights & Agreement Rules

Source

• Korea: fulfilling and managing corporate travel reservations Legal Rights & Agreement Rules

Directly from consumers

• Korea: fulfilling and managing corporate travel reservations Legal Rights & Agreement Rules

From third parties such as travel booking platforms and credit card providers

• Korea: fulfilling and managing corporate travel reservations Legal Rights & Agreement Rules

Items of Personal Information Processed

• Korea: fulfilling and managing corporate travel reservations Legal Rights & Agreement Rules

Corporate travel planner contact information (name, title, company, business phone, email and address)

• Korea: fulfilling and managing corporate travel reservations Legal Rights & Agreement Rules

Contact members of the media and social media influencers in their business capacity

• Korea: contacting members of the media and social media influencers Legal Rights & Agreement Rules

Legal Basis

• Korea: contacting members of the media and social media influencers Legal Rights & Agreement Rules

Article 15(1)(1) (Consent) of the PIPA)

• Korea: contacting members of the media and social media influencers Legal Rights & Agreement Rules

Source

• Korea: contacting members of the media and social media influencers Legal Rights & Agreement Rules

Directly from consumers

• Korea: contacting members of the media and social media influencers Legal Rights & Agreement Rules

From third parties such as travel booking platforms and credit card providers

• Korea: contacting members of the media and social media influencers Legal Rights & Agreement Rules

Items of Personal Information Processed

• Korea: contacting members of the media and social media influencers Legal Rights & Agreement Rules

Travel agent number and name

• Korea: contacting members of the media and social media influencers Legal Rights & Agreement Rules

Properly attribute points to consumers who participate in airline loyalty programs

• Korea: attributing points to airline loyalty participants Legal Rights & Agreement Rules

Legal Basis

• Korea: attributing points to airline loyalty participants Legal Rights & Agreement Rules

Article 15(1)4 of the PIPA (Execution and Performance of a Contract)

• Korea: attributing points to airline loyalty participants Legal Rights & Agreement Rules

Source

• Korea: attributing points to airline loyalty participants Legal Rights & Agreement Rules

Directly from consumers

• Korea: attributing points to airline loyalty participants Legal Rights & Agreement Rules

From third parties such as travel booking platforms and credit card providers

• Korea: attributing points to airline loyalty participants Legal Rights & Agreement Rules

Items of Personal Information Processed

• Korea: attributing points to airline loyalty participants Legal Rights & Agreement Rules

Airline partner number and name

• Korea: attributing points to airline loyalty participants Legal Rights & Agreement Rules

Ensure safety and security, and enable guests to park at our properties

• Korea: enabling safety and security and guest parking Legal Rights & Agreement Rules

Legal Basis

• Korea: enabling safety and security and guest parking Legal Rights & Agreement Rules

Article 15(1)(6) Legitimate Interest

• Korea: enabling safety and security and guest parking Legal Rights & Agreement Rules

Source

• Korea: enabling safety and security and guest parking Legal Rights & Agreement Rules

Directly from consumers

• Korea: enabling safety and security and guest parking Legal Rights & Agreement Rules

Directly from cameras located on and around the property

• Korea: enabling safety and security and guest parking Legal Rights & Agreement Rules

Items of Personal Information Processed

• Korea: enabling safety and security and guest parking Legal Rights & Agreement Rules

Vehicle information

• Korea: enabling safety and security and guest parking Legal Rights & Agreement Rules

Protect guests, employees and visitors to properties

• Korea: protecting guests, employees and visitors to properties Legal Rights & Agreement Rules

Legal Basis

• Korea: protecting guests, employees and visitors to properties Legal Rights & Agreement Rules

Article 15(1)(6) Legitimate Interest

• Korea: protecting guests, employees and visitors to properties Legal Rights & Agreement Rules

Source

• Korea: protecting guests, employees and visitors to properties Legal Rights & Agreement Rules

Directly from cameras located on and around the property

• Korea: protecting guests, employees and visitors to properties Legal Rights & Agreement Rules

Items of Personal Information Processed

• Korea: protecting guests, employees and visitors to properties Legal Rights & Agreement Rules

Images or footage captured by closed circuit television (CCTV)

• Korea: protecting guests, employees and visitors to properties Legal Rights & Agreement Rules

Internal and external promotions and communications

• Korea: internal and external promotions and communications Legal Rights & Agreement Rules

Legal Basis

• Korea: internal and external promotions and communications Legal Rights & Agreement Rules

Article 15(1)(1) (Consent) of the PIPA)

• Korea: internal and external promotions and communications Legal Rights & Agreement Rules

Source

• Korea: internal and external promotions and communications Legal Rights & Agreement Rules

Directly from cameras utilized on the property

• Korea: internal and external promotions and communications Legal Rights & Agreement Rules

Items of Personal Information Processed

• Korea: internal and external promotions and communications Legal Rights & Agreement Rules

Promotional images or footage captured by on-property photographers

• Korea: internal and external promotions and communications Legal Rights & Agreement Rules

Support marketing efforts

• Korea: supporting marketing efforts Legal Rights & Agreement Rules

Legal Basis

• Korea: supporting marketing efforts Legal Rights & Agreement Rules

Article 15(1)(1) (Consent) of the PIPA)

• Korea: supporting marketing efforts Legal Rights & Agreement Rules

Source

• Korea: supporting marketing efforts Legal Rights & Agreement Rules

Directly from consumers

• Korea: supporting marketing efforts Legal Rights & Agreement Rules

Indirectly from consumers by reviewing publicly available information on their social media channels

• Korea: supporting marketing efforts Legal Rights & Agreement Rules

From publicly available online sources

• Korea: supporting marketing efforts Legal Rights & Agreement Rules

Items of Personal Information Processed

• Korea: supporting marketing efforts Legal Rights & Agreement Rules

Booking engine

• Korea: supporting marketing efforts Legal Rights & Agreement Rules

Whether you have a Hilton and American Express Co-Branded Credit Card

• Korea: supporting marketing efforts Legal Rights & Agreement Rules

Whether your Hilton and Amazon accounts are linked

• Korea: supporting marketing efforts Legal Rights & Agreement Rules

Whether your Hilton and Lyft accounts are linked

• Korea: supporting marketing efforts Legal Rights & Agreement Rules

Spending amount

• Korea: supporting marketing efforts Legal Rights & Agreement Rules

Share that data with advertising networks who serve personalized advertisements

• Korea: sharing data with advertising networks serving personalised advertisements Legal Rights & Agreement Rules

Legal Basis

• Korea: sharing data with advertising networks serving personalised advertisements Legal Rights & Agreement Rules

Article 15(1)(1) (Consent) of the PIPA)

• Korea: sharing data with advertising networks serving personalised advertisements Legal Rights & Agreement Rules

Source

• Korea: sharing data with advertising networks serving personalised advertisements Legal Rights & Agreement Rules

Directly from consumers

• Korea: sharing data with advertising networks serving personalised advertisements Legal Rights & Agreement Rules

Indirectly from consumers by reviewing publicly available information on their social media channels

• Korea: sharing data with advertising networks serving personalised advertisements Legal Rights & Agreement Rules

From publicly available online sources

• Korea: sharing data with advertising networks serving personalised advertisements Legal Rights & Agreement Rules

Items of Personal Information Processed

• Korea: sharing data with advertising networks serving personalised advertisements Legal Rights & Agreement Rules

Internet or other electronic network activity information, including information regarding a customer's interaction with Hilton websites, applications, or advertisements

• Korea: sharing data with advertising networks serving personalised advertisements Legal Rights & Agreement Rules

IP addresses

• Korea: sharing data with advertising networks serving personalised advertisements Legal Rights & Agreement Rules

Session IDs

• Korea: sharing data with advertising networks serving personalised advertisements Legal Rights & Agreement Rules

Device information (including MAC address)

• Korea: sharing data with advertising networks serving personalised advertisements Legal Rights & Agreement Rules

Troubleshoot and resolve website issues

• Korea: troubleshooting and resolving website issues Legal Rights & Agreement Rules

Legal Basis

• Korea: troubleshooting and resolving website issues Legal Rights & Agreement Rules

Article 15(1)(6) Legitimate Interest

• Korea: troubleshooting and resolving website issues Legal Rights & Agreement Rules

Source

• Korea: troubleshooting and resolving website issues Legal Rights & Agreement Rules

Directly from consumers

• Korea: troubleshooting and resolving website issues Legal Rights & Agreement Rules

Items of Personal Information Processed

• Korea: troubleshooting and resolving website issues Legal Rights & Agreement Rules

IP addresses

• Korea: troubleshooting and resolving website issues Legal Rights & Agreement Rules

Customer ratings and survey responses

• Korea: troubleshooting and resolving website issues Legal Rights & Agreement Rules

Free form textual feedback

• Korea: troubleshooting and resolving website issues Legal Rights & Agreement Rules

Show you targeted advertisements on media

• Korea: showing targeted advertisements on media Legal Rights & Agreement Rules

Legal Basis

• Korea: showing targeted advertisements on media Legal Rights & Agreement Rules

Article 15(1)(1) (Consent) of the PIPA)

• Korea: showing targeted advertisements on media Legal Rights & Agreement Rules

Source

• Korea: showing targeted advertisements on media Legal Rights & Agreement Rules

Directly from consumers

• Korea: showing targeted advertisements on media Legal Rights & Agreement Rules

Indirectly from consumers by reviewing publicly available information on their social media channels

• Korea: showing targeted advertisements on media Legal Rights & Agreement Rules

From publicly available online sources

• Korea: showing targeted advertisements on media Legal Rights & Agreement Rules

Items of Personal Information Processed

• Korea: showing targeted advertisements on media Legal Rights & Agreement Rules

Booking engine

• Korea: showing targeted advertisements on media Legal Rights & Agreement Rules

Whether you have a Hilton and American Express Co-Branded Credit Card

• Korea: items processed for showing targeted advertisements on media Legal Rights & Agreement Rules

Whether your Hilton and Amazon accounts are linked

• Korea: items processed for showing targeted advertisements on media Legal Rights & Agreement Rules

Whether your Hilton and Lyft accounts are linked

• Korea: items processed for showing targeted advertisements on media Legal Rights & Agreement Rules

Evaluate the usage of different streaming services

• Korea: evaluating the usage of different streaming services Legal Rights & Agreement Rules

Legal Basis

• Korea: evaluating the usage of different streaming services Legal Rights & Agreement Rules

Article 15(1)(6) Legitimate Interest

• Korea: evaluating the usage of different streaming services Legal Rights & Agreement Rules

Source

• Korea: evaluating the usage of different streaming services Legal Rights & Agreement Rules

Directly from consumer as a result of their logging into a streaming service through Connected Room functionality

• Korea: evaluating the usage of different streaming services Legal Rights & Agreement Rules

Items of Personal Information Processed

• Korea: evaluating the usage of different streaming services Legal Rights & Agreement Rules

Streaming service usage (including service used, hours of use, launch method, and log-out method)

• Korea: evaluating the usage of different streaming services Legal Rights & Agreement Rules

Provide you with benefits associated with your co-branded card

• Korea: benefits associated with the co-branded card Legal Rights & Agreement Rules

Legal Basis

• Korea: benefits associated with the co-branded card Legal Rights & Agreement Rules

Article 15(1)4 of the PIPA (Execution and Performance of a Contract)

• Korea: benefits associated with the co-branded card Legal Rights & Agreement Rules

Source

• Korea: benefits associated with the co-branded card Legal Rights & Agreement Rules

From American Express

• Korea: benefits associated with the co-branded card Legal Rights & Agreement Rules

Items of Personal Information Processed

• Korea: benefits associated with the co-branded card Legal Rights & Agreement Rules

Whether you have a Hilton and American Express Co-Branded Credit Card

• Korea: benefits associated with the co-branded card Legal Rights & Agreement Rules

Facilitate use of Honors points as part of Amazon's Shop with Points program

• Korea: facilitating Honors points in Amazon's Shop with Points programme Legal Rights & Agreement Rules

Legal Basis

• Korea: facilitating Honors points in Amazon's Shop with Points programme Legal Rights & Agreement Rules

Article 15(1)4 of the PIPA (Execution and Performance of a Contract)

• Korea: facilitating Honors points in Amazon's Shop with Points programme Legal Rights & Agreement Rules

Source

• Korea: facilitating Honors points in Amazon's Shop with Points programme Legal Rights & Agreement Rules

From Amazon

• Korea: facilitating Honors points in Amazon's Shop with Points programme Legal Rights & Agreement Rules

Items of Personal Information Processed

• Korea: facilitating Honors points in Amazon's Shop with Points programme Legal Rights & Agreement Rules

Whether your Hilton and Amazon accounts are linked

• Korea: facilitating Honors points in Amazon's Shop with Points programme Legal Rights & Agreement Rules

Fulfill Digital Key sharing requests, enable guest access to guest room and hotel facilities

• Korea: Digital Key sharing and guest access to room and facilities Legal Rights & Agreement Rules

Legal Basis

• Korea: Digital Key sharing and guest access to room and facilities Legal Rights & Agreement Rules

Article 15(1)(1) (Consent) of the PIPA)

• Korea: Digital Key sharing and guest access to room and facilities Legal Rights & Agreement Rules

Source

• Korea: Digital Key sharing and guest access to room and facilities Legal Rights & Agreement Rules

Directly from consumers

• Korea: Digital Key sharing and guest access to room and facilities Legal Rights & Agreement Rules

Items of Personal Information Processed

• Korea: Digital Key sharing and guest access to room and facilities Legal Rights & Agreement Rules

Geolocation information

• Korea: Digital Key sharing and guest access to room and facilities Legal Rights & Agreement Rules

Provide a more personalized welcome and stay experience, respond to service concerns in order to better serve our guests

• Korea: a more personalized welcome and stay experience, and responding to service concerns Legal Rights & Agreement Rules

Legal Basis

• Korea: a more personalized welcome and stay experience, and responding to service concerns Legal Rights & Agreement Rules

Article 15(1)(6) Legitimate Interest

• Korea: a more personalized welcome and stay experience, and responding to service concerns Legal Rights & Agreement Rules

Article 15(1)(1) (Consent) of the PIPA)

• Korea: a more personalized welcome and stay experience, and responding to service concerns Legal Rights & Agreement Rules

Source

• Korea: a more personalized welcome and stay experience, and responding to service concerns Legal Rights & Agreement Rules

Directly from consumers

• Korea: a more personalized welcome and stay experience, and responding to service concerns Legal Rights & Agreement Rules

Indirectly from consumers by reviewing publicly available information on their social media channels

• Korea: a more personalized welcome and stay experience, and responding to service concerns Legal Rights & Agreement Rules

From publicly available online sources

• Korea: a more personalized welcome and stay experience, and responding to service concerns Legal Rights & Agreement Rules

Items of Personal Information Processed

• Korea: a more personalized welcome and stay experience, and responding to service concerns Legal Rights & Agreement Rules

Social media information; publicly available online information (including through social media platforms)

• Korea: a more personalized welcome and stay experience, and responding to service concerns Legal Rights & Agreement Rules

Link with customer information that Hilton already has on file

• Korea: linking with customer information Hilton already has on file Linking & Identification

Legal Basis

• Korea: linking with customer information Hilton already has on file Linking & Identification

Article 15(1)(1) (Consent) of the PIPA)

• Korea: linking with customer information Hilton already has on file Linking & Identification

Source

• Korea: linking with customer information Hilton already has on file Linking & Identification

Directly from consumers

• Korea: linking with customer information Hilton already has on file Linking & Identification

Indirectly from consumers by reviewing publicly available information on their social media channels

• Korea: linking with customer information Hilton already has on file Linking & Identification

From publicly available online sources

• Korea: linking with customer information Hilton already has on file Linking & Identification

Items of Personal Information Processed

• Korea: linking with customer information Hilton already has on file Linking & Identification

Demographics data

• Korea: linking with customer information Hilton already has on file Linking & Identification

Send you the communications you would like to receive

• Korea: sending the communications the guest would like to receive Legal Rights & Agreement Rules

Legal Basis

• Korea: sending the communications the guest would like to receive Legal Rights & Agreement Rules

Article 15(1)(1) (Consent) of the PIPA)

• Korea: sending the communications the guest would like to receive Legal Rights & Agreement Rules

Source

• Korea: sending the communications the guest would like to receive Legal Rights & Agreement Rules

Directly from consumers

• Korea: sending the communications the guest would like to receive Legal Rights & Agreement Rules

Items of Personal Information Processed

• Korea: sending the communications the guest would like to receive Legal Rights & Agreement Rules

Your MyWay preferences

• Korea: sending the communications the guest would like to receive Legal Rights & Agreement Rules

Determine guests' eligibility for special or promotional rates

• Korea without consent: eligibility for special or promotional rates Legal Rights & Agreement Rules

Legal Basis

• Korea without consent: eligibility for special or promotional rates Legal Rights & Agreement Rules

Article 15(1)(1) (Consent) of the PIPA)

• Korea without consent: eligibility for special or promotional rates Legal Rights & Agreement Rules

Source

• Korea without consent: eligibility for special or promotional rates Legal Rights & Agreement Rules

Directly from consumers

• Korea without consent: eligibility for special or promotional rates Legal Rights & Agreement Rules

Items of Personal Information Processed

• Korea without consent: eligibility for special or promotional rates Legal Rights & Agreement Rules

Name

• Korea without consent: eligibility for special or promotional rates Legal Rights & Agreement Rules

Hilton Honors number

• Korea without consent: eligibility for special or promotional rates Legal Rights & Agreement Rules

Corporate number and name

• Korea without consent: eligibility for special or promotional rates Legal Rights & Agreement Rules

Travel agent number and name

• Korea without consent: eligibility for special or promotional rates Legal Rights & Agreement Rules

Respond to safety and security concerns Comply with legal or contractual obligations

• Korea: responding to safety and security concerns and complying with obligations Legal Rights & Agreement Rules

Legal Basis

• Korea: responding to safety and security concerns and complying with obligations Legal Rights & Agreement Rules

Article 15(1)(6) Legitimate Interest

• Korea: responding to safety and security concerns and complying with obligations Legal Rights & Agreement Rules

Source

• Korea: responding to safety and security concerns and complying with obligations Legal Rights & Agreement Rules

Directly from consumers

• Korea: responding to safety and security concerns and complying with obligations Legal Rights & Agreement Rules

Items of Personal Information Processed

• Korea: responding to safety and security concerns and complying with obligations Legal Rights & Agreement Rules

Description of an incident that occurs at a Hilton property or involves a Hilton employee, including incidents related to safety, security, violation of law, violation of applicable policy, or violation of contractual obligation

• Korea: responding to safety and security concerns and complying with obligations Legal Rights & Agreement Rules

Description of a complaint that you make to us, including your free form textual feedback if you are a Hilton Honors member

• Korea: responding to safety and security concerns and complying with obligations Legal Rights & Agreement Rules

Spa and wellness service or treatment details (such as date, time, and type of service)

• Korea: responding to safety and security concerns and complying with obligations Legal Rights & Agreement Rules

Personal information processed without the data subject’s consent. Hilton processes the following personal information without the consent of the data subject.

• Korea: the list of personal information processed without consent Legal Rights & Agreement Rules

Collapse All

Fulfill guest reservations and verify identity

• Korea: fulfilling guest reservations and verifying identity Legal Rights & Agreement Rules

Legal Basis

• Korea: fulfilling guest reservations and verifying identity Legal Rights & Agreement Rules

Article 15(1)4 of the PIPA (Execution and Performance of a Contract)

• Korea: fulfilling guest reservations and verifying identity Legal Rights & Agreement Rules

Source

• Korea: fulfilling guest reservations and verifying identity Legal Rights & Agreement Rules

Directly from consumers

• Korea: fulfilling guest reservations and verifying identity Legal Rights & Agreement Rules

From third parties such as travel booking platforms and credit card providers

• Korea: fulfilling guest reservations and verifying identity Legal Rights & Agreement Rules

Items of Personal Information Processed

• Korea: fulfilling guest reservations and verifying identity Legal Rights & Agreement Rules

Name

• Korea: fulfilling guest reservations and verifying identity Legal Rights & Agreement Rules

Telephone and fax number

• Korea: fulfilling guest reservations and verifying identity Legal Rights & Agreement Rules

Email address

• Korea: fulfilling guest reservations and verifying identity Legal Rights & Agreement Rules

Home address

• Korea: fulfilling guest reservations and verifying identity Legal Rights & Agreement Rules

Hilton Honors number

• Korea: fulfilling guest reservations and verifying identity Legal Rights & Agreement Rules

Send guests communications relating to their reservation

• Korea: sending guests communications relating to the reservation Legal Rights & Agreement Rules

Legal Basis

• Korea: sending guests communications relating to the reservation Legal Rights & Agreement Rules

Article 15(1)4 of the PIPA (Execution and Performance of a Contract)

• Korea: sending guests communications relating to the reservation Legal Rights & Agreement Rules

Source

• Korea: sending guests communications relating to the reservation Legal Rights & Agreement Rules

Directly from consumers

• Korea: sending guests communications relating to the reservation Legal Rights & Agreement Rules

From third parties such as travel booking platforms and credit card providers

• Korea: sending guests communications relating to the reservation Legal Rights & Agreement Rules

From demographics companies

• Korea: sending guests communications relating to the reservation Legal Rights & Agreement Rules

Items of Personal Information Processed

• Korea without consent: items processed for reservation communications Legal Rights & Agreement Rules

Name

• Korea without consent: items processed for reservation communications Legal Rights & Agreement Rules

Email address

• Korea without consent: items processed for reservation communications Legal Rights & Agreement Rules

Home address

• Korea without consent: items processed for reservation communications Legal Rights & Agreement Rules

Hilton Honors number

• Korea without consent: items processed for reservation communications Legal Rights & Agreement Rules

Provide customer service and support

• Korea without consent: customer service and support — legal basis, sources and first items Legal Rights & Agreement Rules

Legal Basis

• Korea without consent: customer service and support — legal basis, sources and first items Legal Rights & Agreement Rules

Article 15(1)4 of the PIPA (Execution and Performance of a Contract)

• Korea without consent: customer service and support — legal basis, sources and first items Legal Rights & Agreement Rules

Source

• Korea without consent: customer service and support — legal basis, sources and first items Legal Rights & Agreement Rules

Directly from consumers

• Korea without consent: customer service and support — legal basis, sources and first items Legal Rights & Agreement Rules

From third parties such as travel booking platforms and credit card providers

• Korea without consent: customer service and support — legal basis, sources and first items Legal Rights & Agreement Rules

Items of Personal Information Processed

• Korea without consent: customer service and support — legal basis, sources and first items Legal Rights & Agreement Rules

Name

• Korea without consent: customer service and support — legal basis, sources and first items Legal Rights & Agreement Rules

Telephone and fax numbers

• Korea without consent: customer service and support — legal basis, sources and first items Legal Rights & Agreement Rules

Email address

• Korea without consent: customer service and support — legal basis, sources and first items Legal Rights & Agreement Rules

Home address

• Korea without consent: customer service and support — legal basis, sources and first items Legal Rights & Agreement Rules

Hilton Honors number

• Korea without consent: customer service — remaining items processed Legal Rights & Agreement Rules

WeChat name and profile photo

• Korea without consent: customer service — remaining items processed Legal Rights & Agreement Rules

Arrival time

• Korea without consent: customer service — remaining items processed Legal Rights & Agreement Rules

Corporate travel planner contact information (name, title, company, business phone, email and address)

• Korea without consent: customer service — remaining items processed Legal Rights & Agreement Rules

Booking engine

• Korea without consent: customer service — remaining items processed Legal Rights & Agreement Rules

Whether you have a Hilton and American Express Co-Branded Credit Card

• Korea without consent: customer service — remaining items processed Legal Rights & Agreement Rules

Whether your Hilton and Amazon accounts are linked

• Korea without consent: customer service — remaining items processed Legal Rights & Agreement Rules

Whether your Hilton and Lyft accounts are linked

• Korea without consent: customer service — remaining items processed Legal Rights & Agreement Rules

2. Rights and Obligations of Data Subjects

• Korea: the rights of data subjects under the PIPA Legal Rights & Agreement Rules

As residents of Korea, you are entitled to the following rights under PIPA:

• Korea: the rights of data subjects under the PIPA Legal Rights & Agreement Rules

Right to be Informed

• Korea: the rights of data subjects under the PIPA Legal Rights & Agreement Rules

Right to Access

• Korea: the rights of data subjects under the PIPA Legal Rights & Agreement Rules

Right to Rectification

• Korea: the rights of data subjects under the PIPA Legal Rights & Agreement Rules

Right to Erasure

• Korea: the rights of data subjects under the PIPA Legal Rights & Agreement Rules

Right to Object/Opt-out or Suspend Processing

• Korea: the rights of data subjects under the PIPA Legal Rights & Agreement Rules

Right to Data Portability

• Korea: the rights of data subjects under the PIPA Legal Rights & Agreement Rules

Right to Contest Automated Decision-making

• Korea: the rights of data subjects under the PIPA Legal Rights & Agreement Rules

Exercise Your Rights: Data subjects may, at any time, exercise their rights and should direct their requests to the following department using the below contact information. The Data Protection Office will respond promptly within the time period permitted by law.

• Korea: how to exercise the rights, and the Data Protection Office contacts Legal Rights & Agreement Rules

Department: Data Protection Office

• Korea: how to exercise the rights, and the Data Protection Office contacts Legal Rights & Agreement Rules

Telephone: 070-4732-6767

• Korea: how to exercise the rights, and the Data Protection Office contacts Legal Rights & Agreement Rules

Email: DataProtectionOffice@hilton.com

• Korea: how to exercise the rights, and the Data Protection Office contacts Legal Rights & Agreement Rules

Address: Attn: Data Protection Office, 7930 Jones Branch Drive, McLean, VA 22102, USA

• Korea: how to exercise the rights, and the Data Protection Office contacts Legal Rights & Agreement Rules

Data Subject Rights Portal at datarights.hilton.com

• Korea: how to exercise the rights, and the Data Protection Office contacts Legal Rights & Agreement Rules

In some circumstances you may have the option to submit a request on behalf of someone else. If you submit a request on behalf of someone else, then you may be asked to provide proof of authorization.

• Korea: submitting a request on behalf of someone else Legal Rights & Agreement Rules

Remedies for Infringement of Rights and Interests: To seek a remedy for personal information infringements, you may apply for dispute resolution or consultation with institutions such as the Korea Internet & Security Agency's (KISA) Personal Information Infringement Report Center, the Privacy Infringement Reporting Center. For other reports and consultations on personal information infringement, please contact the following institutions:

• Korea: remedies for infringement — dispute resolution and the reporting institutions Legal Rights & Agreement Rules

Personal Information Dispute Mediation Committee: (without area code) 1833-6972 (www.kopico.go.kr)

• Korea: remedies for infringement — dispute resolution and the reporting institutions Legal Rights & Agreement Rules

KISA Personal Information Infringement Report Center: (without area code) 118 (privacy.kisa.or.kr)

• Korea: remedies for infringement — dispute resolution and the reporting institutions Legal Rights & Agreement Rules

National Police Agency: (without area code) 182 (ecrm.police.go.kr)

• Korea: remedies for infringement — dispute resolution and the reporting institutions Legal Rights & Agreement Rules

3. Cookies and Other Technologies

• Korea: cookies and other technologies used to provide personalized offers and content Data Access & Collection

Our site may use "Cookies" or "Other Technologies" (such as "pixel tags," "web beacons," "clear GIFs", links in emails, JavaScript, device IDs assigned by Google or Apple, or similar technologies) to provide personalized offers and content. Cookies are small text files that are stored on your computer or mobile device when you visit a website. For additional information on Cookies and Other Technologies, please refer to Online and Mobile Information We Collect.

• Korea: cookies and other technologies used to provide personalized offers and content Data Access & Collection

Behavioral Information: If you consent to the use of cookies and other technologies when you interact with our website or mobile application, Hilton will process and collect behavioral information related to such interactions. If you consent and are logged into your Hilton Honors account, such behavioral information will be associated with your account. Behavioral information is used to deliver personalized advertisements, optimize our website and mobile application, and support internal analysis. Behavioral information is retained as necessary to fulfill the purpose for which it was collected or as required or permitted by law.

• Korea: behavioral information collected on consent and associated with a logged-in account Use & Processing

Allowing/Blocking Cookies and Other Technologies: For instructions on how to remove or block Cookies from your device at any time, please refer to the section titled Managing Cookies and Other Technologies in the main body of this Statement.

• Korea: instructions on allowing or blocking cookies are in the main body Account & Service Control

4. International Transfers of Personal Information

• Korea: transfer of personal information outside Korea to the United States with consent Sharing & Disclosure

With your consent, we will collect, process, and transfer your personal information outside of Korea to the United States, as necessary to fulfill your bookings and enable you to participate in the Hilton Honors program.

• Korea: transfer of personal information outside Korea to the United States with consent Sharing & Disclosure

5. How We Protect Personal Information

• Korea: reasonable steps to protect personal information, with the detail in the main body Security & Safeguards

We take reasonable steps to: (i) protect personal information from unauthorized access, disclosure, alteration, or destruction, and (ii) keep personal information appropriately accurate and current by using appropriate technical and organizational measures.

• Korea: reasonable steps to protect personal information, with the detail in the main body Security & Safeguards

For additional details, please refer to the How We Protect Information section in the main body of this Statement.

• Korea: reasonable steps to protect personal information, with the detail in the main body Security & Safeguards

6. Changes to the Privacy Policy

• Korea: when the policy takes effect and how to get the previous version Legal Rights & Agreement Rules

This Privacy Policy is effective from the last updated date noted at the top of this Statement. For the previous version of this Statement, please email privacy@hilton.com.

• Korea: when the policy takes effect and how to get the previous version Legal Rights & Agreement Rules

For a summary of the material changes, please refer to the Changes to this Statement section.

• Korea: when the policy takes effect and how to get the previous version Legal Rights & Agreement Rules

Back to Top

Appendix A-11: Mexico Residents

• Mexico: personal information shared with Invex for telemarketing on the co-brand card Sharing & Disclosure

This Appendix provides additional information for individuals residing in Mexico. If you are based in Mexico, we may share the following personal information with Invex, a third party that provides telemarketing services on behalf of the Hilton/Invex co-brand credit card:

• Mexico: personal information shared with Invex for telemarketing on the co-brand card Sharing & Disclosure

Honors Number

• Mexico: personal information shared with Invex for telemarketing on the co-brand card Sharing & Disclosure

Honors Loyalty Tier

• Mexico: personal information shared with Invex for telemarketing on the co-brand card Sharing & Disclosure

First Name

• Mexico: personal information shared with Invex for telemarketing on the co-brand card Sharing & Disclosure

Last Name

• Mexico: personal information shared with Invex for telemarketing on the co-brand card Sharing & Disclosure

Email Address

• Mexico: personal information shared with Invex for telemarketing on the co-brand card Sharing & Disclosure

Phone Number

• Mexico: personal information shared with Invex for telemarketing on the co-brand card Sharing & Disclosure

Co-Brand Card Participation (Y/N)

• Mexico: personal information shared with Invex for telemarketing on the co-brand card Sharing & Disclosure

Last Stay Date

• Mexico: personal information shared with Invex for telemarketing on the co-brand card Sharing & Disclosure

Next Stay Date

• Mexico: personal information shared with Invex for telemarketing on the co-brand card Sharing & Disclosure

You may opt out of receiving telemarketing calls at any time by following the instructions provided in Invex’s privacy statement, available here.

• Mexico: personal information shared with Invex for telemarketing on the co-brand card Sharing & Disclosure

Appendix A-12: Albania Residents

• Albania: additional information for residents, with an Albanian translation of the Statement Legal Rights & Agreement Rules

This Appendix provides additional information for individuals residing in Albania. The Albanian translation of the Global Privacy Statement is available here.

• Albania: additional information for residents, with an Albanian translation of the Statement Legal Rights & Agreement Rules

Appendix B: Hilton Premium Club Japan Program

• Appendix B: Hilton Premium Club Japan programme information Data Access & Collection

If you are a member of Hilton Premium Club Japan (HPCJ), including Hilton Dining Plus, the following information applies to the processing of your personal information in addition to the information disclosed in the remainder of this Statement.

• Appendix B: Hilton Premium Club Japan programme information Data Access & Collection

We have collected the following categories of personal information in the past 12 months:

• Appendix B: Hilton Premium Club Japan programme information Data Access & Collection

Collapse All

HPCJ member number

• HPCJ: member number — source and first business purposes Data Access & Collection

We have obtained this personal information from the following sources:

• HPCJ: member number — source and first business purposes Data Access & Collection

Directly from members themselves

• HPCJ: member number — source and first business purposes Data Access & Collection

We collected this personal information for the following additional business or commercial purposes:

• HPCJ: member number — source and first business purposes Data Access & Collection

Fulfill guest reservations

• HPCJ: member number — source and first business purposes Data Access & Collection

Send guests communications relating to their reservations

• HPCJ: member number — source and first business purposes Data Access & Collection

Administer membership and activity in the Hilton Premium Club Japan Program loyalty program

• HPCJ: member number — source and first business purposes Data Access & Collection

Provide customer service and support

• HPCJ: member number — source and first business purposes Data Access & Collection

Verify identity

• HPCJ: member number — source and first business purposes Data Access & Collection

Send marketing communications via email, direct mail, and social media

• HPCJ: member number — source and first business purposes Data Access & Collection

Perform analytics in order to provide guests with personalized offers and content

• HPCJ: member number — source and first business purposes Data Access & Collection

Perform analytics to improve business operations

• HPCJ: member number — remaining business purposes Data Access & Collection

Determine guests' eligibility for special or promotional rates

• HPCJ: member number — remaining business purposes Data Access & Collection

Process payments including conducting strong customer authentication (SCA) when required by law

• HPCJ: member number — remaining business purposes Data Access & Collection

Process transactions with partners

• HPCJ: member number — remaining business purposes Data Access & Collection

Administer contests and sweepstakes

• HPCJ: member number — remaining business purposes Data Access & Collection

Detect and prevent fraud

• HPCJ: member number — remaining business purposes Data Access & Collection

We have shared this personal information with the following additional categories of third parties

• HPCJ: member number — additional third parties shared with Sharing & Disclosure

Payment card issuers and payment processors

• HPCJ: member number — additional third parties shared with Sharing & Disclosure

Hilton's Third-Party Partner

• HPCJ: member number — additional third parties shared with Sharing & Disclosure

Service providers who perform tasks on behalf of Hilton, which may include those who send marketing communications on our behalf

• HPCJ: member number — additional third parties shared with Sharing & Disclosure

Employers pursuant to corporate agreements, employee consent, and as permitted by law

• HPCJ: member number — additional third parties shared with Sharing & Disclosure

Entities that have arranged a special rate plan with Hilton and/or organized an event and/or room block with Hilton

• HPCJ: member number — additional third parties shared with Sharing & Disclosure

Government agencies pursuant to legal requirements in some countries

• HPCJ: member number — additional third parties shared with Sharing & Disclosure

Third-party advertisers, for optimization and personalization on their platforms

• HPCJ: member number — additional third parties shared with Sharing & Disclosure

Hilton’s Third-Party Operator

• HPCJ: member number — additional third parties shared with Sharing & Disclosure

Name

• HPCJ: name — source, purposes and no additional sharing Data Access & Collection

We have obtained this personal information from the following sources:

• HPCJ: name — source, purposes and no additional sharing Data Access & Collection

Directly from consumers themselves

• HPCJ: name — source, purposes and no additional sharing Data Access & Collection

We collected this personal information for the following additional business or commercial purposes:

• HPCJ: name — source, purposes and no additional sharing Data Access & Collection

Administer membership and activity in the Hilton Premium Club Japan Program loyalty program

• HPCJ: name — source, purposes and no additional sharing Data Access & Collection

Conduct telephone calls to inquire about new memberships

• HPCJ: name — source, purposes and no additional sharing Data Access & Collection

We have shared this personal information with the following additional categories of third parties

• HPCJ: name — source, purposes and no additional sharing Data Access & Collection

We do not share name with any additional third parties.

• HPCJ: name — source, purposes and no additional sharing Data Access & Collection

Telephone and fax numbers

• HPCJ: telephone and fax numbers — source, purposes and sharing Data Access & Collection

We have obtained this personal information from the following sources:

• HPCJ: telephone and fax numbers — source, purposes and sharing Data Access & Collection

Directly from consumers themselves

• HPCJ: telephone and fax numbers — source, purposes and sharing Data Access & Collection

We collected this personal information for the following additional business or commercial purposes:

• HPCJ: telephone and fax numbers — source, purposes and sharing Data Access & Collection

Administer membership and activity in the Hilton Premium Club Japan Program loyalty program

• HPCJ: telephone and fax numbers — source, purposes and sharing Data Access & Collection

Conduct telephone calls to inquire about new memberships

• HPCJ: telephone and fax numbers — source, purposes and sharing Data Access & Collection

Process payments, including conducting strong customer authentication (SCA) when required by law

• HPCJ: telephone and fax numbers — source, purposes and sharing Data Access & Collection

We have shared this personal information with the following additional categories of third parties

• HPCJ: telephone and fax numbers — source, purposes and sharing Data Access & Collection

Payment card issuers and payment processors

• HPCJ: telephone and fax numbers — source, purposes and sharing Data Access & Collection

Email address

• HPCJ: email address — source and first additional purposes Data Access & Collection

We have obtained this personal information from the following sources:

• HPCJ: email address — source and first additional purposes Data Access & Collection

Directly from consumers themselves

• HPCJ: email address — source and first additional purposes Data Access & Collection

We collected this personal information for the following additional business or commercial purposes:

• HPCJ: email address — source and first additional purposes Data Access & Collection

Administer membership and activity in the Hilton Premium Club Japan Program loyalty program

• HPCJ: email address — source and first additional purposes Data Access & Collection

Authenticate Hilton Premium Club Japan Program account

• HPCJ: email address — remaining purposes and sharing Data Access & Collection

Process payments, including conducting strong customer authentication (SCA) when required by law

• HPCJ: email address — remaining purposes and sharing Data Access & Collection

We have shared this personal information with the following additional categories of third parties

• HPCJ: email address — remaining purposes and sharing Data Access & Collection

Payment card issuers and payment processors

• HPCJ: email address — remaining purposes and sharing Data Access & Collection

Home address

• HPCJ: home address — source, purpose and no additional sharing Data Access & Collection

We have obtained this personal information from the following sources:

• HPCJ: home address — source, purpose and no additional sharing Data Access & Collection

Directly from consumers themselves

• HPCJ: home address — source, purpose and no additional sharing Data Access & Collection

We collected this personal information for the following additional business or commercial purposes:

• HPCJ: home address — source, purpose and no additional sharing Data Access & Collection

Administer membership and activity in the Hilton Premium Club Japan Program loyalty program

• HPCJ: home address — source, purpose and no additional sharing Data Access & Collection

We have shared this personal information with the following additional categories of third parties

• HPCJ: home address — source, purpose and no additional sharing Data Access & Collection

We do not share home address with any additional third parties.

• HPCJ: home address — source, purpose and no additional sharing Data Access & Collection

Date of birth

• HPCJ: date of birth — source, purposes and sharing Data Access & Collection

We have obtained this personal information from the following sources:

• HPCJ: date of birth — source, purposes and sharing Data Access & Collection

Directly from customers themselves

• HPCJ: date of birth — source, purposes and sharing Data Access & Collection

We collected this personal information for the following additional business or commercial purposes:

• HPCJ: date of birth — source, purposes and sharing Data Access & Collection

Administer membership and activity in the Hilton Premium Club Japan Program loyalty program

• HPCJ: date of birth — source, purposes and sharing Data Access & Collection

Provide customer service and support

• HPCJ: date of birth — source, purposes and sharing Data Access & Collection

Verify identity

• HPCJ: date of birth — source, purposes and sharing Data Access & Collection

Send marketing communications via email, direct mail, and social media

• HPCJ: date of birth — source, purposes and sharing Data Access & Collection

Perform analytics in order to provide guests with personalized offers and content

• HPCJ: date of birth — source, purposes and sharing Data Access & Collection

Perform analytics to improve business operations

• HPCJ: date of birth — source, purposes and sharing Data Access & Collection

Process payments including conducting strong customer authentication (SCA) when required by law

• HPCJ: date of birth — source, purposes and sharing Data Access & Collection

We have shared this personal information with the following additional categories of third parties

• HPCJ: date of birth — source, purposes and sharing Data Access & Collection

Payment card issuers and payment processors

• HPCJ: date of birth — source, purposes and sharing Data Access & Collection

Hilton's Third-Party Partner

• HPCJ: date of birth — source, purposes and sharing Data Access & Collection

Gender

• HPCJ: gender — source, purposes and sharing Data Access & Collection

We have obtained this personal information from the following sources:

• HPCJ: gender — source, purposes and sharing Data Access & Collection

Directly from members themselves

• HPCJ: gender — source, purposes and sharing Data Access & Collection

We collected this personal information for the following additional business or commercial purposes:

• HPCJ: gender — source, purposes and sharing Data Access & Collection

Administer membership and activity in the Hilton Premium Club Japan Program loyalty program

• HPCJ: gender — source, purposes and sharing Data Access & Collection

Provide customer service and support

• HPCJ: gender — source, purposes and sharing Data Access & Collection

Perform analytics in order to provide guests with personalized offers and content

• HPCJ: gender — source, purposes and sharing Data Access & Collection

Perform analytics to improve business operations

• HPCJ: gender — source, purposes and sharing Data Access & Collection

We have shared this personal information with the following additional categories of third parties

• HPCJ: gender — source, purposes and sharing Data Access & Collection

Hilton's Third-Party Partner

• HPCJ: gender — source, purposes and sharing Data Access & Collection

Payment card information

• HPCJ: payment card information — source, purpose and no additional sharing Data Access & Collection

We have obtained this personal information from the following sources:

• HPCJ: payment card information — source, purpose and no additional sharing Data Access & Collection

Directly from consumers themselves

• HPCJ: payment card information — source, purpose and no additional sharing Data Access & Collection

We collected this personal information for the following additional business or commercial purposes:

• HPCJ: payment card information — source, purpose and no additional sharing Data Access & Collection

Administer membership and activity in the Hilton Premium Club Japan Program loyalty program

• HPCJ: payment card information — source, purpose and no additional sharing Data Access & Collection

We have shared this personal information with the following additional categories of third parties

• HPCJ: payment card information — source, purpose and no additional sharing Data Access & Collection

We do not share payment card information with any additional third parties.

• HPCJ: payment card information — source, purpose and no additional sharing Data Access & Collection

Hilton Honors number

• HPCJ: Hilton Honors number — source, purpose and no additional sharing Data Access & Collection

We have obtained this personal information from the following sources:

• HPCJ: Hilton Honors number — source, purpose and no additional sharing Data Access & Collection

Directly from Hilton Honors members themselves

• HPCJ: Hilton Honors number — source, purpose and no additional sharing Data Access & Collection

We collected this personal information for the following additional business or commercial purposes:

• HPCJ: Hilton Honors number — source, purpose and no additional sharing Data Access & Collection

Administer membership and activity in the Hilton Premium Club Japan Program loyalty program

• HPCJ: Hilton Honors number — source, purpose and no additional sharing Data Access & Collection

We have shared this personal information with the following additional categories of third parties

• HPCJ: Hilton Honors number — source, purpose and no additional sharing Data Access & Collection

We do not share Hilton Honors number with any additional third parties.

• HPCJ: Hilton Honors number — source, purpose and no additional sharing Data Access & Collection

Device information (including MAC address)

• HPCJ: device information — source, SCA purpose and sharing Data Access & Collection

We have obtained this personal information from the following sources:

• HPCJ: device information — source, SCA purpose and sharing Data Access & Collection

Directly from consumers as a result of their browsing activity on the internet or scanning or QR codes on property

• HPCJ: device information — source, SCA purpose and sharing Data Access & Collection

We collected this personal information for the following additional business or commercial purposes:

• HPCJ: device information — source, SCA purpose and sharing Data Access & Collection

Conduct SCA as part of the payment process, when required by law

• HPCJ: device information — source, SCA purpose and sharing Data Access & Collection

We have shared this personal information with the following additional categories of third parties

• HPCJ: device information — source, SCA purpose and sharing Data Access & Collection

Payment card issuers and payment processors when conducting SCA

• HPCJ: device information — source, SCA purpose and sharing Data Access & Collection

Company information (including department and title)

• HPCJ: company information — source, purposes and sharing Data Access & Collection

We have obtained this personal information from the following sources:

• HPCJ: company information — source, purposes and sharing Data Access & Collection

Directly from members themselves

• HPCJ: company information — source, purposes and sharing Data Access & Collection

We collected this personal information for the following additional business or commercial purposes:

• HPCJ: company information — source, purposes and sharing Data Access & Collection

Administer membership and activity in the Hilton Premium Club Japan Program loyalty program

• HPCJ: company information — source, purposes and sharing Data Access & Collection

Provide customer service and support

• HPCJ: company information — source, purposes and sharing Data Access & Collection

Perform analytics in order to provide guests with personalized offers and content

• HPCJ: company information — source, purposes and sharing Data Access & Collection

Perform analytics to improve business operations

• HPCJ: company information — source, purposes and sharing Data Access & Collection

We have shared this personal information with the following additional categories of third parties

• HPCJ: company information — source, purposes and sharing Data Access & Collection

Hilton's Third-Party Partner

• HPCJ: company information — source, purposes and sharing Data Access & Collection