CCTV: footage retained 31 days, access requests handled by the Data Protection Office or the franchise hotel
Hilton states that it uses closed-circuit television and other security measures at its properties which may capture or record images of guests and visitors in clearly signposted public areas such as hallways and lobbies, and that it does not use them in areas where guests and visitors have a reasonable expectation of privacy, such as locker rooms and bathrooms. It retains CCTV footage on property and in the cloud for 31 days unless it is required to maintain footage for longer, for example where the footage is subject to a legal proceeding or investigation, and it protects footage under its information security policies. A person may be able to request access to CCTV footage within the time specified by applicable law and as required by law. For franchised hotels, which are operated by separate entities, access requests go to that hotel, and those entities are also independent data controllers of CCTV images; where the law permits, Hilton may charge a fee to cover the cost of responding.
Supporting quotations
Closed-Circuit Television (CCTV)
We do not use CCTV and other security measures in areas where guests and visitors have a reasonable expectation of privacy, such as locker rooms and bathrooms.
We retain CCTV footage on property and in the cloud for 31 days unless we are required to maintain footage for a longer period, such as if the footage is subject to a legal proceeding or investigation.
You may be able to request access to CCTV footage within the time specified by applicable law and as required by law.
To request access to CCTV images from a franchised hotel, please contact that hotel.
In addition to Hilton Domestic Operating Company Inc., those entities also are independent data controllers of CCTV images.
When permitted by law, we may charge an appropriate fee to cover the costs of responding to the request.
Qualifications & exceptions
The 31-day retention is a default: footage may be kept longer where a legal proceeding or investigation requires it.
Access to footage is possible only within the time specified by applicable law and as required by law.
The franchise disclosure and the possible access fee are separate from Hilton's own retention commitment.
CCTV recording is described as confined to signposted public areas and as not used in areas of reasonable expectation of privacy.
Retention & Deletion · Company practice
Session and Persistent cookies
Session Cookies are stored only temporarily during a browsing session and are deleted from the device when the browser is closed; Hilton uses them to support site functionality and to understand use of the site — which pages are visited, which links are used and how long the visitor stays on each page. Persistent Cookies are not deleted when the browser is closed but are saved on the device for a fixed period or until the visitor deletes them; the server that set the cookie recognises it on each visit, and Hilton and others use persistent cookies to store preferences for the next visit, to keep a more accurate account of how often and how the site is used over time, and to measure the effectiveness of advertising efforts.
Supporting quotations
Session Cookies – These types of Cookies are stored only temporarily during a browsing session, and are deleted from your device when you close the browser.
We use Session Cookies to support the functionality of the site and to understand your use of the site
Persistent Cookies – These types of Cookies are not deleted when you close your browser, but are saved on your device for a fixed period of time or until you delete them.
We and others use persistent Cookies to store your preferences, so that they are available for your next visit, to keep a more accurate account of how often you visit the site, how often you return, how your use of the site may vary over time and the effectiveness of advertising efforts.
Qualifications & exceptions
Session cookies last only for the browsing session and are deleted when the browser closes.
Persistent cookies last for a fixed period or until the visitor deletes them.
Persistent cookies are used to measure visit frequency and advertising effectiveness over time.
Retention & Deletion · Company practice
Data retention periods: kept as long as the purpose requires, then destroyed beyond reconstruction
Hilton says it retains personal information for the time necessary to fulfil the purpose for which it was collected, usually for the duration of any contractual relationship and for any period afterwards as legally required or permitted by law. It says its retention policies reflect applicable limitation periods and legal requirements, and that when it destroys personal information, it does so in a way that prevents the information from being restored or reconstructed. The statement sets a purpose-based retention rule rather than a list of fixed periods; the specific periods for individual categories are not given in this section.
Supporting quotations
9. Data Retention Periods
We retain personal information about you for the time necessary to fulfill the purpose for which that information was collected, usually for the duration of any contractual relationship and for any period thereafter as legally required or permitted by law.
Our retention policies reflect applicable statute of limitation periods and legal requirements.
When we destroy your personal information, we do so in a way that prevents that information from being restored or reconstructed.
Qualifications & exceptions
Retention is tied to the collection purpose, the contractual relationship, and any period required or permitted by law, rather than to fixed dates in this Statement.
Destruction is described as preventing restoration or reconstruction, not as a stated deletion method.
This section does not give per-category retention periods.
Retention & Deletion · Company practice
Appendix A: retention of personal information for the purpose collected and any legal period
Within Appendix A, Hilton states that it retains personal information for the time necessary to accomplish the purpose for which it was collected, usually for the duration of any contractual relationship and for any period afterwards as legally required or permitted by applicable law, and that its retention policies reflect applicable limitation periods and legal requirements. This is the Appendix's retention statement, matching the purpose-based rule in the main body of the Statement.
Supporting quotations
Retention: We retain personal information about you for the time necessary to accomplish the purpose for which such information was collected, usually for the duration of any contractual relationship and for any period thereafter as legally required or permitted by applicable law.
Our retention policies reflect applicable statute of limitation periods and legal requirements.
Qualifications & exceptions
Retention is tied to the collection purpose, the contractual relationship, and any legally required or permitted period.
The Appendix restates the rule rather than listing per-category periods.
Retention & Deletion · Context
California: retention is governed by the main body's Data Retention Periods section
The California appendix does not restate a retention rule; it directs the reader to the section titled Data Retention Periods in the main body of the Statement. The retention commitment is therefore the main body rule, which keeps personal information for as long as the collection purpose requires, usually the duration of the contractual relationship plus any legally required or permitted period.
Supporting quotations
Retention of Your Personal Information
Please refer to the section titled Data Retention Periods in the main body of this Statement.
Qualifications & exceptions
The appendix cross-refers to the main body rather than adding a California-specific period.
Retention & Deletion · Company practice
China: retention for the collection purpose or as the law requires, with destruction under the retention procedures
The China appendix says Hilton will retain personal information for as long as necessary to complete the purpose for which it was collected, or as required or permitted by applicable law, and that it will destroy personal information in accordance with its retention and records management procedures, referring to the main body's Data Retention Period section for more information.
Supporting quotations
9. Data Retention Period
We will retain personal information about you for as long as necessary to complete the purpose for which it was collected, or as required or permitted by the applicable laws.
We will destroy your personal information in accordance with our retention and records management procedures.
Qualifications & exceptions
Retention is tied to the collection purpose or to what the law requires or permits.
Destruction follows Hilton's own retention and records management procedures.
Retention & Deletion · Company practice
Nigeria: retention limited to the collection purposes or Nigerian law, then destruction
The Nigeria appendix states that personal information will be retained only for as long as necessary to fulfil the purposes for which it was collected or as required by Nigerian law, and that when the information is destroyed it is destroyed in a way that prevents it from being restored or reconstructed.
Supporting quotations
5. Data Retention
Your personal information will be retained only for as long as necessary to fulfill the purposes for which it was collected or as required by Nigerian law.
When we destroy your personal information, we do so in a way that prevents that information from being restored or reconstructed.
Qualifications & exceptions
The stated retention grounds are the collection purposes and Nigerian law.
Destruction is described as preventing restoration or reconstruction.
Retention & Deletion · Company practice
Korea: retention period, storage in the United States, and destruction
The Korea appendix says Hilton retains personal information as necessary to fulfil the purpose for which it was collected, in accordance with its internal retention policies — usually for the period the data subject consented to at the time the information was collected, or for the duration of any contractual relationship, and any period afterwards as legally required under applicable laws and regulations — and that the information is stored and managed in the United States. It says personal information will be promptly destroyed at the end of the retention period, in a way that prevents it from being restored or reconstructed.
Supporting quotations
Retention Period: We retain personal information as necessary to fulfill the purpose for which that information was collected in accordance with our internal retention policies, usually for the period the data subject consented to at the time the personal information was collected, or for the duration of any contractual relationship, and any period thereafter as legally required under applicable laws and regulations.
This information is stored and managed in the United States.
Destruction and Disposal: We will promptly destroy personal information at the end of the retention period, as described above.
When we destroy personal information, we do so in a way that prevents that information from being restored or reconstructed.
Qualifications & exceptions
The retention period is tied to the consented period or the contractual relationship, plus any legally required period.
The information is stated to be stored and managed in the United States.
Destruction is stated to be prompt at the end of the retention period and to prevent reconstruction.