希尔顿全球隐私声明

最近更新时间：2024年12月4日

• 简介
• 个人信息的收集：一般
• 个人信息的收集：收集点通知
• Reservations with Hilton Partner Accommodations
• Reservations with Hilton's Third-Party Partner
• Reservations with Hilton's Third-Party Operator
• Cookie 和其他技术手段
• 基于分析和兴趣的广告
• 更改访问您的个人信息
• 我们如何保护个人信息
• 披露根据法律义务或为保护人员和财产安全
• Marketing Communications Choices
• 个人信息的国际间传输
• 数据保留期限
• 本声明的变更
• 有问题或疑虑时的联系信息
• Additional Provisions Applicable to California Consumers
• Additional Provision Applicable to Nevada Consumers
• Additional Provision Applicable to French Residents
• Additional Provision Applicable to Hong Kong Consumers
• Additional Provision Applicable to Korean Data Subjects
• 附录 A：Additional Provisions Applicable to Processing of Personal Information of Residents of Certain Countries and U.S. States
• 附录 B：Additional Provisions Applicable to Processing of Personal Information of Data Subjects in Türkiye
• 附录 C：Additional Provisions Applicable to Processing of Personal Information of China Residents/Citizens
• Appendix D: Additional Provisions Applicable to Processing of Personal Information of Brazil Residents or Citizens
• Appendix E: Additional Provisions Applicable to Processing of Personal Information of Data Subjects of Monaco

简介

希尔顿的使命是成为全世界最热情友好的公司。我们热衷于提供卓越的宾客体验，期待您光临我们的酒店，体验热情温暖的待客之道。

我们承诺提供出众的客户服务，包括尊重您的隐私和保护您的个人信息。在本隐私声明（“声明”）中，为您提供了我们如何收集、使用和披露您的个人信息的详细情况。

本声明适用于 Hilton Worldwide Holdings Inc. 及其附属公司，以及希尔顿品牌组合旗下的所有酒店（统称为“希尔顿”或“我们”）。Our Portfolio of Brands includes Waldorf Astoria Hotels & Resorts, LXR Hotels & Resorts, Conrad Hotels & Resorts, Canopy by Hilton, Signia by Hilton, Hilton Hotels & Resorts, Curio Collection by Hilton, DoubleTree by Hilton, Tapestry Collection by Hilton, Embassy Suites by Hilton, Tempo by Hilton, Motto by Hilton, Hilton Garden Inn, Hampton by Hilton, Tru by Hilton, Spark by Hilton, Homewood Suites by Hilton, Home2 Suites by Hilton, LivSmart Studios by Hilton, Graduate by Hilton, and NoMad.

使用我们的任何产品或服务并/或同意本《声明》（例如，在注册我们任何产品或服务时）即表明，您了解并认可我们按照本《声明》中的描述收集和使用个人信息。

请注意：如果我们代表第三方或依据第三方指令收集个人信息，本《声明》并不适用于我们对此类信息的处理。这些第三方包括航空公司、租车公司和其他服务提供商、组织或提供成套旅行安排的公司、市场营销合作伙伴，或某些公司客户等。

¹ 希尔顿国内运营有限公司 (Hilton Domestic Operating Company Inc.) 是隶属于希尔顿的一家实体企业，负责管控所有宾客和运营数据以及希尔顿的营销活动。希尔顿国内运营有限公司 (Hilton Domestic Operating Company Inc.) 是希尔顿全球酒店集团控股公司 (Hilton Worldwide Holdings Inc.) 的附属公司。

The Hilton Portfolio of Brands includes managed, franchised, and joint venture hotels. 特许加盟酒店由与希尔顿分开的实体酒店运营。Joint venture hotels are operated by entities that are partially owned and/or controlled by Hilton. In addition to Hilton Domestic Operating Company Inc., those entities are also independent data controllers for guest data.

个人信息的收集：一般

The following summarizes the categories of personal information we have collected in the past 12 months, the sources for those categories of personal information, the business or commercial purposes for which the information was collected, the categories of third parties with whom the information may have been shared, as permitted by law, and whether the information was sold to a third party for a business or commercial purpose within the past 12 months. Certain categories of personal information collected are required in order for us to provide you with the requested products or services, and if you choose not to provide us with such information, we may not be able to provide you with these products or services. If consent is required, we will obtain your consent before selling or sharing your personal information.

个人信息的收集：收集点通知

浏览希尔顿网站

当您浏览希尔顿网站时，我们会收集以下类别的您的个人信息，这些信息用于以下目的：

如果您是希尔顿荣誉客会会员，并在浏览会话期间登录您的账户，我们将收集有关您的以下信息，这些信息用于以下目的：

进行预订

当您在希尔顿酒店预订时，我们会收集以下类别的您的个人信息，这些信息用于以下目的：

注册希尔顿荣誉客会

当您注册希尔顿荣誉客会时，我们会收集以下类别的您的个人信息，这些信息用于以下目的：

入住希尔顿酒店

当您入住希尔顿酒店时，我们会收集以下类别的您的个人信息，这些信息用于以下目的：

电子入住

当您使用电子入住办理住宿手续时，我们会收集以下类别的您的个人信息，这些信息用于以下目的：

电子房卡

当您使用电子房卡时，我们会收集以下类别的您的个人信息，用于以下目的：

宾客协助

当您联系宾客协助时，我们会收集以下类别的您的个人信息，这些信息用于以下目的：

Minors

Hilton does not knowingly collect, disclose, or sell personal information of individuals under the age of majority in their respective jurisdiction without permission from a minor’s parent or guardian. 在希尔顿网站或希尔顿荣誉客会 app 上搜索酒店预订时，可能要求您提供入住客房的未成年人的年龄。Hilton collects this information for the purpose of determining room rates where applicable, such as at an “all-inclusive” property.

Closed Circuit Television (CCTV)

We use closed circuit television and other security measures at our properties that may capture or record images of guests and visitors in public areas, as well as information related to your location while on our properties (via keycards and other technologies) for the protection of our staff, guests and visitors to our properties, in accordance with applicable laws that require us to collect information that is used to protect guests, employees, and visitors of the property. We retain CCTV in accordance with our data retention policies, as necessary to fulfill the purpose for which that information was collected, or as required or permitted by law. You may be able to request access to CCTV images within the time specified by applicable law and as required by law.

特许加盟酒店由与希尔顿分开的实体酒店运营。To request access to CCTV images from a franchised hotel, please contact that hotel. In addition to Hilton Domestic Operating Company Inc., those entities also are independent data controllers of CCTV images. 在法律允许的情况下，我们可能会收取适当费用来支付回应请求的支出。Such requests may be submitted by accessing the Data Subject Rights Requests Portal at datarights.hilton.com or in writing to DataProtectionOffice@hilton.com or Hilton Data Protection Officer, 7930 Jones Branch Drive, McLean, VA 22102, USA.

Reservations with Hilton Partner Accommodations

When making a reservation with AutoCamp or Small Luxury Hotels of the World (SLH) through a Hilton channel, Hilton will provide AutoCamp or SLH with certain guest information for the exclusive purpose of fulfilling the reservation, as identified in this Statement. Hilton channels include Hilton’s website, Hilton Honors application, or Mini Programs. The guest information will be processed and retained in accordance with AutoCamp’s or SLH’s privacy policies and as permitted by applicable law. You can access AutoCamp’s privacy policy here. You can access SLH’s privacy policy here.

Reservations with Hilton's Third-Party Partner

When making a reservation with Hilton Grand Vacations (HGV) through a Hilton channel, Hilton will provide the information you provided for your booking to HGV to fulfill your reservation. Hilton channels include Hilton's website, the Hilton Honors application, and the Hilton Honors Mini Programs. HGV may also process your personal information in accordance with HGV's privacy policies and as permitted by applicable law. You can access HGV's privacy policy here. Hilton may also share your personal data with HGV if you opt in to that sharing during the Hilton Honors enrollment journey.

Reservations with Hilton's Third-Party Operator

When making a reservation with Genting through a Hilton channel, Hilton will provide Genting with the information you provided for your booking to Genting to fulfill your reservation. Hilton channels include Hilton's website, Hilton Honors application, or Mini Programs. Genting may also process your personal information in accordance with Genting's privacy policies and as permitted by applicable law. You can access Genting's privacy policy here.

Cookie 和其他技术手段

Like many other websites, our site may use "Cookies" or "Other Technologies" (such as "pixel tags," "web beacons," "clear GIFs," links in emails, JavaScript, device IDs assigned by Google or Apple, or similar technologies). Cookies and Other Technologies allow us and third parties to obtain information about your visits to the site, including to analyze your visiting patterns. 我们使用这些信息处理您的预订或申请并为我们及他方提供在线和移动广告、消息和内容以及您感兴趣的其他特定内容。Depending on your jurisdiction, prior consent for the use of non-essential Cookies may be required. If it is the case, we will obtain your consent before using Cookies on your device.

Cookie 是在您访问网站时存储在您的计算机或移动设备（以下简称“设备”）中的小型文本文件。Cookie 不能单独用来向我们披露您的个人身份，尽管在某些情况下，我们可能需要将希尔顿或第三方 Cookie 与您提供给我们或者我们已获得与您有关的个人信息相结合。Cookies may be used on the site in order to improve your experience. For example, we will use Cookies to:

• 记住您的用户名和密码以供日后访问，让登录过程变得更加轻松快捷；
• 记住您的语言和其他偏好；
• 确保您获得所需信息；
• 提供安全可靠的在线交易服务；
• Track your response to advertisements and website or app content for analysis and the number of times we send you the same advertisement; Measure how many people use the site, and how they use it, so that we may keep it running quickly and efficiently; and
• 帮助我们和他方向您提供与您的兴趣和位置相关的通讯和内容并迅速做出响应。

Below we explain the different types of Cookies that may be used on the site.

• Essential Cookies – Essential Cookies are necessary for the site to work, and enable you to move around it and use its services and features. 禁用这些 Cookie 可能导致服务和功能不可用。
• Functional Cookies – We use Functional Cookies to save your settings on the site—settings such as your language preference, or booking information you have previously used when booking a hotel with us. 我们也可能使用功能性 Cookie 来存储您最近搜索过的酒店等信息，以便下次访问时能够方便地找到。Some Functional Cookies are essential to viewing maps or videos on our site.
• Session Cookies – These types of Cookies are stored only temporarily during a browsing session, and are deleted from your device when you close the browser. We use Session Cookies to support the functionality of the site and to understand your use of the site—that is, which pages you visit, which links you use and how long you stay on each page.
• Persistent Cookies – These types of Cookies are not deleted when you close your browser, but are saved on your device for a fixed period of time or until you delete them. Each time you visit the site, the server that set the Cookie will recognize the persistent Cookie saved on your device. We and others use persistent Cookies to store your preferences, so that they are available for your next visit, to keep a more accurate account of how often you visit the site, how often you return, how your use of the site may vary over time and the effectiveness of advertising efforts.
• Advertising Cookies – Allow us and other advertisers to show you the most relevant products, offers, and advertisements on the site and third-party sites, or through emails or other message platforms. 例如，有些广告性 Cookie 可帮助我们服务提供商和其他广告客商选择基于您兴趣的广告，其中包括跨网站、在线服务以及随时间推移应用程序而发布的明示或推断广告。还有一些广告性 Cookie 和其他技术手段可帮助防止连续为您重现相同广告。These types of Cookies also help us provide you with content on the site that is tailored to your interests and needs. 如下文所述，一些分析性 Cookie 和其他技术手段部分使用以推动广告。
• Social Plug-In Cookies – Advertising Cookies also include Social Plug-In Cookies. Social Plug-In Cookies are used to share content from the site with members and non-members of social media networks such as Facebook, Twitter, YouTube and Pinterest. 这些 Cookie 通常由社交网络提供商设置，以便使这种分享顺畅无虞。
• Analytics Cookies – Collect information about your use of the site, and enable us to improve the way it works. These Cookies give us aggregated information that we use to monitor site performance, count page visits, spot technical errors, see how users reach the site, and measure the effectiveness of advertising (including emails we send to you).
• Other technologies may be used for the same purposes as our Cookies, to allow us and third parties to know when you visit the site, and to understand how you interact with emails or advertisements. 通过其他技术手段，我们可以获得非个人信息（例如：您的操作系统、您的浏览器版本，以及您来自的 URL）或总量信息并用于提升您的体验和了解网络通信量模式。

管理 Cookie 及其他技术手段

如果您想从您的设备中清除或阻止 Cookie，您可随时更新您的浏览器设置（如需了解如何清除或阻止 Cookie，请查阅浏览器的“帮助”菜单）。希尔顿不负责您的浏览器设置。You can find good and simple instructions on how to manage Cookies on the different types of web browsers at www.allaboutcookies.org.

请注意，拒绝 Cookie 可能会影响您在本网站中执行某些交易的能力以及我们在下次访问中识别您的浏览器的能力。

基于分析和兴趣的广告

我们与某些第三方服务提供商合作，收集信息用于分析、审计、研究和报告。These third parties may use server logs, web beacons, tags, pixels, and similar technologies, and they may set and access Cookies on your computer or other device.

In particular, we use Adobe Analytics to help us understand how our customers use our websites. We also use Adobe Audience Manager to create audiences for personalizing content and advertising experiences. Read more about how Adobe uses your Personal Information in web browsers by Adobe Analytics.

We partner with Amazon Chat which supports our chat platform. We may use Amazon Chat for sharing dynamic content for authenticated users.

We use WhatsApp to help us send you personalized content and advertising experiences across multiple platforms. We may use WhatsApp for analytics, research, and reporting. Read more about how WhatsApp protects Personal Information here.

We partner with third parties to provide advertising services that are targeted based on your online activities across websites, mobile apps, and devices over time (commonly referred to as “interest-based advertising”). 我们的广告合作伙伴，可能会收集您在当前设备上与我们服务相关的活动信息，并结合您在其他网站、移动应用程序和设备上的活动信息。他们可能会使用服务器日志、Cookie、网络信标、标签、像素、移动广告 ID（例如 Facebook Cookie 或 Google 广告 ID）、跨设备链接和类似技术，来收集这些信息。例如，我们的广告合作伙伴可能会根据您访问我们网站的事实，在您当前设备或使用的其他设备上的其他网站和移动应用程序上，向您投放广告。若您在多台设备登录同一在线服务，或者若您的各设备共享的类似属性支持其由同一人或家庭成员使用的推断，则他们会匹配您的浏览器或设备。这意味着，有关您在当前浏览器或设备上使用网站或应用程序的信息，将与您其他浏览器或设备的信息相互关联和使用。您可以按照以下说明，在当前浏览器或设备上的 Web 浏览器和移动应用程序中，选择退出基于兴趣的广告。

For more information about interest-based advertising and cross-device linking, please visit the Network Advertising Initiative (“NAI”) website and the Digital Advertising Alliance (“DAA”) website. We adhere to the DAA's interest-based advertising principles by providing you enhanced notice, transparency, and control of our digital marketing practices as stated at http://www.aboutads.info/principles/. You may opt out of interest-based advertising and cross-device linking in web browsers and mobile apps on your current browser or device by following the instructions below. 

• Web 浏览器选择退出。 To opt out in web browsers, please visit http://optout.aboutads.info/ and http://optout.networkadvertising.org. To help preserve the choices that you make in the DAA's WebChoices page, you can install the DAA's “Protect My Choices” extension that is available at http://www.aboutads.info/PMC.
• Mobile Application Opt-Out.  To opt out in mobile apps, you can adjust the advertising preferences on your mobile device (for example, in iOS, visit Settings > Privacy & Security > Tracking, and in Android, visit Settings > Google > Ads > Opt out of interest-based ads). 您也可以下载应用程序并遵循其中的说明，选择退出参与数字广告联盟 AppChoices 工具的公司。有关在移动设备上选择退出的更多信息，请在此处查看。

请注意，上述选择退出仅适用于您选择退出的特定浏览器或设备，因此您需要在所有浏览器和设备上分别选择退出。如果您删除或重置您的 Cookie 或移动广告标识符，更改浏览器（包括升级某些浏览器）或使用其他设备，任何选择退出的 Cookie 或工具可能不再有效，您需要重新选择退出。此时，我们不会响应“请勿跟踪”信号。

更改访问您的个人信息

If you are a Hilton Honors member, you may review and update the information you provided to us at the time of enrollment at any time by signing in to your Hilton Honors account. You may also make changes to your information by contacting Hilton Reservations and Customer Care by completing a support form. If you are located in the United States or Canada, you can call customer care toll free by dialing + 1-888-4HONORS (888-446-6677). Customers located outside of the United States and Canada can review a list of customer care phone numbers here.

您可以要求我们告知，我们保存的与您有关的个人信息，并在适当情况下取消您对某些数据处理活动的同意，和/或要求我们更新、更正、删除和/或停止处理您的个人信息。我们将在适用法律规定的时间内并按法律要求进行所有必要的更新和更改。在法律允许的情况下，我们可能会收取适当费用来支付回应请求的支出。Such requests may be submitted by accessing the Data Subject Rights Requests Portal at datarights.hilton.com or in writing to DataProtectionOffice@hilton.com or Hilton Data Protection Officer, 7930 Jones Branch Drive, McLean, VA 22102, USA.

此外，在某些情况下，您可以通过上述电子邮件地址或邮寄地址联系我们，要求停止与我们的业务合作伙伴共享您的个人信息，或要求希尔顿停止使用您的个人信息。

我们如何保护个人信息

我们采取合理措施，以便：(i) 保护个人信息免受未经授权的访问、披露、变更或损毁；以及 (ii) 确保个人信息准确并及时更新。

希尔顿拥有一支强大的信息安全专业团队，负责管理希尔顿的安全项目。这支团队负责监测我们的系统是否存在潜在的入侵行为、应对潜在的事件、支持酒店级信息安全、定期审查和更新希尔顿用于保护数据的安全管理，以及为希尔顿的信息安全项目提供培训。

希尔顿支持支付卡行业（“PCI”）合规计划、信息技术合规计划。此合规计划生成有关希尔顿技术内部管理充分性和有效性的审计报告，包括由外部 PCI 合格安全性评估商签署的 PCI 合规性证明和一份 SSAE16/SOC1 报告，该报告着重于支持特定会计和财务报告系统的技术总体控制。

还会要求我们与之分享个人信息的第三方，采取合理措施保护个人信息的机密性。

我们绝不会要求您通过电子邮件或短信，向我们发送机密个人信息或支付卡信息。

如果发生安全事件，希尔顿将根据适用法律法规通知监管机构和/或消费者。

披露根据法律义务或为保护人员和财产安全

希尔顿将根据法律要求披露个人信息。此类披露的情形包括：某些国家/地区要求希尔顿收集其国家/地区的酒店访客的个人数据，执法机构向希尔顿发出有效传票，民事诉讼当事人向希尔顿发出合法的举证请求书等。必要情况下，希尔顿可能选择与执法部门、员工、在希尔顿举办活动的客户或其他方共享个人信息，以保护人员和财产安全，寻求可用的补救措施或限制我们可能遭受的损害，并应对紧急情况。

Marketing Communications Choices

希望您了解我们的优质产品/服务！为此，我们可能会通过电子邮件、短信、推送通知、应用程序内提醒、直邮、社交媒体等向您发送信息。In addition to traditional text messages, we offer the opportunity to receive transactional and promotional messages via text message by using a short code. A short code is a five-digit number that you can message to opt-in to receive such text messages. We may also send you marketing communications via WhatsApp. To enable us to send you such communications, your information may be disclosed to service providers who use such information solely to send out marketing communications on our behalf. Furthermore, short code opt-in data and consent will not be shared with any other third parties for their own marketing or advertising purposes. If, depending on the circumstances, consent is required in your jurisdiction, we will obtain your consent before sending you such communications.

If you are a Hilton Honors member, you may change the communications you receive from us by logging on to your online account and managing your subscriptions; by writing to us (and including your email address) at Hilton Data Protection Officer, 7930 Jones Branch Drive, McLean, VA 22102, USA; or by emailing us at DataProtectionOffice@hilton.com.

如果您不想接收我们的任何电子邮件市场营销材料，可以随时使用我们所发送电子邮件中的取消订阅功能来“选择退出”，或点击此链接：https://secure.hilton.com/en/hhonors/optout/unsubscribe.jhtml?listid=0，写信（并包括您的电子邮件地址）到以下地址联系我们：Hilton Data Protection Officer, 7930 Jones Branch Drive, McLean, VA 22102, USA，或发送电子邮件至 DataProtectionOffice@hilton.com。我们最多需要十个工作日来处理您的“选择退出”请求。

To opt out of text or WhatsApp messages, reply “STOP” to the message you received or to opt out of text messages from a specific hotel, tell the hotel front desk that you do not want to receive text messages from the hotel .

您可以通过更改您移动设备上的通知设置来控制是否允许我们的移动应用程序向您发送推送通知。如果我们想要向您发送应用程序内消息，将在我们的应用程序设置中提供这些功能的控制选项。

个人信息的国际间传输

作为一家全球性企业，无论您是在旧金山、伦敦，还是东京，我们都努力在世界各地以相同的水平为您提供您期望在希尔顿获得的服务。为了提供这种服务，您知晓我们可在希尔顿品牌组合旗下酒店成员、我们的服务提供商以及可能位于您所在国家/地区以外的其它第三方之间共享您的个人信息。

当您住宿在美国以外的希尔顿酒店时，根据适用法律或法规的要求，该酒店的数据管理人员会根据数据转移协议将与您预订有关的个人信息传送至美国希尔顿酒店。按照适用法律或法规要求，数据管理员也可能保留您个人信息的本地副本。虽然这些国家/地区的数据保护法律可能与您所在的国家/地区有所不同，但是，我们将采取适当措施以确保您的个人信息能够按照本《声明》和法律的规定得到相应处理。

数据保留期限

我们保留您的必要个人信息，以实现收集该信息的目的，或根据法律所要求或允许的情况。当我们销毁您的个人信息时，所采用的方式能够防止该信息的恢复或重构。

本声明的变更

我们可能随时修改本《声明》。当我们对本《声明》进行重大变更时，将在我们的网站主页上发布指向修改后政策的链接。通过查看本《声明》顶部的日期，即可了解本《声明》的最近更新日期。对本《声明》所作的任何变更将自修改后的《声明》在本网站发布之时生效。一旦您在上述变更发生后使用本网站、我们的任何产品和服务，以及/或对更新后的《声明》表示同意，即表示您接受当时业已生效的修改后的本《声明》。

有问题或疑虑时的联系信息

If you have any questions or concerns, please contact us by sending an email to DataProtectionOffice@hilton.com, by sending a letter to Hilton Data Protection Officer, 7930 Jones Branch Drive, McLean, VA 22102, or by calling our toll-free number: (800) 413-7470.

Additional Provisions Applicable to California Consumers

The Right to Know, The Right to Delete, and the Right to Opt-Out of the Sale or Sharing of Personal Information

The California Consumer Privacy Act (“CCPA”) affords California consumers (1) the right to know what personal information we collect, use, disclose, and/or sell; (2) the right to request that we delete their personal information; and (3) the right to request that we no longer sell or share their personal information.

If you would like information about the personal information that we collect, disclose, sell and/or share about you, or if you would like to make a request for us to delete or to stop selling your personal information, please visit our website at datarights.hilton.com to submit your request. You also may call our toll-free telephone number: (800) 413-7470, email the Data Protection Office (“DPO”) at DataProtectionOffice@hilton.com, send a letter to the Data Protection Office at 7930 Jones Branch Drive, McLean, Virginia, USA 22102, or complete a paper form available from the front desk at any of our hotels. In addition to these methods, California consumers may request that we no longer sell their personal information by completing a personal data request form.

当 DPO 收到您的请求时，DPO 将首先验证您的身份。If you are a Hilton Honors member, the DPO will verify your identity by asking you to provide your name, Hilton Honors account number, and the email address and phone number associated with your Hilton Honors account. If you are not a Hilton Honors member, the DPO will verify your identity by asking you to provide your name, the email address and/or phone number associated with a past stay, and potentially a confirmation number from one of your stays at a Hilton property. Once the DPO has verified your identity, the DPO will promptly fulfill your request

如果您愿意，可以指定授权代理人，代表您提出请求。To designate an authorized agent, please submit an order issued by a court, a document submitted by a barred attorney, or a formal certified document issued by an official governmental agency.

If you would like to opt out of the sale of your personal information, you may do so by clicking on the banner that appears on any Hilton website when you access that site from an IP address that relates to California or by visiting our website at datarights.hilton.com or click the “Do Not Share or Sell My Information” link at the bottom of any Hilton website to submit your request. Please note that when you opt out of Cookies, tags, and pixels, that opt out only pertains to the device and the browser that you are using when you opt out. If you wish to opt out for other devices or browsers, you must opt out again when you are using those devices or browsers.

敏感个人信息

我们将您的个人信息的使用，限制在履行合理预期服务所必需的用途或法律要求的范围内。

直接营销披露

关于我们向第三方披露某些类别的个人信息，用于该第三方的直接营销目的，加州消费者也可要求相关信息。上述请求必须通过下列地址之一提交给我们： CA_Privacy@hilton.com or DataProtectionOffice@hilton.com, send a letter to the Data Protection Office at 7930 Jones Branch Drive, McLean, Virginia, USA 22102. Within thirty days of receiving such a request, we will provide a list of the categories of personal information disclosed to third parties for third-party direct marketing purposes during the immediately preceding calendar year, along with the names and addresses of these third parties. This request may be made no more than once per calendar year. We reserve our right not to respond to requests submitted to addresses other than the addresses specified in this paragraph.

非歧视的权利

因为消费者行使了 CCPA 赋予他/她的权利，所以 CCPA 禁止企业以不同方式对待消费者。欢迎您依据 CCPA 行使自身权利，我们不会因此而歧视您。

经济奖励通知

希尔顿不对收集、出售或删除个人信息提供经济奖励。如本声明所述，首先希尔顿收集宾客的个人数据以完成宾客预订，并收集希尔顿荣誉客会会员的个人数据，以实施希尔顿荣誉客会忠诚计划。希尔顿还会出于营销目的以及适用法律允许的其他目的，而收集个人数据。

根据希尔顿荣誉客会适用条款的规定，希尔顿荣誉客会会员可以累积积分并享受折扣房价。累积积分和获取折扣房价的能力，与会员数据的业务价值没有直接关系。

删除内容

如果您是未满 18 周岁的加利福尼亚州居民，并且是发布有此政策的任何网站的注册用户，根据《加州商业和职业条例》第 22581 款，您有权申请并要求删除您曾公开发布的内容或信息。如需提出此类申请，请发送电子邮件至 CA_Privacy@hilton.com，并在邮件中包含具体内容或信息的详细说明。请注意，此类申请无法保证完全或全面删除您曾发布的内容或信息，而且有可能存在即使提出申请，但法律不要求或不允许删除的情况。

Additional Provision Applicable to Nevada Consumers

选择不出售个人信息的权利

如果您是内华达州居民，可以要求我们停止出售我们收集的某些类别的个人信息。To submit a request please visit our website at datarights.hilton.com to submit your request. You also may call our toll-free telephone number: (800) 413-7470, email the Data Protection Office (“DPO”) at DataProtectionOffice@hilton.com, send a letter to the Data Protection Office at 7930 Jones Branch Drive, McLean, Virginia, USA 22102, or complete a paper form available from the front desk at any of our hotels. When the DPO receives your request, the DPO will first verify your identity. If you are a Hilton Honors member, the DPO will verify your identity by asking you to provide your name, Hilton Honors account number, and the email address and phone number associated with your Hilton Honors account. If you are not a Hilton Honors member, the DPO will verify your identity by asking you to provide your name, the confirmation number from one of your stays at a Hilton property, and the email address associated with that stay. Once the DPO has verified your identity, the DPO will promptly fulfill your request.

Additional Provision Applicable to French Residents

法国居民：as disclosed in this Statement, we may collect your phone number to fulfill guest reservations, send guests communications relating to their reservations, provide customer service and support, verify identity, send marketing communications via SMS, process transactions with partners, share data with Hilton's Third-Party Partner, authenticate mobile accounts, send service-related SMS communications, detect and prevent fraud, and engage in sales activities for group bookings. 我们不会将您的电话号码用于电话营销。Nonetheless, if you would like to register on the list of opposition to telephone canvassing, you may do so at www.bloctel.gouv.fr.

Additional Provision Applicable to Hong Kong Consumers

If you are based in Hong Kong, we will obtain your consent on or before sending you any marketing messages. You may opt out of receiving marketing messages from us at any time by using the unsubscribe link found in our marketing messages.

If you would like to access or correct your personal information, please contact the Data Protection Officer (“DPO”) at DataProtectionOffice@hilton.com, or complete the paper form available from the front desk at any of our hotels. We may require further information from you in order to verify your identity before processing your request. In certain circumstances where permitted to do so under applicable law, we may refuse to fulfil your request.

Additional Provision Applicable to Korean Data Subjects

信息和沟通服务的当地代表

附录 A
附加条款适用于处理中国居民或公民信息
某些国家/地区和美国各州居民的个人信息

本附录为居住在已颁布隐私法的国家/地区和美国各州的个人提供额外信息，赋予这些司法管辖区的居民某些额外权利。Once effective, the U.S. states include, but are not limited to, California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Montana, Nevada, Oregon, Tennessee, Texas, Utah, and Virginia. These countries include, but are not limited to, those in the European Economic Area (EEA), the United Kingdom and Switzerland, as well as Australia, Brazil, China, Korea, Hong Kong, Monaco, Israel, Japan, Nigeria and Türkiye. 本附录概述了希尔顿有义务向您提供的某些其他信息，以及根据适用当地法律，您对处理个人信息享有的某些权利。如果本附录与本《声明》正文中的任何条款产生冲突，以本附录为准。

管理员：Please refer to the Data Protection Office at DataProtectionOffice@hilton.com for the contact information of other entities that may receive your personal data.

数据保护官：Hilton's Data Protection Officer may be contacted by email at DataProtectionOffice@hilton.com, or at the following address:

Attn: Data Protection Officer 7930 Jones Branch Drive, McLean, VA 22102 USA

Purposes and Legal Basis for Processing

Hilton processes your personal information for the purposes set forth in the section titled Collection of Personal Information - Generally and the section titled Collection of Personal Information - Notice at Point of Collection of the main body of this Statement.

希尔顿处理这些信息的法律依据包括：为履行我们的合同义务、遵守我们的法律义务、保护我们的员工、宾客和其他人的安全、维护我们合法的商业利益，以及您的同意。

处理个人信息的特别法律依据基于提供或收集这些数据之目的：

参加希尔顿荣誉客会：We process the personal information obtained in connection with your participation in the Hilton Honors program on the basis of our contractual relationship with you, consent if legally required, and for pursuing our legitimate business interests, including to personalize your use of our services and applications, to communicate news and promotional items, and to deliver personalized advertising and content.

调查：完成调查是自愿的，我们在您同意的前提下以及为促进我们的商业利益（包括市场营销、服务改进和分析）处理从调查中获得的信息。

酒店内收集： 当您预订酒店时和住宿在我们任一酒店时，我们会根据与您的合同关系，处理您的姓名、地址、联系信息以及您的住宿详情（抵达和离店的日期和时间、车辆信息以及其他旅行或入住信息）。

• We also process such data for pursuing our legitimate business interests, with your consent if legally required, including for marketing, service improvements, administration of our e-Folio program, and analytics and service personalization, as described in the sections referenced above of our Global Privacy Statement.
• 如有必要，在您登记/入住我们的酒店时，我们会收集某些额外的个人信息（例如身份证或护照信息），以履行我们的法律义务。
• 我们会在酒店使用闭路电视和其他安全措施来获取或记录客人及来宾在公共区域的影像，以及有关您在我们的酒店中位置的信息（通过房卡和其他技术手段），以保护我们酒店的员工、客人和来宾。
• 我们处理与我们酒店服务（例如礼宾服务、健身俱乐部、水疗、活动、儿童保育服务、设备租赁以及数字钥匙功能）相关的个人信息，以便为您提供服务并实现自身商业利益，包括上述《全球隐私声明》相关部分所涉及的市场营销、服务改进、e-Folio 程序管理、分析和服务个性化。

活动资料：We process the personal information obtained in connection with your event on the basis of our contractual relationship with you and for pursuing our legitimate business interests, with your consent if legally required, including for marketing, service improvements, and analytics and service personalization, as described in the sections referenced above of our Global Privacy Statement.

社交媒体：Participation in Hilton–sponsored social media activities and offerings is voluntary – we process information obtained from social media participation on the basis of your consent if legally required and for pursuing our legitimate business interests, including for marketing, service improvements, and analytics and service personalization, as described in the sections mentioned above of our Global Privacy Statement.

促销和抽奖：参与抽奖、比赛以及其他促销活动遵守自愿原则。我们会基于您的同意以及必要情况处理从这些参与中所获的信息。We also use certain data for our business purposes, including for marketing, service improvements, administration of our e–Folio program, and analytics and service personalization, as described in the sections referenced above of our Global Privacy Statement.

直销：基于您的同意，我们使用您的个人信息，向您发送营销信息。You may withdraw your consent for direct marketing communications at any time by contacting us at customer_privacy@Hilton.com or by following the unsubscribe instructions in the marketing message, or by logging in to your Hilton Honors account and updating your communication preferences.

特许经营和所有权机会：We process this information on the basis of our contractual relationship with you and for our related legitimate business interests, including maintaining and promoting the Hilton brand and facilitating direct communication between properties within the Hilton Portfolio of Brands.

WMBE 供应商：Participation in Hilton's Supplier Diversity Program is voluntary – we process this information based on your consent and for our related business legitimate interests, including maintaining and enhancing our diversity program.

Retention: 我们保留您个人信息的时间是完成目的而收集信息所需时间，通常是在所有合同关系时间内以及此后法律规定或适用法律允许的任何时段。我们的保留政策反映适用法的时效期限和法律要求。

Data Subject Rights

Some regional, national, and state laws confer rights relating to personal data as indicated in the Personal Data Requests Portal. Residents of certain jurisdictions may have the following rights.

访问、更正和消除要求：您拥有权利：

• ask us to confirm whether we are processing your personal information and receive information on how your data is processed
• 获得您个人信息的副本
• 要求我们更新或更正您的个人信息
• 在某些情况下要求我们删除个人信息

反对处理权：您有权要求希尔顿停止处理您的个人信息：为包括资料搜集在内的市场营销活动

• 为统计目的
• 如果此类处理是基于我们合法的商业利益，除非我们能证明这种处理有充分的合法基础或我们需要处理您的个人信息以建立、行使或捍卫合法要求

限制处理权：您有权要求希尔顿限制处理您的个人信息：

• 而希尔顿正在评估或回应您的要求，以更新或更正您的个人信息，如果此类处理不合法并且您不希望希尔顿删除您的数据。
• 如果希尔顿不再需要此类数据，但您希望我们保留数据以建立、行使或捍卫合法要求
• 如果对基于我们合法商业利益而进行的数据处理，您已提交反对意见，请等待我们对此类要求作出回应

我们根据您的要求限制处理您的个人信息，在重新处理之前将事先通知您。

Right to Object to Sale and Share: You have the right to request that Hilton not sell or share your personal information. Please visit our website at datarights.hilton.com to submit your request or click on the Do Not Share or Sell My Information link at the bottom of any Hilton website. You also may call our toll-free telephone number: (800) 413-7470, email the Data Protection Office (“DPO”) at DataProtectionOffice@hilton.com, or send a letter to the Data Protection Office at 7930 Jones Branch Drive, McLean, Virginia, USA 22102.

数据迁移要求：您有权要求我们向您或第三方提供您所指定的某些个人信息，这些信息的格式常用且机器可读。但是请注意，数据迁移权只适用于我们从您那里直接获得的个人信息并且只适用于我们基于您的同意或合同的履行而进行的处理。

提交要求：Your requests may be submitted by accessing the Data Subject Rights Request Portal or in writing to DataProtectionOffice@hilton.com, or the Hilton Data Protection Officer, 7930 Jones Branch Drive, McLean, VA 22102, USA. You may also update your personal information as provided in section titled (Changing and Accessing Your Personal Information) of the main body of this Global Privacy Statement.

We will respond to all such requests within the time period permitted by law. 但请注意，根据相关数据保护法律，某些个人信息可能不被允许行使此类权利。此外，如果我们无法恰当验证请求者的身份，将不会对任何请求作出回应。我们可能会向您所要求的后续数据副本收取合理费用。

If you want to present a complaint or have concerns about our data practices or the exercise of your rights, you may either contact Hilton at DataProtectionOffice@hilton.com or the supervisory authority in the Member State of your residence. For the EEA, the supervisory authorities are available at the European Data Protection Board’s website. For the UK, the supervisory authority is available at ico.org.uk.

撤消同意权：我们仅根据您的同意（例如向您个人邮箱账户发送直销材料）进行处理，您有权撤消您的同意。You may withdraw your consent to marketing activities by following the instructions on any marketing emails, or contacting customer_privacy@hilton.com. For any other activities for which you have previously consented, you may contact DataProtectionOffice@hilton.com to withdraw such consent.

Right to Object to Segmentation (also referred to as profiling) and Automated Decision Making: You have the right to object to segmentation or profiling and automated decision making. 我们根据地理、行为、人口统计等某些共同特征，使用个人信息将消费者大群体划分为若干亚群体（细分市场）。

在获得您的同意的情况下，我们采取自动决策（意即没有人为干预）的方法，使用市场细分和/或您具体的个人信息，根据您的特征（例如折扣房价或基于您的地理、行为或人口统计数据的其他特殊优惠）为您提供某些利益。例如，如果您在一周工作日内经常出差去法国并入住酒店，我们可以向您提供法国希尔顿酒店的特别优惠。

International Data Transfers: 我们可能把根据此《声明》所述目的收集的个人信息传输至有效保护力不被欧洲委员会承认的国家/地区。更多情况下，我们会将您的个人信息传输至美国。

我们使用适当的保护措施，将个人信息转移至我们位于不同司法管辖区的附属公司。我们在需要的地方，已实施数据转移协议，例如欧盟委员会标准合同条款或其他与此类目的相关的保护措施。如需数据转移方面的条款或额外信息的复本，您可将要求发送至 privacy@hilton.com。

附录 B
附加条款适用于处理中国居民或公民信息
INFORMATION OF DATA SUBJECTS IN TÜRKIYE

For data subjects in Türkiye, this Appendix outlines certain additional information that Hilton is obligated to provide to you, as well as certain rights you have with respect to the processing of your personal information, pursuant to applicable local laws. This Appendix will control to the extent it conflicts with any provision in the main body of this Statement, or Appendix A, as applicable.

数据控制方。Hilton Domestic Operating Company Inc. is the Hilton entity for all guest data and Hilton's marketing activities.

Your personal data may be processed by other Hilton entities in Türkiye who act as a data controller based on the Hilton property you stay at. 在此类情况下，相关希尔顿实体将作为您个人数据的控制者，必要时该控制者将向您提供单独的隐私声明。

数据控制方代表。You may contact our data controller representative in Türkiye by email or mail to handle questions and complaints in connection with the processing of your personal data if you are in Türkiye.

• Esin Attorney Partnership
  info@esin.av.tr
  Akatlar Mah. Ebulula Mardin Cad. Gül Sok. No. 2

处理您个人数据的法律依据。希尔顿根据关于个人数据保护 6698 号法案（“数据保护法”）第 5 条，出于全球隐私声明中给出的目的处理您的个人数据时，基于以下法律依据：

• 处理您的个人数据是必要的，前提是与您和希尔顿之间订立或履行合同直接相关；
• 希尔顿必须进行处理，方能遵守我们的法律义务；
• 为希尔顿的合法利益而必须处理，前提是不侵犯您的基本权利和自由；或
• 您的明确同意。（请注意，仅当我们需要您同意处理时，才会依赖您的明确同意；如果我们依赖上述其他法律依据之一时，则不需要您的明确同意。）

您的权利。您拥有《数据保护法》第 11 条规定的权利，并可通过以下方式联系我们行使您的权利：DataProtectionOffice@hilton.com 或 Data Protection Officer, Hilton, 7930 Jones Branch Drive, McLean, VA 221102, USA。

在您申请中的请求事项，将根据请求性质尽快解决，最长需要三十天，不收取任何费用。但是，如果您的请求使我们公司产生额外费用，则可能向您收取土耳其个人数据保护委员会确定的税费。

修订。The following sections of the Global Privacy Statement do not apply to individuals in Türkiye: 第二段的以下内容：使用我们的任何产品或服务并/或同意本《声明》（例如，在注册我们任何产品或服务时）即表明，您了解并认可我们按照本《声明》中的描述收集和使用个人信息。

国际个人数据传输部分的以下内容：为了提供这种服务，您知晓我们可在希尔顿品牌组合旗下成员酒店、我们的服务提供商以及可能位于您所在国家/地区以外的其它第三方之间，共享您的个人信息。

语言。本声明提供英语和土耳其语版本。如果英语和土耳其语版本之间存在不一致或不同解释，以土耳其语版本为准。

国际数据传输。Hilton is required to transfer your personal data to its affiliates outside of Türkiye, which includes Hilton Domestic Operating Company Inc., all resident in the United States, as well as their in-country suppliers, in order to complete reservations, process Hilton Honors memberships and conduct promotion activities through its website, whose servers are located abroad. 未经您同意，希尔顿无法通过本网站为您提供服务。因此，当您访问本网站时，关于个人数据的跨境传输我们会征求您的同意。

这种征得同意的做法只是暂时的，希尔顿正在致力于使用承诺书，这是跨境数据传输的替代法律机制之一。因此，一旦承诺书准备就绪并得到个人数据保护局批准，征得同意的做法将被终止。

附录 C
附加条款适用于处理中国居民或公民信息
中国居民或公民信息

1. 简介

For individuals who reside in the People's Republic of China (for the purposes of this Privacy Statement, excluding Hong Kong Special Administrative Region, Macau Special Administrative Region and Taiwan) ("China") or citizens of the People's Republic of China, we understand that privacy is important to you. 因此在本附录中，我们将向您介绍希尔顿如何收集、使用、披露或以其他方式处理，来自于或采集于您的个人信息（包括敏感个人信息，如适用）。在使用希尔顿的任何服务或产品之前，请仔细阅读本声明。

This Appendix does not replace the main body of this Statement, but supplements the main body of this Statement, and should be read together with the main body and Appendix A, as applicable. 如果此附录与声明正文之间存在任何冲突或不一致，请以此附录为准。

“个人信息”与中华人民共和国个人信息保护法（不时修订）中的定义具有相同含义。此类信息能以电子方式或其他方式记录，并且可以单独或结合包括敏感个人信息在内的其他信息，来识别特定自然人的身份或反映其活动。"Personal Information" or "Information" used in the main body of this Statement and in this Appendix also includes sensitive personal information (where applicable). “sensitive personal information” shall have the same meaning as defined in the Personal Information Protection Law of the People’ Republic of China (as revised from time to time). The sensitive personal information involved in this Statement may include passport or ID card information, payment card information, spending amount, accommodation information (such as arrival and departure time), interaction with Hilton websites, and precise positioning information.We only process your sensitive personal information where such processing is strictly necessary for the relevant purposes identified in the sections titled Collection of Personal Information – Generally and Collection of Personal Information – Notice at Point of Collection in the main body of this Statement. Our processing of your sensitive personal information will adhere to the safeguards mandated by applicable laws and regulations. However, depending on the specific type of sensitive personal information involved, such processing may result in various impacts, including potential harm to your reputation, property, or personal safety in the event of a data breach. You agree that the sensitive personal information will be processed in accordance with the purposes and methods set forth in this Statement.

2。个人信息的收集和使用

Regarding the following issues, please refer to the section titled Collection of Personal Information – Generally and Collection of Personal Information – Notice at Point of Collection in the main body of this Statement.

• The types of personal information that we collect from you (including sensitive personal information).
• 我们如何收集和使用您的个人信息，使用您的个人信息的目的，以及如何共享或披露您的个人信息。

希尔顿不会故意收集或披露 14 岁以下未成年人的个人信息。当我们从 14 岁以下的个人收集个人信息时，需要获得其父母或监护人的同意，并且将根据适用法律法规中的保障措施处理此类信息。

We will use your personal information with your consent or as otherwise required or permitted by applicable law. (e.g. where the processing is necessary for concluding or performing a contract with you, where the processing is necessary to perform legal obligations, etc.). If we want to use your personal information for other purposes, we will obtain your further consent unless the further use without your new consent is required or permitted by applicable law. Where we rely on your consent to process your personal information and you refuse to give consent, we might not be able to provide all of our services.

3。个人信息的披露和共享

With your express consent, where required, we may share your personal information for the purposes described in this Statement with members of the members of Hilton worldwide brand portfolio, our service providers, and other third parties as follows:

• 希尔顿全球酒店集团控股有限公司及其子公司，以及希尔顿品牌组合的成员，包括特许经营酒店和受托管理酒店，
• 代表希尔顿提供服务的服务提供商，
• 支付卡提供商和处理商，
• 公司协议中指定的雇主，
• 希尔顿网站和移动应用程序的广告联盟和分析提供商。

The processing of your personal information by members of the Hilton Portfolio of Brands, including purposes and means of processing and categories of personal information processed, is governed by this Statement. Please refer to the Data Protection Office at DataProtectionOffice@hilton.comfor the contact information of other entities that may receive your personal data.

Some of the third parties listed above may also process your personal information for their own purposes as data controllers, in which case their own privacy policies will apply, including as to the purposes and means of processing and categories of personal information processed.

To provide and optimize our services, third-party software development kits (SDKs) are embedded in our applications (including WeChat Mini Programs). 下面列出了我们目前嵌入的第三方 SDK 的名称、收集的个人信息类型、收集和使用目的等。如果您对第三方通过 SDK 收集您的个人信息有疑问，请参阅此类第三方的隐私政策。

除了上述情况，我们仍可能向第三方披露个人信息，以便：遵守适用法律或生效的法律程序；回应政府的询问，或者公众和/或政府机构的要求；保护希尔顿、网站访客、宾客、员工或公众的权利、隐私、安全或财产；追求或行使我们的权利；或应对紧急情况。

4。移动和定位服务

如果您下载并使用我们的移动应用程序或其他数字平台，例如我们的微信小程序，我们可能会收集您的个人信息。我们将获得您的同意，并根据本声明收集、使用、披露和以其他方式处理这些信息。如果您允许我们访问您设备上的位置信息，为您提供我们的应用程序功能和服务，此类信息可能包括地理位置信息。我们还会收集设备信息，例如您的手机品牌、型号、操作系统、操作系统版本，引导您前往相应的 APP 商店下载我们的移动应用程序。

您可以通过更改希尔顿荣誉客会应用程序中的设置，或更改您设备的设置，来防止或限制对您位置信息的收集。

5。基于分析和兴趣的广告

我们还与第三方合作，根据您在不同网站、移动应用程序和设备上的在线活动，随时间推移提供有针对性的广告。我们的广告合作伙伴，可能会收集您当前设备上与我们服务相关的活动信息，并结合您在其他网站、移动应用程序和设备上的活动信息。They may collect this information using server logs, Cookies, web beacons, tags, pixels, mobile advertising IDs, cross-device linking and similar technologies. 可能包括您的个人信息。

您可以在当前浏览器或设备上的 Web 浏览器和移动应用程序中，选择退出基于兴趣的广告和跨设备链接。我们目前不响应“不跟踪”信号。For more information, please see the section titled Analytics and Interest-Based Advertising as well as the section titled Cookies and Other Technologies, in the main body of this Statement.

6。更改和访问您的个人信息，以及注销账户

您有权访问、更正和/或（在某些情况下）删除您的个人信息，撤销对我们处理您的个人信息的同意，注销您的会员帐户（如有），反对在自动决策中使用您的个人信息，并对我们如何处理您的个人信息提出投诉。根据其他适用法律，您可能享有其他权利。Please see the contact information in Section 11 below, or the section titled Changing and Accessing Your Personal Information in the main text of this Statement, to learn how to contact us. 我们力求在法律要求的期限内，根据适用法律处理这些请求。 特别是，我们将在收到请求后的 15 天内回复您取消注册的请求，除非存在情有可原的情况，如果预计我们的回复需要超过 15 天，将会通知您预期的时间表。 请注意，如果您要求注销您的会员账户，从注销之日起，您将无法再享受任何会员礼遇。在您注销会员帐户后，您的个人信息将被删除或匿名化，除非适用法律要求我们保留这些信息。

7。我们如何保护个人信息

我们采取合理措施，以便：(i) 保护个人信息免受未经授权的访问、披露、变更或损毁；以及 (ii) 采用恰当的技术和组织措施，确保个人信息准确并及时更新。For more information, please see the section titled How We Protect Personal Information in the main body of this Statement.

对于第三方网站或应用程序收集、使用、披露或以其他方式处理个人信息，我们概不负责。请阅读这些网站和应用程序的隐私政策和使用条款。这适用于：(1) in-hotel internet services we may offer; (2) third-party websites and applications to which the links in our websites and mobile applications may direct; and (3) third-party digital messaging applications or platforms which we use to communicate with you.

8。个人信息的国际间传输

As Hilton operates globally, with your express consent where required, we may transfer your personal information (including your sensitive personal information, if applicable) to jurisdictions outside of China, including United States, Europe, and other jurisdictions where we, our service providers, and other relevant third parties conduct business. In particular, your personal data may be transferred to Hilton Domestic Operating Company Inc. for storage and processing in accordance with this Statement via Hilton's global centralized reservation system, which is deployed in the United States. The personal data stored in Hilton's global centralized reservation system may be further transferred to properties in different countries based on your reservations in accordance with this Statement. Please refer to the Data Protection Office at DataProtectionOffice@hilton.comfor the contact information of other entities that may receive your personal data.

我们将采取适当措施保护您信息的完整性和机密性，并确保您的个人信息按照本声明正文和适用法律得到处理。

9。数据保留期限

我们将保留您的个人信息，保留期限为完成收集信息的目的所需的时间，或法律要求或允许的时间。 We will destroy your personal information in accordance with our retention and records management procedures. For more information, please see the section titled Data Retention Period in the main body of this Statement.

10。本声明的变更

如果我们对本声明进行重大变更，我们将发布这些变更。For more information, please see the section titled Changes to Statement Content in the main body of this Statement. 如果当地法律要求，我们将通知您和/或征求您的同意。

11。有问题或疑虑时的联系信息

如果您对个人信息保护有任何疑问、要求或投诉，请联系我们。You can contact our Data Protection Office at DataProtectionOffice@hilton.com, or, if you would like to get in touch with the contact in China, please contact: China_Privacy@hilton.com.

APPENDIX D
附加条款适用于处理中国居民或公民信息
INFORMATION OF BRAZIL RESIDENTS OR CITIZENS

To the extent you are located within Brazil or is any form subject to the Brazilian General Data Protection Law – Federal Law nº 13709/18 (“LGPD”), the provisions indicated below should be read and applied to the processing or your personal data accordingly. Unless stated otherwise in this Annex, the remainder of the Policy, including Appendix A as applicable, shall not vary and shall remain in full force and effect.

1. Data Subjects Rights

Under certain circumstances, you have the following rights under the LGPD in relation to your personal data:

• Right to Information: right to obtain clear, transparent and understandable information on how we use your personal data;
• Right of confirmation and access: right to receive confirmation and access your personal data held by us about you;
• Right of rectification: right to have your personal data corrected if they are outdated, inaccurate or incorrect and/or to complete them;
• Right of anonymization, blocking or deletion: Anonymize, block or eliminate any unnecessary or excessive data or data processed in noncompliance with the applicable law;
• Right to withdraw consent at any time for consent-based data processing: right to withdraw your consent to the processing of your personal data when such processing is based on consent;
• Right to data portability: right to request copying, transferring your personal data to another database in accordance with further regulation of the local authority;
• Right to receive information about public and private entities: right to receive information about public and private entities with which your personal data is shared;
• Right to object: right to oppose any processing activity based on a legal basis other than consent in case there is violation of the LGPD;
• Right to review automated decisions: right to review of decisions, whenever they are based only on automated processing of personal data, by a natural person, whenever it affects your interests;
• Right to file a complaint with your local Data Protection Authority or consumer protection entities.

2。Legal Bases

Hilton usually relies on one of the following legal bases when processing your personal data for the purposes indicated in the Global Privacy Statement in accordance with Article 7 of the LGPD:

• Data subject’s consent (art. 7, I)
• For compliance of a legal or regulatory obligation (art. 7, II)
• Whenever necessary for the performance of a contract or preliminary procedures relating to contracts in which the data subject is a party (art. 7, V)
• Whenever necessary for the legitimate interests of the controller or of third parties, except in the prevalence of fundamental rights of the data subject (art. 7, IX).

However, depending on the concrete situation, other legal bases set forth in the LGPD may apply.

3。International Transfers

Where we transfer information that originates in Brazil to a country outside of Brazil, we will take steps to make sure such transfer is carefully managed to protect your privacy rights:

• Transfers within the Hilton Group of Companies may be covered by an agreement entered into by members of Hilton (an intra-group agreement) which contractually obliges each member to ensure that your information receives an adequate and consistent level of protection wherever it is transferred within Hilton in accordance with the LGPD;
• Where we transfer your data outside of the Hilton Group of Companies, including to other companies providing us with a service, we will obtain contractual commitments and assurances from them to protect your information, such as standard contractual clauses or binding corporate rules. In the lack of instructions from the local supervisory authority, we may follow the standard models adopted under the European Union or by other competent authorities until then;
• We are also able to transfer personal information to countries which are recognized as providing an adequate level of legal protection or where we can be satisfied that alternative arrangements are in place to protect your privacy rights; and

Please contact us if you want further information on the specific mechanism used by us when transferring your personal data out of Brazil.

APPENDIX E
附加条款适用于处理中国居民或公民信息
DATA OF DATA SUBJECTS IN THE PRINCIPALITY OF MONACO

For data subjects in the Principality of Monaco, this Appendix outlines certain additional information that Hilton is obligated to provide to you, as well as certain rights you have with respect to the processing of your personal data, pursuant to applicable local laws. This Appendix will control to the extent it conflicts with any provision in the main body of this Statement or Appendix A, as applicable.

1. LEGAL BASES FOR THE PROCESSING OF YOUR PERSONAL DATA

Hilton relies on legal bases while processing your personal data for the purposes indicated in the main body of the Global Privacy Statement in accordance with the Monegasque Law No. 1.165 of 23 December 1993 on Protection of Personal Data, as amended (the “Data Protection Law”).

2。PERSONAL DATA ACCESS AND CUSTOMER RIGHTS

In accordance with the Data Protection Law, you have a right of access to and a right to the rectification, erasure and portability of your personal data as well as a right to object and restrict the processing of this personal data. With proof of your identity, you may exercise your rights by contacting the Data Protection Officer (“DPO”) by email at DataProtectionOffice@hilton.com. If, after contacting the DPO, you do not feel that your rights have been observed, you may make a claim with the French Data Protection Authority (CNIL – Commission Nationale de l'Informatique et des Libertés) or the Monegasque authority, the Commission for Control of Personally Identifiable Information (CCIN.mc – Commission de Contrôle des Informations Nominatives).

3。PERSONAL DATA SECURITY

In case of breach of your personal data liable to pose a high risk to your rights and freedoms, Hilton shall inform you as soon as possible and take all necessary measures to limit the risks related to this breach. Whether your data is processed by Hilton or by its subcontractors and partners, the same security and privacy requirements apply to your personal data.

4。INTERNATIONAL TRANSFERS OF PERSONAL DATA

Hilton is required to transfer your personal data to its affiliates outside of the Principality of Monaco which includes Hilton Domestic Operating Company Inc., all resident in the United States, as well as their in-country suppliers, in order to complete reservations, process Hilton Honors memberships and conduct promotion activities through its website, whose servers are located abroad.

When a subcontractor or partner is located in a country that has not been recognized as having an adequate level of protection as the one offered by the Data Protection Law (which is the case for the United States), Hilton must fulfil a transfer authorization form in order to comply with the Data Protection Law’s own requirements on the security and privacy of personal data and the subcontractors should ensure a satisfactory protection of your personal data.

5。LANGUAGE

Statement is available in English and French. If there is any inconsistency or different interpretation between the English and French versions, the English text shall prevail.