Към съдържанието

Privacy Policy

Last updated: 23 June 2026

This Privacy Policy explains how The Hero's Journey, as the data controller, collects, uses and protects your personal data when you visit herosjourney.world or contact us. We comply with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and the Bulgarian Personal Data Protection Act.

1. Data controller

The controller of your personal data is:

  • Company: „ХИРОС ДЖЪРНИ“ ЕООД
  • Company ID (ЕИК): 208787495
  • Email: hero.on.journey@gmail.com
  • Phone: +359 888 695 532

2. What personal data we collect

We collect only the data you provide yourself, plus minimal technical data for security:

  • Contact form data: your name, email address and the content of your message.
  • Technical security data: when you submit the form, the anti-spam service (hCaptcha) processes limited technical data (such as your IP address and browser information) to confirm you are not an automated bot.

We do not collect special (sensitive) categories of personal data, and we do not carry out automated decision-making or profiling for advertising purposes.

3. Purposes and legal bases for processing

We process your personal data for the following purposes and on the following legal bases under Article 6 GDPR:

  • To respond to your inquiry and get in touch with you — based on your consent and/or to take steps at your request prior to entering into a possible contract (Art. 6(1)(a) and (b)).
  • To protect the site and contact form from spam and abuse — based on our legitimate interest in keeping the service secure (Art. 6(1)(f)).

4. Cookies

We use only strictly necessary cookies. For details, please see our Cookie Policy.

5. Recipients and data processors

To provide the service, we share data with carefully selected providers acting as data processors on our behalf and on our instructions:

  • Web3Forms — delivers contact-form messages to our inbox.
  • hCaptcha (Intuition Machines, Inc.) — protects the contact form from spam and bots.
  • Email provider (Google/Gmail) — receiving and storing correspondence.

Some of these providers may be located outside the EU/EEA (e.g. in the USA). In such cases, transfers are carried out with appropriate safeguards under the GDPR — for example Standard Contractual Clauses or a European Commission adequacy decision. We do not sell your personal data to third parties.

6. Data retention

We keep contact-form messages only as long as necessary to respond to your inquiry and for a reasonable period afterwards (as a rule, up to 12 months), unless applicable law requires a longer period or you have requested earlier deletion.

7. Your rights

Under the GDPR you have the right to:

  • access your personal data;
  • rectify inaccurate data;
  • erasure (the “right to be forgotten”);
  • restrict processing;
  • data portability;
  • object to processing;
  • withdraw consent at any time, without affecting the lawfulness of processing before withdrawal;
  • lodge a complaint with the supervisory authority.

To exercise your rights, write to us at hero.on.journey@gmail.com. You also have the right to lodge a complaint with the supervisory authority: Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd, 1592 Sofia, Bulgaria, www.cpdp.bg, kzld@cpdp.bg, tel. +359 2 915 3518.

8. Data security

We apply appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration or misuse.

9. Changes to this policy

We may update this policy from time to time. The current version is always published on this page with the date of the last update.

10. Contact

For questions about this policy or the processing of your personal data, contact us at hero.on.journey@gmail.com or +359 888 695 532.

© 2026 The Hero's Journey. Всички права запазени.